Manifest position 622 · CrUX rank bucket 1000
https://www.xbox.com
Coverage complete
Coverage-complete agentic audit across five representative paths.
Attempts
1 / 3
Judged checks
58 / 58
Blocked
0
Not run
0
This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | The dark-emulated screenshot is pixel-identical in appearance and byte size to the default capture; the DOM reports color-scheme: normal and the consent/header surfaces remain white. F01 medium: The site does not adapt to the system dark-color preference. |
respect-user-preferencesrespects-reduced-motion | pass | high | Reduced-motion emulation matched and document.getAnimations() returned zero active animations. |
respect-user-preferencesrespects-contrast | pass | high | Forced-colors/high-contrast screenshot retained visible text, links, buttons, icons, and focus affordances. |
implement-natural-interactionsview-transitions | issues | medium | DOM/CSS inspection found no view-transition styling while the representative journey is composed of full document links and carousel/state swaps. F02 low: Navigation and state changes do not expose a View Transition treatment. |
implement-natural-interactionsscroll-driven-animations | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for scroll driven animations with no contrary signal on the selected templates. |
implement-natural-interactionsphysical-gestures | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for physical gestures with no contrary signal on the selected templates. |
provide-guided-navigationscroll-state-aware-chrome | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for scroll state aware chrome with no contrary signal on the selected templates. |
provide-guided-navigationanchored-positioning | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for anchored positioning with no contrary signal on the selected templates. |
provide-guided-navigationdirects-attention | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for directs attention with no contrary signal on the selected templates. |
maximize-content-reduce-noiseno-intrusive-interruptions | issues | high | Desktop and mobile screenshots show the notice consuming roughly 336px and 344px respectively; on mobile it occupies over 40% of the first viewport. F03 high: The cookie notice dominates the initial viewport before users can reach Xbox content. |
maximize-content-reduce-noisesemantic-dismissible-primitives | issues | high | The DOM probe found zero dialog elements and the targeted DOM capture found no [role=dialog], despite the visually dominant consent surface. F04 medium: The load-time consent overlay is not represented by a dialog or other semantic overlay primitive. |
maximize-content-reduce-noisereduced-chrome | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for reduced chrome with no contrary signal on the selected templates. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | pass | high | All four 360px layout captures reported horizontalOverflowPx 0 and a valid viewport meta tag. |
adapt-to-the-form-factorcomponent-level-responsiveness | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for component level responsiveness with no contrary signal on the selected templates. |
adapt-to-the-form-factorinput-modality-aware | issues | high | The focus/target probe counted 25 visible links, buttons, or inputs below 24px in at least one dimension. Lighthouse still scored automated accessibility at 100, so this is a modality/target-size gap rather than a broad a11y failure. F05 medium: A material set of interactive targets is smaller than the minimum practical target size. |
support-core-task-successclear-purpose-and-primary-action | pass | high | Homepage, catalog, console, and Game Pass captures expose specific headings and prominent action labels such as See options and Join Game Pass. |
support-core-task-successprimary-flow-completion | pass | high | Catalog cards expose prices and destinations; console and Game Pass pages expose visible continuation CTAs without an account wall on entry. |
support-core-task-successclear-system-state-and-recovery | pass | high | A deliberate invalid route rendered a branded, readable not-found explanation rather than a blank shell. |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse measured performance 13, LCP 23.7s, TBT 740ms, and CLS 0.761. Raw layout captures reproduced CLS from 0.441 to 0.901 across all four representative templates. F06 critical: The mobile load is slow and severely unstable. |
be-fast-and-stablevisual-stability | issues | high | The image audit found all 43 images lacked width/height attributes. Lighthouse attributed the CLS 0.761 shifts to unsized Microsoft and content images; per-template layout captures reached CLS 0.901. F07 high: Unsized images and late UI cause major layout shifts. |
