Manifest position 627 · CrUX rank bucket 1000

https://auth.platorelay.com

Coverage complete

Atomic coverage complete for the single public gateway plus its representative unknown-route error state.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	Default and prefers-color-scheme: dark screenshots are byte-identical; the DOM probe reports color-scheme: normal and no prefers-color-scheme rule. F-COLOR medium: The gateway forces one dark palette instead of following the user’s color-scheme preference.
respect-user-preferences `respects-reduced-motion`	pass	high	Reduced-motion emulation matched and getAnimations() returned no active animations.
respect-user-preferences `respects-contrast`	pass	high	Forced-colors/increased-contrast screenshot retains visible text, controls, borders, and focusable links.
implement-natural-interactions `view-transitions`	not-applicable	high	This gateway has no same-site state or route transition; its two actions leave for external destinations, so there is no controlled transition to evaluate.
implement-natural-interactions `scroll-driven-animations`	not-applicable	high	The page does not scroll and has no scroll-linked motion.
implement-natural-interactions `physical-gestures`	pass	high	Available interactions use native buttons/anchors with no custom pointer or scroll handlers evident in the DOM/CSS.
provide-guided-navigation `scroll-state-aware-chrome`	not-applicable	high	The complete page fits within one viewport and has no scrolling chrome.
provide-guided-navigation `anchored-positioning`	not-applicable	high	No tooltip, menu, popover, or other anchored overlay exists on this page.
provide-guided-navigation `directs-attention`	pass	high	The centered card, heading, two prominent primary actions, underlined legal links, and visible keyboard focus clearly direct attention.
maximize-content-reduce-noise `no-intrusive-interruptions`	pass	high	Load screenshots and DOM show no popup, interstitial, banner, or content-obscuring overlay.
maximize-content-reduce-noise `semantic-dismissible-primitives`	not-applicable	high	No overlay, dialog, disclosure, picker, or transient rich control exists.
maximize-content-reduce-noise `reduced-chrome`	pass	high	The single compact card gives nearly all meaningful UI area to explanatory content and actions with minimal decorative chrome.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	At 360x800, layout reports scrollWidth=clientWidth=360, zero overflow and CLS, with a viewport meta tag.
adapt-to-the-form-factor `component-level-responsiveness`	not-applicable	high	The card is used in one container context only; no reused component needs container-specific variants.
adapt-to-the-form-factor `input-modality-aware`	pass	high	Primary buttons are 40px high, legal links are spaced, native focus is present, and button focus has a visible two-ring box shadow.
support-core-task-success `clear-purpose-and-primary-action`	issues	high	Desktop/mobile screenshots show an unexplained “Gateway”, mixed Plato/Platoboost naming, and the typo “check out or website”. F-PURPOSE low: The first-view copy weakens clarity and credibility.
support-core-task-success `primary-flow-completion`	pass	high	Both destination-button click probes triggered full navigation (the CDP execution contexts closed on navigation), and all legal anchors have real href destinations.
support-core-task-success `clear-system-state-and-recovery`	issues	high	The /does-not-exist probe and screenshot show “An error occured”, technical detail/copy affordance, and legal links, but no retry, home, back, or primary destination. F-RECOVERY medium: The not-found state does not provide a recovery action.
be-fast-and-stable `good-core-web-vitals`	issues	high	Lighthouse measured FCP and LCP at 3.6 s (performance 0.82), outside the good LCP threshold; the less-throttled trace measured 1.43 s and no blocking, so network/resource delivery is the main risk. F-CWV medium: The tiny gateway paints too slowly under Lighthouse mobile conditions.
be-fast-and-stable `visual-stability`	pass	high	Mobile layout reports CLS 0 with no shifts; Lighthouse also reports CLS 0.
be-fast-and-stable `efficient-main-thread`	pass	high	Trace records zero long tasks and 0ms TBT; Lighthouse reports about 10ms TBT.
