Manifest position 666 · CrUX rank bucket 1000
https://store.steampowered.com
Coverage complete
Atomic coverage complete across five representative public templates/states. Account-authenticated wishlist, checkout after account authentication, community pages, support, and localized variants were not covered because they require credentials or are distinct domains; one representative listing and product template stands for repeated catalog pages.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | Desktop and prefers-color-scheme:dark screenshots render the same dark palette, and the DOM probe found no preference-driven theming signal. F01 medium: The storefront is hard-coded dark rather than adapting to the user’s color-scheme preference. |
respect-user-preferencesrespects-reduced-motion | pass | medium | Under prefers-reduced-motion:reduce the active probe found zero running animations; no auto-advance animation was exposed during the observation window. |
respect-user-preferencesrespects-contrast | pass | medium | The forced-colors screenshot retains visible text, controls, search, and consent choices. |
implement-natural-interactionsview-transitions | issues | high | The DOM probe found no view-transition usage on a multi-route storefront. F02 low: Route and state changes do not use View Transitions. |
implement-natural-interactionsscroll-driven-animations | not-applicable | high | No scroll-linked animation is present on the audited templates, so the declarative implementation choice is not exercised. |
implement-natural-interactionsphysical-gestures | pass | medium | Mobile screenshots and layout evidence show native vertical scrolling with no horizontal trap; no custom pointer-drag surface blocked platform gestures. |
provide-guided-navigationscroll-state-aware-chrome | issues | high | The long storefront screenshot shows static navigation, and the DOM/CSS probe found no modern scroll-state mechanism. F03 low: Navigation chrome does not respond to scroll state. |
provide-guided-navigationanchored-positioning | issues | high | The DOM contains fixed custom responsive menu/search overlays and no popover or anchor-positioning primitives. F04 low: Menus and overlays use manually positioned legacy containers rather than anchored positioning. |
provide-guided-navigationdirects-attention | pass | medium | Screenshots show selected carousel content, breadcrumbs on product detail, prominent search, and clear section labels that maintain orientation. |
maximize-content-reduce-noiseno-intrusive-interruptions | issues | high | Homepage, product, search, and login screenshots show a large fixed consent panel covering featured content, product information, results, or the sign-in form. F05 high: The cookie prompt obscures primary content on every representative page. |
maximize-content-reduce-noisesemantic-dismissible-primitives | issues | high | The probe found zero dialog and popover elements while screenshots and DOM show #cookiePrefPopup as a fixed custom container. F06 medium: The consent overlay is an ad-hoc fixed div rather than a semantic dialog/popover. |
maximize-content-reduce-noisereduced-chrome | pass | medium | After consent dismissal, the product screenshot devotes the main viewport to game media and information rather than a persistent app frame. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | pass | medium | Home and product layout probes at 360x800 report 0 px horizontal overflow and a viewport meta tag. |
adapt-to-the-form-factorcomponent-level-responsiveness | issues | high | The rendered DOM/CSS probe found no @container usage despite cards and navigation being reused in substantially different widths. F07 low: Reusable storefront components rely on viewport-era responsive CSS rather than container queries. |
adapt-to-the-form-factorinput-modality-aware | issues | high | The active probe counted 32 visible links/controls under 24 px in at least one dimension; the focused sign-in link did receive a browser outline. F08 medium: Many interactive targets are too small even though keyboard focus is visible. |
support-core-task-successclear-purpose-and-primary-action | pass | medium | Home, search, product, and sign-in screenshots make discovery, product evaluation, search, and authentication purposes visually clear. |
support-core-task-successprimary-flow-completion | pass | medium | Search results loaded for the supplied query, product detail loaded, consent could be rejected, and sign-in presented its expected account flow without a dead end before credentials. |
support-core-task-successclear-system-state-and-recovery | issues | high | Navigating to /nonexistent-web-uplift-test produced the ordinary homepage with no not-found message or recovery context. F09 high: Unknown routes silently redirect to the storefront instead of explaining the failure. |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse measured LCP 22.4 s, TBT 430 ms, and CLS 0.129 (performance 43); the independent trace measured LCP 2.16 s but still observed blocking tasks, indicating substantial condition sensitivity. F10 high: Lab Core Web Vitals are poor on the storefront. |
be-fast-and-stablevisual-stability | issues | high | The 360x800 layout observer measured CLS 0.168 on home and 0.157 on the product page; 99 of 100 images lacked both dimensions. F11 high: Homepage and product layouts shift beyond the good CLS threshold. |
be-fast-and-stableefficient-main-thread | issues | high | The trace recorded two long tasks, longest 107 ms, with 71 ms TBT; Lighthouse measured 430 ms TBT under throttling. F12 medium: Initial load performs avoidable long main-thread tasks. |
be-fast-and-stableefficient-resource-delivery | issues | high | HAR captured 116 requests and 8.52 MB transferred, including 6.63 MB images, 14 parser-blocking stylesheets and synchronous legacy scripts; several fonts/assets lacked cache headers. F13 high: The initial storefront payload is excessive and has a long render-blocking chain. |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | Lighthouse estimated 1,072 KiB unused JavaScript and 334 KiB unused CSS, including chunks with more than 99% waste. F14 medium: The page ships over a megabyte of unused JavaScript plus substantial unused CSS. |
be-inclusivenames-roles-labels | issues | high | Lighthouse failed aria-required-children, image-alt, label-content-name-mismatch, and link-name; the image audit found 19 images without alt and the probe found five unlabeled controls. F15 high: Accessible names, roles, and alternatives are incomplete. |