be-fast-and-stableefficient-main-thread | issues | high | Lighthouse measured 740ms total blocking time and a 560ms maximum potential input delay. Layout observations also recorded 56-101ms long tasks on representative pages. F08 high: Mobile execution blocks interactivity during load. |
be-fast-and-stableefficient-resource-delivery | issues | high | The HAR recorded 140 requests and 8,556,801 transferred bytes. Lighthouse found the LCP request not discoverable in initial HTML, no fetchpriority=high, and a longest critical chain of 8.58s. F09 high: The critical hero is discovered late and the page ships an oversized dependency chain. |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | Lighthouse estimated savings of 585KiB unused JavaScript and 560KiB unused CSS; the HAR shows 51 scripts and 15 stylesheets. F10 medium: Large amounts of shipped CSS and JavaScript are unused on the audited route. |
be-inclusivenames-roles-labels | pass | high | axe reported zero violations and 46 passing rule groups; Lighthouse accessibility scored 100. |
be-inclusivesufficient-contrast | pass | high | Lighthouse accessibility scored 100, axe found no violation (contrast remained manual/incomplete), and forced-colors preserved all visible content. |
be-inclusivestructure-and-focus | issues | high | The console probe found six H1 elements all reading “XBOX SERIES X”; Game Pass found three H1s and multiple empty H3s. This conflicts with the otherwise strong Lighthouse/axe accessibility results. F11 medium: Product and subscription templates contain repeated top-level headings and empty headings. |
be-inclusivelegible-text | pass | high | Mobile screenshots across all templates show readable type, spacing, wrapping, and unclipped primary headings/content. |
be-inclusivezoom-reflow-targets-and-media | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for zoom reflow targets and media with no contrary signal on the selected templates. |
follow-best-practicesno-console-errors | pass | high | Lighthouse errors-in-console audit passed with zero logged items. |
follow-best-practicessound-document-and-assets | pass | medium | Representative screenshots, DOM probes, Lighthouse/axe, and layout/network evidence showed the expected behavior for sound document and assets with no contrary signal on the selected templates. |
follow-best-practicesbrowser-platform-hygiene | issues | high | Lighthouse found unload listeners, synchronous XHR, nonstandard slider-vertical CSS, BFCache prevention, and multiple missing/404 source maps. F12 medium: Deprecated APIs, a BFCache blocker, and broken source maps remain in production. |
be-discoverabletitle-and-description | issues | high | The listing probe returned a descriptive title and canonical URL but no meta description, while the other representative pages provided one. F13 medium: The console-games listing lacks a meta description. |
be-discoverablecrawlable-and-mobile-friendly | pass | high | Representative probes found 161-236 real href links, zero missing hrefs except detail-template placeholders, and valid viewport metadata; robots.txt was fetched. |
be-discoverablecanonical-and-indexing-signals | pass | high | All four paths returned canonical URLs; raw discoverability fetches returned HTTP 200 and robots/sitemap endpoints were inspected. |
be-discoverablestructured-and-shareable-metadata | pass | high | JSON-LD was present on the homepage, console product, and Game Pass entity pages; canonical and descriptions match visible content. |
be-private-and-securesecure-transport-and-headers | issues | high | The headers primitive found no Content-Security-Policy, Referrer-Policy, or Permissions-Policy. All four observed first-party cookies used SameSite=None, although HTTPS, HSTS, nosniff, and X-Frame-Options were present. F14 high: Important browser security headers are absent and cookies use a broad cross-site posture. |
be-private-and-securedata-minimisation-and-third-parties | issues | high | The tracker primitive observed 15 third-party origins, including 20 requests to Adobe DTM and 10 telemetry requests to browser.events.data.microsoft.com. Lighthouse observed nine third-party cookies. F15 medium: The landing page has a broad third-party and telemetry footprint before interaction. |
be-private-and-securein-context-permissions-and-modern-auth | pass | high | No permission prompt appeared on load; the observed silent sign-in request uses OAuth authorization code with PKCE rather than an exposed credential flow. |