be-fast-and-stable `efficient-resource-delivery`	issues	high	HAR records 729,513 transferred bytes for six requests, including 554,908 bytes of first-party JS; Lighthouse estimates 411 KiB repeat-visit savings from longer caching. The module script is deferred by type=module, while the 5.8 KiB stylesheet is genuinely render blocking. F-DELIVERY medium: Critical delivery is oversized and hashed assets have short cache lifetimes.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Lighthouse reports 504 KiB potential savings: 448,564 bytes unused in the first-party bundle (80.9%) and 67,808 bytes unused in gtag. F-UNUSED medium: Most JavaScript shipped to this simple page is unused.
be-inclusive `names-roles-labels`	pass	high	Lighthouse accessibility scored 1.0; controls use native button/anchor roles and the only icon is inline SVG adjacent to text rather than an unlabeled action.
be-inclusive `sufficient-contrast`	pass	high	Lighthouse accessibility scored 1.0 and the forced-colors screenshot preserves strong text/control contrast.
be-inclusive `structure-and-focus`	issues	high	The DOM/probe shows two nested <main> elements, no H1, an empty H3 for the icon, and the visible title as another H3. F-STRUCTURE medium: The document has an illogical heading and landmark structure.
be-inclusive `legible-text`	pass	high	Desktop/mobile screenshots show unclipped, centered text with a readable measure and stable system-font rendering.
be-inclusive `zoom-reflow-targets-and-media`	pass	high	Viewport permits scaling, mobile reflow has no overflow, Lighthouse accessibility is 1.0, and there is no media requiring captions.
follow-best-practices `no-console-errors`	pass	high	Lighthouse best-practices scored 1.0 and did not report runtime/console failures on the entry page.
follow-best-practices `sound-document-and-assets`	issues	high	The DOM/probe shows two nested <main> elements, no H1, an empty H3 for the icon, and the visible title as another H3. F-STRUCTURE medium: The document has an illogical heading and landmark structure.
follow-best-practices `browser-platform-hygiene`	issues	high	Lighthouse best-practices diagnostics report “Large JavaScript file is missing a source map” for index-d2eb3afb.js. F-SOURCEMAP low: The large first-party JavaScript bundle has no valid source map.
be-discoverable `title-and-description`	issues	high	DOM and Lighthouse show title “Platoboost” and no meta[name=description]; Lighthouse SEO score is 0.82. F-SEO-META medium: The page lacks a meta description and its title is only a brand name.
be-discoverable `crawlable-and-mobile-friendly`	issues	high	Discoverability reports 0% rendered-word coverage and a blank crawler screenshot. Primary actions are <button> elements with no href, while only legal links are crawlable anchors. F-CRAWL high: Core content and primary destinations disappear for non-JavaScript crawlers.
be-discoverable `canonical-and-indexing-signals`	issues	high	The page has no canonical URL; /robots.txt and /sitemap.xml both return status 200 with the 478-byte HTML shell. Lighthouse reports 14 robots.txt syntax errors. F-INDEXING medium: Indexing signals are incomplete and robots/sitemap endpoints serve the app shell.
be-discoverable `structured-and-shareable-metadata`	issues	high	DOM inspection found no canonical/description and no Open Graph, Twitter Card, or JSON-LD metadata despite presenting a product/organization gateway. F-SHARE low: The gateway has no social preview or structured entity metadata.
be-private-and-secure `secure-transport-and-headers`	issues	high	Headers evidence reports no CSP, HSTS, or X-Content-Type-Options. Both _ga cookies are not Secure, use SameSite=None, and persist for 400 days. F-TRANSPORT high: Transport is HTTPS, but baseline XSS/header protection and cookie flags are missing.
be-private-and-secure `data-minimisation-and-third-parties`	issues	high	Tracker/HAR evidence shows Google Tag Manager and Google Analytics on load, 166,677 third-party bytes, an immediate page_view, and two 400-day analytics cookies. F-PRIVACY medium: Google tracking runs immediately on a one-screen gateway.
be-private-and-secure `in-context-permissions-and-modern-auth`	not-applicable	high	This rendered informational gateway requests no permissions and exposes no sign-in or authentication flow to assess for passkeys.
