Manifest position 443 · CrUX rank bucket 1000

https://docs.google.com

Coverage complete

Completed atomic audit of the unauthenticated Google Docs entry, which redirects to the Google Accounts identifier screen. Authenticated editor surfaces were excluded because no credentials were supplied.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	Dark and default screenshots were byte-identical (36,608 bytes) and both show a white surface; the page does not retint for prefers-color-scheme: dark. F-001 medium: The sign-in surface ignores the user’s dark color-scheme preference.
respect-user-preferences `respects-reduced-motion`	pass	high	The reduced-motion capture completed with document.getAnimations() returning an empty list; no non-essential motion remained.
respect-user-preferences `respects-contrast`	pass	high	The prefers-contrast capture remained legible and Lighthouse accessibility scored 1.00.
implement-natural-interactions `view-transitions`	pass	high	The reachable identifier state contains no abrupt in-page swap; navigation is implemented as a native form/document transition, preserving predictable browser behavior on this tested step.
implement-natural-interactions `scroll-driven-animations`	not-applicable	high	The sign-in screen has no scrolling narrative, parallax, reveal, or carousel motion.
implement-natural-interactions `physical-gestures`	not-applicable	high	The sign-in screen exposes no gesture-driven, swipe, pull, snap, or overscroll interaction.
provide-guided-navigation `scroll-state-aware-chrome`	not-applicable	high	The complete sign-in screen fits the viewport and has no scroll-dependent chrome.
provide-guided-navigation `anchored-positioning`	not-applicable	high	No tooltip, popover, or anchored menu is present on the tested identifier screen.
provide-guided-navigation `directs-attention`	pass	high	The desktop and mobile screenshots show a single H1, one clearly outlined identifier field, and a visually dominant Next action.
maximize-content-reduce-noise `no-intrusive-interruptions`	pass	high	Load screenshots show the sign-in content directly, with no interstitial, consent wall, or overlay obscuring it.
maximize-content-reduce-noise `semantic-dismissible-primitives`	not-applicable	high	No overlay, disclosure, picker, or transient rich control is present on the tested screen.
maximize-content-reduce-noise `reduced-chrome`	pass	high	Screenshots show a compact, content-first sign-in surface with minimal framing and no competing promotional chrome.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	At 360x800, layout measured scrollWidth=clientWidth=360 and horizontalOverflowPx=0; viewport meta is present.
adapt-to-the-form-factor `component-level-responsiveness`	pass	high	Desktop and 360px screenshots show the card becoming an edge-to-edge mobile layout without clipping.
adapt-to-the-form-factor `input-modality-aware`	pass	high	The primary input is 368x56, links have 36-48px hit areas, and the language selector exposes a 2px focused outline; Lighthouse accessibility passed.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	First viewport states “Sign in”, explains account scope, labels the identifier field, and presents Next as the primary action.
support-core-task-success `primary-flow-completion`	pass	medium	The available identifier step has a labelled username field, recovery path, account-creation path, and a conventional Next action; credential-dependent continuation was not submitted.
support-core-task-success `clear-system-state-and-recovery`	pass	high	The screen provides “Forgot email?”, Guest mode guidance, and Create account recovery routes; all are real href links.
be-fast-and-stable `good-core-web-vitals`	issues	high	Lighthouse lab run measured LCP 5.3s and TBT 250ms (performance 0.71), outside the good LCP threshold, although trace under a lighter run measured LCP 1.13s. F-002 high: The throttled sign-in load misses the good LCP range and pays for a multi-hop redirect chain.
be-fast-and-stable `visual-stability`	pass	high	Mobile layout observer measured CLS 0 with no shifts; Lighthouse also measured CLS 0.
be-fast-and-stable `efficient-main-thread`	pass	high	Trace recorded zero long tasks and 0ms TBT; Lighthouse’s throttled run recorded 250ms TBT, indicating moderate but not severe scripting cost.
be-fast-and-stable `efficient-resource-delivery`	issues	high	HAR recorded a three-hop sign-in redirect chain; Lighthouse estimated 1,680ms redirect savings and reported document/font/dependency latency insights. F-002 high: The throttled sign-in load misses the good LCP range and pays for a multi-hop redirect chain.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Lighthouse estimated 360KiB unused JavaScript and 165KiB unused CSS on the small sign-in screen. F-003 medium: The small identifier screen ships substantial unused JavaScript and CSS.
be-inclusive `names-roles-labels`	pass	high	Lighthouse accessibility scored 1.00; the visible identifier input has the “Email or phone” label and Google image has alt text.
be-inclusive `sufficient-contrast`	pass	high	Lighthouse accessibility scored 1.00 and default/high-contrast screenshots show legible text and controls.
be-inclusive `structure-and-focus`	pass	high	DOM has one H1 and labelled form controls; Lighthouse accessibility scored 1.00. Focus probe found an explicit 2px outline on the language selector.
be-inclusive `legible-text`	pass	high	Desktop and mobile screenshots show readable line lengths, unclipped text, and stable alignment.
be-inclusive `zoom-reflow-targets-and-media`	pass	high	Viewport allows normal scaling; 360px capture has no overflow, primary field is 56px high, and no media requires captions.
follow-best-practices `no-console-errors`	pass	high	Lighthouse best-practices scored 1.00 and did not report a console-error audit failure.
follow-best-practices `sound-document-and-assets`	pass	high	Probe found HTML doctype, UTF-8 charset, responsive viewport; the only image has width/height, correct aspect ratio, and alt text.