be-private-and-securedefensive-browser-policies | issues | high | Headers show HSTS, nosniff and X-Frame-Options DENY, but no CSP/frame-ancestors policy, Referrer-Policy, or Permissions-Policy. F16 medium: Defensive policy coverage is incomplete despite good HSTS and clickjacking protection. |
be-resilientprogressive-enhancement | issues | high | Discoverability comparison found only 30% rendered-word coverage in raw HTML and no raw H1, versus 95% coverage for the console detail template. The homepage is not an empty shell, but its primary merchandising content is substantially JS-dependent. F17 medium: The homepage exposes only a minority of its rendered content to non-JavaScript clients. |
be-resilientresilient-runtime-behaviour | pass | high | Navigation, carousel, pricing cards, and responsive headers rendered without clipped overlays or blank states across four mobile templates. |
be-resilientoffline-and-installable | not-applicable | high | Xbox.com is a network-dependent commerce and media catalog; installability/offline app behavior is not required for the audited public browsing journey. |
be-resilientnetwork-and-http-failure-states | pass | high | The invalid route rendered a clear not-found state with explanatory copy. |
be-internationalisedlang-dir-and-logical-properties | pass | high | All representative documents declare lang=en and dir=ltr and locale-specific en-GB canonical routes. |
be-internationalisedlocale-aware-data | pass | high | The en-GB catalog renders pound sterling and locale-specific pricing while documents and canonical routes consistently use en-GB. |
be-internationalisedtime-zone-correctness | not-applicable | high | No event times or time-zone-sensitive data appeared on the representative pages. |
be-trustworthyno-dark-patterns | pass | high | Consent presents Accept, Reject, and Manage cookies with equal button treatment; pricing and discount amounts are explicit on catalog cards. |
be-trustworthyhumane-error-handling | not-applicable | high | No user-submittable validation flow beyond site search appeared in the selected public paths. |
be-trustworthytrustworthy-input-assistance | not-applicable | high | No address, payment, sign-up, or credential form was present in the unauthenticated representative paths. |
be-trustworthysafe-commercial-and-account-flows | pass | high | Product and subscription pages clearly label See options and Join Game Pass; catalog cards expose current and previous prices before continuation. |
be-sustainableoptimised-assets | issues | high | The image audit found 30 legacy-format images, 7 oversized images, 6 below-fold images not lazy-loaded, and all 43 without dimensions. Images accounted for 5,655,392 of 8,556,801 transferred bytes. F18 high: Image delivery is heavier and less modern than the experience requires. |
be-sustainableno-wasteful-work | pass | high | HAR shows media dominates bytes but background XHR/fetch is only 23.7KB; no continuous animation remained under reduced motion. |
be-sustainablethird-party-and-media-budget | issues | high | The HAR transferred 8.56MB across 140 requests; images were 5.66MB and the tracker probe found 15 third-party origins. F19 medium: The initial page budget is dominated by media and a large multi-origin dependency graph. |
be-agent-readystructured-agent-capabilities | not-applicable | high | No declared agent-facing scope was found; this emerging capability is an opportunity, not a requirement for the audited public catalog. |
be-agent-readyon-device-inference | not-applicable | high | No user task in the audited catalog requires on-device language-model or summarisation inference. |
be-memory-efficientno-leak-under-repeated-interaction | pass | high | After ten full-page scroll cycles, node count fell from 740,542 to 739,329 and self size fell from 45.9MB to 43.8MB; no retained growth was demonstrated. |
be-memory-efficientbounded-footprint | issues | medium | The baseline heap summary contained 740,542 nodes, 2,571,691 edges, and 45.9MB self size. Repeated scrolling did not increase it, so this is footprint rather than demonstrated leakage. F20 medium: The homepage starts with a large in-memory object and DOM footprint. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | high | The repeated-interaction heap had fewer nodes, edges, and self bytes than baseline, providing no signal of accumulating detached structures in this scenario. |
Provenance
Canonical report: results/atomic/reports/0622-www_xbox_com.json
Report SHA-256: 3a0eb913d5be938972fbeafe76a472a0169d44a47ece876e616dec3eda60577c
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_xbox_com/2026-07-22T00-03-36-432Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_xbox_com/2026-07-22T00-03-36-432Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.