Manifest position 260 · CrUX rank bucket 1000
https://shopify.com
Coverage complete
Atomic audit completed across four representative public templates plus the signup handoff.
Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | The CSS capability probe found no color-scheme declaration and no prefers-color-scheme rule; the emulated dark capture is the same fixed palette rather than a preference-driven theme. F1 medium: The visual design is dark, but it does not respond to the user’s colour-scheme preference. |
respect-user-preferencesrespects-reduced-motion | issues | high | Under prefers-reduced-motion: reduce, the page still reported twelve running animations (nine at 400ms and three at 1000ms), while the CSS probe found no reduced-motion media rule. F2 medium: Motion is not fully adapted for reduced-motion users. |
respect-user-preferencesrespects-contrast | pass | high | Preference-emulated screenshots remained usable and the contrast capture preserved readable controls. |
implement-natural-interactionsview-transitions | issues | high | The rendered CSS capability probe found no view-transition rules across the homepage, despite navigation among multiple brochure routes. F3 medium: Page and state changes do not use declarative View Transitions. |
implement-natural-interactionsscroll-driven-animations | issues | high | The CSS capability probe found no animation-timeline or scroll-timeline usage on a 12,000px homepage with extensive animated content. F4 low: The animation-heavy page does not expose declarative scroll timelines. |
implement-natural-interactionsphysical-gestures | pass | high | DOM/CSS inspection and animation probes examined route, scroll and gesture implementation; native scrolling remained usable. |
provide-guided-navigationscroll-state-aware-chrome | pass | high | Screenshots and DOM inspection show persistent global navigation, a responsive menu, descriptive route links and sticky chrome without clipped overlays. |
provide-guided-navigationanchored-positioning | pass | high | Screenshots and DOM inspection show persistent global navigation, a responsive menu, descriptive route links and sticky chrome without clipped overlays. |
provide-guided-navigationdirects-attention | pass | high | Screenshots and DOM inspection show persistent global navigation, a responsive menu, descriptive route links and sticky chrome without clipped overlays. |
maximize-content-reduce-noiseno-intrusive-interruptions | issues | high | All four mobile screenshots show a fixed consent panel covering roughly the bottom 100px, including primary pricing and checkout content. F5 medium: The persistent cookie panel consumes scarce mobile viewport space. |
maximize-content-reduce-noisesemantic-dismissible-primitives | issues | high | The semantic DOM probe found zero dialog, popover, or details elements and one role=dialog custom overlay. F6 medium: The consent overlay is a custom role=dialog rather than a native dialog or popover. |
maximize-content-reduce-noisereduced-chrome | pass | high | First-viewport screenshots show clear hero content and primary actions with the consent surface as the only persistent interruption. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | pass | high | All four 360x800 layout captures reported zero horizontal overflow and a valid viewport meta tag. |
adapt-to-the-form-factorcomponent-level-responsiveness | pass | high | All four 360x800 layout captures reported zero horizontal overflow and a valid viewport meta tag. |
adapt-to-the-form-factorinput-modality-aware | issues | high | The focusable-control probe measured consent icon buttons at 32x32px. Lighthouse accessibility also identified control-name problems affecting non-pointer use. F10 medium: Consent controls include undersized touch targets. |
support-core-task-successclear-purpose-and-primary-action | pass | high | Home, start, pricing and checkout pages expose clear primary CTAs; the secure signup handoff was attempted and presented an explicit connection-verification state rather than a dead screen. |
support-core-task-successprimary-flow-completion | pass | medium | Home, start, pricing and checkout pages expose clear primary CTAs; the secure signup handoff was attempted and presented an explicit connection-verification state rather than a dead screen. |
support-core-task-successclear-system-state-and-recovery | pass | high | Home, start, pricing and checkout pages expose clear primary CTAs; the secure signup handoff was attempted and presented an explicit connection-verification state rather than a dead screen. |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse measured FCP 4.8s, LCP 7.6s, TTI 7.6s and scored performance 0.62. The separate trace was faster (LCP 844ms), showing substantial run/network variance but not negating the poor cold-load result. F7 high: Cold-load mobile performance misses the fast-loading bar. |
