Manifest position 431 · CrUX rank bucket 1000

https://xosodaiphat.com

Coverage complete

Representative audit of five page archetypes/journeys. Excluded: authenticated/account states, every date/province variant sharing audited templates, and destructive/commercial flows not exposed publicly.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	The dark-mode screenshot is pixel-identical in palette and file size to the light capture; computed body background remains rgb(255,255,255), html color-scheme is normal, and no dark scheme is declared. F-001 medium: The site does not adapt to the user’s dark colour preference.
respect-user-preferences `respects-reduced-motion`	pass	high	Reduced-motion emulation matched and the page reported zero active animations; no authored reduced-motion rule was needed for the observed static UI.
respect-user-preferences `respects-contrast`	pass	medium	Lighthouse accessibility scored 1.0 and native keyboard focus remained visible; no contrast failure was reported.
implement-natural-interactions `view-transitions`	issues	high	The platform probe found zero view-transition rules, while the site exposes hundreds of same-origin route links across long result and statistics templates. F-002 low: Full-page route changes have no authored transition continuity.
implement-natural-interactions `scroll-driven-animations`	not-applicable	high	No scroll-linked animation was observed on the representative templates, so there is no implementation to evaluate.
implement-natural-interactions `physical-gestures`	not-applicable	high	No gesture-driven control is part of the representative public journeys.
provide-guided-navigation `scroll-state-aware-chrome`	issues	high	The homepage is 11,148 CSS px tall on mobile, but CSS inspection found no scroll-state query/timeline behavior and the visible header does not provide progress or sticky orientation feedback. F-003 low: Long pages provide no scroll-state-aware orientation aid.
provide-guided-navigation `anchored-positioning`	not-applicable	high	No tooltip, popover or viewport-edge menu overlay was present in the representative paths.
provide-guided-navigation `directs-attention`	pass	high	Direct evidence on representative paths supports this outcome.
maximize-content-reduce-noise `no-intrusive-interruptions`	pass	high	Direct evidence on representative paths supports this outcome.
maximize-content-reduce-noise `semantic-dismissible-primitives`	not-applicable	high	No transient overlay or modal flow appeared in the audited public paths.
maximize-content-reduce-noise `reduced-chrome`	pass	high	Direct evidence on representative paths supports this outcome.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	Direct evidence on representative paths supports this outcome.
adapt-to-the-form-factor `component-level-responsiveness`	pass	high	Representative dense content/listing components reflowed successfully at 360px without overflow; no same component was observed in conflicting container contexts.
adapt-to-the-form-factor `input-modality-aware`	issues	high	The 360px focus/target probe measured many meaningful links at only 14–22px high, including province and date links; the recommended target is substantially larger. Keyboard outlines were visible, so the failure is specifically touch sizing. F-004 medium: Many mobile links have undersized touch targets.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	Direct evidence on representative paths supports this outcome.
support-core-task-success `primary-flow-completion`	pass	high	Direct evidence on representative paths supports this outcome.
support-core-task-success `clear-system-state-and-recovery`	pass	high	Direct evidence on representative paths supports this outcome.
be-fast-and-stable `good-core-web-vitals`	pass	high	Direct evidence on representative paths supports this outcome.
be-fast-and-stable `visual-stability`	pass	high	Direct evidence on representative paths supports this outcome.
be-fast-and-stable `efficient-main-thread`	pass	high	Direct evidence on representative paths supports this outcome.
be-fast-and-stable `efficient-resource-delivery`	issues	high	Lighthouse reports TTI 9.6s and 214KiB potential cache savings; the HAR identifies parser-inserted player/DMCA scripts and a 1.6s GTM request. F-005 medium: Third-party delivery and caching waste delay readiness despite good paint metrics.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Lighthouse estimates 499KiB unused JavaScript, 29KiB legacy JavaScript and 14KiB unminified JavaScript; HAR records 731KiB of script transfer out of 804KiB total. F-006 high: The page ships a large amount of unused and legacy JavaScript.
be-inclusive `names-roles-labels`	issues	high	Lighthouse identifies the Keno table’s fake caption and data cells without headers. The form probe also shows #inputNumberDo has no associated label, relying on placeholder/title. F-007 medium: Data tables and one lookup input lack complete accessible semantics.
be-inclusive `sufficient-contrast`	pass	high	Direct evidence on representative paths supports this outcome.
be-inclusive `structure-and-focus`	pass	high	Direct evidence on representative paths supports this outcome.
be-inclusive `legible-text`	pass	high	Direct evidence on representative paths supports this outcome.
be-inclusive `zoom-reflow-targets-and-media`	issues	high	At 360px, the target probe records dozens of interactive links only 14–22px high, even though the page otherwise reflows without horizontal overflow. F-008 medium: Small targets reduce usability under touch and zoomed/reflowed conditions.
follow-best-practices `no-console-errors`	issues	high	Lighthouse captured a console.error from notification.services.js: notification permission was blocked (messaging/permission-blocked). F-009 low: The page logs an avoidable Firebase messaging error.
follow-best-practices `sound-document-and-assets`	issues	high	The image primitive found 3 images without width/height and 2 below-fold images without loading=lazy; one loading asset remains GIF. F-010 low: Several images omit intrinsic dimensions and below-fold loading hints.