be-private-and-secure `defensive-browser-policies`	issues	high	Headers evidence reports no frame-ancestors/X-Frame-Options, Referrer-Policy, or Permissions-Policy in addition to the missing CSP/HSTS. F-POLICIES high: Browser-enforced framing, referrer, and permission defenses are absent.
be-resilient `progressive-enhancement`	issues	high	The raw response is 478 bytes with only one content token; discoverability reports 0% content coverage and the crawler/no-JS screenshot is blank, while the rendered page contains 214 text characters. F-PROGRESSIVE high: The gateway is a client-rendered shell with no usable no-JavaScript fallback.
be-resilient `resilient-runtime-behaviour`	pass	high	The static card has no overlays or asynchronous in-page state; DOM and mobile layout show no clipping or runtime instability.
be-resilient `offline-and-installable`	not-applicable	high	This is a small outbound gateway rather than an app with offline user work; installability is not proportionate.
be-resilient `network-and-http-failure-states`	issues	high	The tested /does-not-exist route renders “An error occured” and no retry/home/back action; it also appears within the same client shell. F-HTTP-STATE medium: Unknown routes render a generic error without useful recovery.
be-internationalised `lang-dir-and-logical-properties`	pass	high	The document declares lang=en; its centered flex layout does not depend on left-to-right ordering despite compiled physical utility declarations.
be-internationalised `locale-aware-data`	not-applicable	high	The page contains no dates, numbers, currency, durations, or other locale-sensitive data.
be-internationalised `time-zone-correctness`	not-applicable	high	The page contains no times or events.
be-trustworthy `no-dark-patterns`	pass	high	The page shows two straightforward destinations and plainly labeled legal links, with no consent wall, forced continuity, pricing concealment, or confirmshaming.
be-trustworthy `humane-error-handling`	not-applicable	high	There is no user-input form on the audited gateway.
be-trustworthy `trustworthy-input-assistance`	not-applicable	high	There are no input fields on the audited gateway.
be-trustworthy `safe-commercial-and-account-flows`	not-applicable	high	No checkout, subscription, consent, authentication, or account-management flow is exposed on this page.
be-sustainable `optimised-assets`	not-applicable	high	There are no img, video, canvas, or decorative raster-image assets to optimise.
be-sustainable `no-wasteful-work`	issues	high	HAR transfers 729,513 bytes and Lighthouse identifies 504 KiB of unused JavaScript for a 32-element, one-card page. F-WASTE medium: The resource footprint is disproportionate to 22 rendered content tokens.
be-sustainable `third-party-and-media-budget`	issues	high	Google Tag Manager transfers 166,677 bytes, about 23% of the 729,513-byte load, and triggers Analytics on this simple gateway. F-THIRDPARTY medium: Analytics accounts for a large share of page weight without visible user value.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	This 22-token outbound gateway has no meaningful transactional or content capability to expose as an agent tool.
be-agent-ready `on-device-inference`	not-applicable	high	The page has no inference use case; reporting the browser API’s presence is not evidence that the site uses it.
be-memory-efficient `no-leak-under-repeated-interaction`	not-applicable	high	The page is a static gateway whose only actions navigate away; there is no real repeatable in-page interaction to exercise ten times.
be-memory-efficient `bounded-footprint`	pass	high	The single-state heap is 8.8MB self size and the probe sees only 32 live DOM elements with about 8.8MB used JS heap, proportionate for this page.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	high	The heap summary’s largest constructors contain no Detached* population; the 32-element static DOM has no recurring in-page interaction, timers, or observer behavior evident.

Provenance

Canonical report: results/atomic/reports/0627-auth_platorelay_com.json
Report SHA-256: 5fc417c2d816571c0ec08d80318650a47ce1c59ae41893344a4e475157ea2d80
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/auth_platorelay_com/2026-07-22T00-37-35-594Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/auth_platorelay_com/2026-07-22T00-37-35-594Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.