be-fast-and-stablevisual-stability | pass | high | Layout observers measured CLS 0.000-0.009 across representative pages; trace and Lighthouse supplied load and main-thread timings. |
be-fast-and-stableefficient-main-thread | pass | high | Layout observers measured CLS 0.000-0.009 across representative pages; trace and Lighthouse supplied load and main-thread timings. |
be-fast-and-stableefficient-resource-delivery | issues | high | HAR captured 52 requests and 1,650,831 transferred bytes, including 28 scripts and 826,035 bytes attributed to fetch/XHR; Lighthouse also flagged the network dependency tree. F8 medium: The initial route has a heavy and complex delivery path. |
be-fast-and-stabletrim-unused-and-duplicate-code | pass | high | Layout observers measured CLS 0.000-0.009 across representative pages; trace and Lighthouse supplied load and main-thread timings. |
be-inclusivenames-roles-labels | issues | high | Lighthouse accessibility scored 0.92 and failed aria-command-name, button-name, and label-content-name-mismatch; the DOM probe also found an empty 32x32 consent button without an aria-label. F9 high: Some interactive controls lack reliable accessible names. |
be-inclusivesufficient-contrast | pass | high | Lighthouse, semantic DOM, landmarks, heading structure, target measurements and mobile screenshots were inspected. |
be-inclusivestructure-and-focus | pass | high | Lighthouse, semantic DOM, landmarks, heading structure, target measurements and mobile screenshots were inspected. |
be-inclusivelegible-text | pass | high | Lighthouse, semantic DOM, landmarks, heading structure, target measurements and mobile screenshots were inspected. |
be-inclusivezoom-reflow-targets-and-media | pass | high | Lighthouse, semantic DOM, landmarks, heading structure, target measurements and mobile screenshots were inspected. |
follow-best-practicesno-console-errors | pass | high | Lighthouse and rendered DOM confirmed HTML doctype, UTF-8, viewport, valid landmarks and platform diagnostics. |
follow-best-practicessound-document-and-assets | issues | high | The images primitive found 26 of 53 images without dimensions, 5 without srcset, 43 legacy-format assets, 2 oversized images and 42 missing alt attributes (some may be intentionally decorative). F11 medium: Image markup and delivery have avoidable quality gaps. |
follow-best-practicesbrowser-platform-hygiene | issues | high | Lighthouse reported one deprecated-API warning and one BFCache failure reason; best-practices scored 0.81. F12 medium: The page uses a deprecated API and prevents back/forward cache restoration. |
be-discoverabletitle-and-description | pass | high | Raw-HTML discoverability was 95-99% across four templates; titles/descriptions survived, all anchors had hrefs, and canonical/hreflang/robots/sitemap/JSON-LD metadata were present. |
be-discoverablecrawlable-and-mobile-friendly | pass | high | Raw-HTML discoverability was 95-99% across four templates; titles/descriptions survived, all anchors had hrefs, and canonical/hreflang/robots/sitemap/JSON-LD metadata were present. |
be-discoverablecanonical-and-indexing-signals | pass | high | Raw-HTML discoverability was 95-99% across four templates; titles/descriptions survived, all anchors had hrefs, and canonical/hreflang/robots/sitemap/JSON-LD metadata were present. |
be-discoverablestructured-and-shareable-metadata | pass | high | Raw-HTML discoverability was 95-99% across four templates; titles/descriptions survived, all anchors had hrefs, and canonical/hreflang/robots/sitemap/JSON-LD metadata were present. |
be-private-and-securesecure-transport-and-headers | issues | high | The headers primitive confirmed HTTPS, HSTS and nosniff, but found no Content-Security-Policy. Cookies were Secure/SameSite=Lax and the secrets scan found no exposed credentials. F13 high: The main document lacks a Content-Security-Policy. |
be-private-and-securedata-minimisation-and-third-parties | pass | high | Headers, cookies, trackers, HAR and secret scans were inspected; HTTPS/HSTS/nosniff, a secure SameSite cookie, no known trackers and no exposed secrets were observed. |
be-private-and-securein-context-permissions-and-modern-auth | pass | high | Headers, cookies, trackers, HAR and secret scans were inspected; HTTPS/HSTS/nosniff, a secure SameSite cookie, no known trackers and no exposed secrets were observed. |