follow-best-practices `browser-platform-hygiene`	issues	high	Lighthouse reported four BFCache failure reasons despite a 1.00 aggregate best-practices score. F-004 low: The page cannot be restored from the back/forward cache.
be-discoverable `title-and-description`	issues	high	DOM and Lighthouse confirm a descriptive title (“Sign in - Google Accounts”) but no meta description. F-005 low: The public sign-in entry has no meta description.
be-discoverable `crawlable-and-mobile-friendly`	pass	high	All six visible links have href values, viewport meta is width=device-width, and link text is descriptive.
be-discoverable `canonical-and-indexing-signals`	not-applicable	high	This is a deliberately authentication-gated continuation URL, not a public content page intended for indexing.
be-discoverable `structured-and-shareable-metadata`	not-applicable	high	The utility sign-in screen does not represent an article, product, event, organization, or other rich entity.
be-private-and-secure `secure-transport-and-headers`	issues	high	HTTPS, HSTS, nosniff, X-Frame-Options DENY, and Trusted Types are present, but CDP reported NID without Secure and SameSite=None. F-006 high: A Google NID cookie was exposed without the Secure flag and with SameSite=None.
be-private-and-secure `data-minimisation-and-third-parties`	pass	high	Tracker scan found no known trackers; 8 third-party requests are limited to Google-owned authentication/static origins and secrets scan found no exposed credentials.
be-private-and-secure `in-context-permissions-and-modern-auth`	not-applicable	high	No browser permission request occurred; the password/passkey stage is beyond the unauthenticated identifier screen and was not applicable to this rendered step.
be-private-and-secure `defensive-browser-policies`	issues	high	HSTS, DENY framing, nosniff, Permissions-Policy and Trusted Types are present, but Referrer-Policy is absent and one CSP policy permits unsafe-inline/unsafe-eval. F-007 medium: Defensive response policy is weakened by a missing Referrer-Policy and permissive CSP directives.
be-resilient `progressive-enhancement`	pass	high	Discoverability fetch found 76% rendered-word coverage in raw HTML, title and H1 present, and isJsShell=false.
be-resilient `resilient-runtime-behaviour`	pass	high	The simple identifier screen contains no overlays to clip; desktop/mobile captures remained stable and links/forms use native controls.
be-resilient `offline-and-installable`	not-applicable	high	Account authentication is intrinsically online and the rendered utility screen is not an installable application surface.
be-resilient `network-and-http-failure-states`	pass	medium	The tested authentication entry returned successfully with no HAR HTTP errors and exposes recovery/help routes rather than a blank shell.
be-internationalised `lang-dir-and-logical-properties`	pass	high	DOM declares lang=en-US and dir=ltr; the language selector exposes many locale choices and mobile layout remains intact.
be-internationalised `locale-aware-data`	not-applicable	high	The tested screen renders no dates, numbers, currency, duration, or calendar data.
be-internationalised `time-zone-correctness`	not-applicable	high	The tested screen renders and accepts no times or events.
be-trustworthy `no-dark-patterns`	pass	high	No consent wall, upsell, disguised ad, forced continuity, or preselected commercial option appears; recovery and account creation are plainly labelled.
be-trustworthy `humane-error-handling`	pass	high	The identifier field is explicitly labelled and recovery is offered adjacent to it; Lighthouse accessibility found no form violation.
be-trustworthy `trustworthy-input-assistance`	pass	high	The identifier input uses autocomplete=username and an explicit Email or phone label.
be-trustworthy `safe-commercial-and-account-flows`	not-applicable	high	No checkout, subscription, consent, account-management, or sensitive post-authentication action is available on the identifier step.
be-sustainable `optimised-assets`	pass	high	The sole 3.7KB logo has fixed dimensions, correct display density and no oversizing flag; no heavy decorative media is shipped.
be-sustainable `no-wasteful-work`	pass	high	HAR contains only 10 requests/156KB and trace records no long tasks; no background media or continual work was observed.
be-sustainable `third-party-and-media-budget`	pass	high	No audio/video/autoplay exists; total transfer is about 156KB and Google-owned auth/static origins account for the cross-origin requests.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	A security-sensitive sign-in identifier screen has no appropriate public agent-facing capability; exposing one would not improve this step.
be-agent-ready `on-device-inference`	not-applicable	high	The sign-in identifier task has no summarisation or language-model use case where on-device inference would add value.
be-memory-efficient `no-leak-under-repeated-interaction`	not-applicable	high	The unauthenticated screen has no representative open/close, route-back, or list interaction to repeat ten times without fabricating a synthetic action.
be-memory-efficient `bounded-footprint`	pass	high	Heap summary measured 132,543 nodes and 7.79MB self size; performance.memory used 5.28MB, proportionate for the rendered authentication UI.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	medium	Single-state heap constructor summary did not surface a Detached* population among significant constructors; no timers or ongoing animation were observed.

Provenance

Canonical report: results/atomic/reports/0443-docs_google_com.json
Report SHA-256: 9efc94f8e279d8054980081452ba8899ac86ead4e6bcdf6d29a599434c93e2fd
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/docs_google_com/2026-07-20T21-20-50-454Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/docs_google_com/2026-07-20T21-20-50-454Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.