follow-best-practices `browser-platform-hygiene`	issues	high	Lighthouse’s notification-on-start audit points to notification.services.js line 92; the resulting denial also causes the console error. F-011 high: Notification permission is requested on page load.
be-discoverable `title-and-description`	pass	high	Direct evidence on representative paths supports this outcome.
be-discoverable `crawlable-and-mobile-friendly`	pass	high	Direct evidence on representative paths supports this outcome.
be-discoverable `canonical-and-indexing-signals`	pass	high	Direct evidence on representative paths supports this outcome.
be-discoverable `structured-and-shareable-metadata`	pass	high	Direct evidence on representative paths supports this outcome.
be-private-and-secure `secure-transport-and-headers`	issues	high	The headers primitive reports missing CSP, HSTS and nosniff. All four analytics cookies lack Secure and use SameSite=None; three persist for 400 days. F-012 high: HTTPS is used, but baseline security headers and cookie protections are absent.
be-private-and-secure `data-minimisation-and-third-parties`	issues	high	Tracker evidence found 15 third-party origins and five known tracker domains. HAR attributes 42 of 45 requests and 772,761 of 804,382 transferred bytes to third parties. F-013 high: The page has a disproportionate tracking and third-party footprint.
be-private-and-secure `in-context-permissions-and-modern-auth`	issues	high	Lighthouse directly reports notification-on-start and the permission denial error. Authentication was not a covered public flow, so this finding is limited to permission timing. F-014 high: Notification permission is requested without in-context intent.
be-private-and-secure `defensive-browser-policies`	issues	high	The response has no clickjacking protection, Referrer-Policy or Permissions-Policy, in addition to missing CSP/HSTS/nosniff. F-015 high: Browser-enforced defensive policies are not configured.
be-resilient `progressive-enhancement`	pass	high	Direct evidence on representative paths supports this outcome.
be-resilient `resilient-runtime-behaviour`	pass	high	Direct evidence on representative paths supports this outcome.
be-resilient `offline-and-installable`	issues	high	manifest.json has display: standalone, start_url and icons, yet navigator.serviceWorker.getRegistrations() returned an empty array and the page was not controlled. F-016 medium: The manifest declares an app-like standalone experience, but no service worker or offline fallback is registered.
be-resilient `network-and-http-failure-states`	pass	high	Direct evidence on representative paths supports this outcome.
be-internationalised `lang-dir-and-logical-properties`	not-applicable	high	The service is deliberately Vietnamese and region-specific; broader multi-locale support was judged outside current scope.
be-internationalised `locale-aware-data`	not-applicable	high	The service is deliberately Vietnamese and region-specific; broader multi-locale support was judged outside current scope.
be-internationalised `time-zone-correctness`	not-applicable	high	The service is deliberately Vietnamese and region-specific; broader multi-locale support was judged outside current scope.
be-trustworthy `no-dark-patterns`	pass	high	Direct evidence on representative paths supports this outcome.
be-trustworthy `humane-error-handling`	pass	high	Required fields use native required constraints and the page preserves browser validation behavior; no custom premature/blaming error UI was found.
be-trustworthy `trustworthy-input-assistance`	pass	high	Direct evidence on representative paths supports this outcome.
be-trustworthy `safe-commercial-and-account-flows`	not-applicable	high	No checkout, subscription or account-management journey was exposed in the representative public paths.
be-sustainable `optimised-assets`	issues	high	The image audit found 3 missing intrinsic dimensions, 2 below-fold images not lazy-loaded, 2 images without responsive sources and one legacy GIF. F-017 low: A small set of image-delivery inefficiencies remains.
be-sustainable `no-wasteful-work`	issues	high	The HAR records repeated Glia pixel requests plus Google analytics/ad collection; 42 of 45 requests are third party, while Lighthouse finds 499KiB unused JS. F-018 high: Background analytics and advertising work is chatty and mostly unrelated to the core result task.
be-sustainable `third-party-and-media-budget`	issues	high	Third parties transfer 772,761 bytes of 804,382 total; GTM, AdSense and the Glia player are the largest offenders, while the primary content is server-rendered text/tables. F-019 high: Third-party scripts dominate the page’s transfer budget.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	No declared agent-facing intent was found; this emerging capability is optional for this public results site.
be-agent-ready `on-device-inference`	not-applicable	high	No declared need for on-device inference was found; this emerging capability is optional for this results site.
be-memory-efficient `no-leak-under-repeated-interaction`	not-applicable	high	The audited experience is a server-rendered MPA whose core interactions navigate/reload; no representative long-lived in-page interaction exists to repeat meaningfully.
be-memory-efficient `bounded-footprint`	pass	high	Baseline heap was 13.18MB self size for the fully rendered long page; no disproportionate constructor population or detached DOM signal was present.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	high	Heap summary exposed no Detached* constructor among retained top constructors; no long-lived SPA interaction was present to accumulate listeners.

Provenance

Canonical report: results/atomic/reports/0431-xosodaiphat_com.json
Report SHA-256: b22ca774eef945c3e5a0e106c9972220c0615cbae7a3b09daa409c561337bef2
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/xosodaiphat_com/2026-07-20T18-51-28-143Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/xosodaiphat_com/2026-07-20T18-51-28-143Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.