be-private-and-securedefensive-browser-policies | issues | high | The headers primitive found no X-Frame-Options or CSP frame-ancestors, no Referrer-Policy, and no Permissions-Policy. F14 high: Several browser-enforced defensive policies are absent. |
be-resilientprogressive-enhancement | pass | high | No-JS/raw-HTML coverage was 95-99%; mobile layouts and the Cloudflare verification recovery state remained coherent. |
be-resilientresilient-runtime-behaviour | pass | high | No-JS/raw-HTML coverage was 95-99%; mobile layouts and the Cloudflare verification recovery state remained coherent. |
be-resilientoffline-and-installable | not-applicable | high | These public brochure and commerce pages are not an installable app; offline mutation or checkout is intrinsically inappropriate. |
be-resilientnetwork-and-http-failure-states | pass | high | No-JS/raw-HTML coverage was 95-99%; mobile layouts and the Cloudflare verification recovery state remained coherent. |
be-internationalisedlang-dir-and-logical-properties | pass | high | HTML declares lang=en and dir=ltr, uses logical CSS, exposes extensive hreflang alternatives, and pricing rendered locale-specific GBP amounts. |
be-internationalisedlocale-aware-data | pass | high | HTML declares lang=en and dir=ltr, uses logical CSS, exposes extensive hreflang alternatives, and pricing rendered locale-specific GBP amounts. |
be-internationalisedtime-zone-correctness | not-applicable | high | No time or event data is presented on the representative brochure, pricing, checkout-information, or start pages. |
be-trustworthyno-dark-patterns | pass | high | Pricing shows monthly commitment and introductory terms prominently; cookie choices are equally prominent; signup security state explains what is happening. |
be-trustworthyhumane-error-handling | pass | high | Pricing shows monthly commitment and introductory terms prominently; cookie choices are equally prominent; signup security state explains what is happening. |
be-trustworthytrustworthy-input-assistance | pass | high | Pricing shows monthly commitment and introductory terms prominently; cookie choices are equally prominent; signup security state explains what is happening. |
be-trustworthysafe-commercial-and-account-flows | pass | high | Pricing shows monthly commitment and introductory terms prominently; cookie choices are equally prominent; signup security state explains what is happening. |
be-sustainableoptimised-assets | issues | high | The images primitive classified 43 of 53 image elements as legacy formats and found missing responsive sources; the route transferred 1.65MB on initial load. F15 medium: Asset selection leaves measurable transfer-efficiency opportunities. |
be-sustainableno-wasteful-work | pass | high | HAR, images and trace evidence quantified transferred bytes, media, third parties and background/main-thread work. |
be-sustainablethird-party-and-media-budget | pass | high | HAR, images and trace evidence quantified transferred bytes, media, third parties and background/main-thread work. |
be-agent-readystructured-agent-capabilities | pass | high | Raw HTML is 95-99% visible to non-JS agents; navigation exposes Universal Commerce Protocol and agent tools, and the sitemap includes /SKILL.md and agentic routes. |
be-agent-readyon-device-inference | not-applicable | high | No audited journey needs local summarisation or language-model inference; server-side commerce AI marketing does not make this browser capability applicable. |
be-memory-efficientno-leak-under-repeated-interaction | pass | high | Heap snapshots before and after ten full-page scroll cycles decreased from 21,582,951 to 21,515,569 bytes and from 399,491 to 398,316 nodes, with no growing Detached constructor in summaries. |
be-memory-efficientbounded-footprint | pass | high | Heap snapshots before and after ten full-page scroll cycles decreased from 21,582,951 to 21,515,569 bytes and from 399,491 to 398,316 nodes, with no growing Detached constructor in summaries. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | high | Heap snapshots before and after ten full-page scroll cycles decreased from 21,582,951 to 21,515,569 bytes and from 399,491 to 398,316 nodes, with no growing Detached constructor in summaries. |
Provenance
Canonical report: results/atomic/reports/0260-shopify_com.json
Report SHA-256: 4a3b5f187a55038105cc7690316a5ec562581d184c4b867094958367230b7b48
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/shopify_com/2026-07-19T12-57-19-695Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/shopify_com/2026-07-19T12-57-19-695Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.