be-inclusivesufficient-contrast | issues | high | Lighthouse failed the color-contrast audit; forced-colors remained usable but does not remedy default-palette contrast failures. F16 medium: Some text and controls do not meet minimum contrast. |
be-inclusivestructure-and-focus | issues | high | The homepage has no h1 and only footer h3 headings; Lighthouse also found malformed required ARIA children. Focus itself remained visibly outlined. F17 medium: Heading and ARIA structure do not provide a robust page outline. |
be-inclusivelegible-text | pass | medium | Representative screenshots show readable typography, bounded line lengths in forms/consent, and no text clipping at desktop or mobile widths. |
be-inclusivezoom-reflow-targets-and-media | issues | high | The probe counted 32 visible targets below 24 px in one dimension. Mobile layouts reflow without horizontal overflow, but target sizing remains inadequate. F18 medium: Compact targets reduce touch and zoom usability. |
follow-best-practicesno-console-errors | pass | medium | Lighthouse errors-in-console audit passed with no recorded console errors. |
follow-best-practicessound-document-and-assets | issues | high | The image primitive found 99 of 100 images without both dimensions, 29 oversized images, and Lighthouse failed image-aspect-ratio. F19 medium: Image markup is unstable and sometimes distorted. |
follow-best-practicesbrowser-platform-hygiene | pass | medium | Lighthouse deprecations, BFCache and inspector-issues audits passed, and no permission prompt appeared on load. |
be-discoverabletitle-and-description | issues | high | The live homepage probe returned no meta description; search and sign-in DOM snapshots also lack one, although product detail has a description. F20 medium: Key templates lack meta descriptions. |
be-discoverablecrawlable-and-mobile-friendly | pass | medium | Lighthouse document-title/robots/crawlable-anchor checks passed; all 280 detected links had href and mobile viewport metadata is present. |
be-discoverablecanonical-and-indexing-signals | issues | high | GET /sitemap.xml returns 302 to the homepage HTML, and robots.txt declares no Sitemap line. Canonical and robots checks otherwise passed. F21 medium: The advertised sitemap endpoint is not a sitemap. |
be-discoverablestructured-and-shareable-metadata | issues | high | DOM snapshots found Open Graph tags but zero JSON-LD blocks on the homepage and Dota 2 product detail. F22 medium: Product and storefront entities have social metadata but no structured data. |
be-private-and-securesecure-transport-and-headers | issues | high | Final response uses HSTS and frame-ancestors, but CSP permits unsafe-inline and unsafe-eval. The sessionid cookie is SameSite=None and JavaScript-readable, and timezoneOffset was not Secure. F23 high: Transport is HTTPS, but CSP and cookie posture remain weaker than expected. |
be-private-and-securedata-minimisation-and-third-parties | pass | medium | Tracker capture found no known analytics trackers; observed third-party origins were Steam asset CDNs, and optional analytics consent was offered before acceptance. |
be-private-and-securein-context-permissions-and-modern-auth | issues | high | The login DOM probe found no WebAuthn/PublicKeyCredential signal or passkey copy. F24 medium: The sign-in surface offers password/QR methods but no detectable passkey path. |
be-private-and-securedefensive-browser-policies | issues | high | Header evidence indicates no X-Content-Type-Options, Referrer-Policy, or Permissions-Policy on the main response; CSP includes unsafe-inline and unsafe-eval. HSTS and clickjacking protection are present. F25 medium: Several defensive headers are absent or too permissive. |
be-resilientprogressive-enhancement | pass | medium | Discoverability capture found 79% raw-HTML content coverage, no empty app mount, and a usable crawler rendering rather than a JS shell. |
be-resilientresilient-runtime-behaviour | pass | medium | Responsive menus and product/store layouts rendered without overflow, clipping, blank shells, or runtime console errors in the exercised states. |
be-resilientoffline-and-installable | not-applicable | high | The public web storefront is a commerce/catalog surface whose purchases and live account state intrinsically require a network; installability was not declared as an intent. |
be-resilientnetwork-and-http-failure-states | issues | high | An unknown URL resolves to an ordinary storefront screen with no failure status or recovery explanation. F26 high: HTTP failure handling hides the error state. |
be-internationalisedlang-dir-and-logical-properties | pass | medium | All representative DOM snapshots declare html lang=en and maintain coherent reading order at desktop and mobile widths. |
be-internationalisedlocale-aware-data | pass | medium | The UK session renders prices in pounds and uses a steamCountry locale cookie, demonstrating locale-specific commerce formatting. |
be-internationalisedtime-zone-correctness | pass | medium | The storefront sets a timezoneOffset value and no ambiguous scheduled event was present in the representative templates. |
be-trustworthyno-dark-patterns | pass | medium | Consent presents Accept All and Reject All side by side with privacy/settings links; product pricing and free-to-play status are visibly stated. |
be-trustworthyhumane-error-handling | pass | medium | The sign-in and search surfaces use persistent labelled fields and do not validate before interaction in the observed state. |
be-trustworthytrustworthy-input-assistance | issues | high | The login probe found the account-name and password fields with empty autocomplete values, while the search field explicitly uses autocomplete=off. F27 medium: Sign-in inputs do not expose standard autocomplete tokens. |
be-trustworthysafe-commercial-and-account-flows | pass | medium | Product detail exposes title, free-to-play status/reviews, and Community Hub context; global navigation links refunds, privacy, and subscriber terms. |
be-sustainableoptimised-assets | issues | high | HAR transferred 6.63 MB of images; the image audit found 87 legacy-format images, 29 oversized images, 34 without responsive sources, and 43 below-fold images not lazy-loaded. F28 high: Image delivery wastes several megabytes. |
be-sustainableno-wasteful-work | issues | high | The initial page makes 116 requests; 43 below-fold images are not lazy-loaded and Lighthouse reports large unused JS/CSS payloads. F29 medium: Below-fold work and resources are loaded eagerly. |
be-sustainablethird-party-and-media-budget | issues | high | Initial transfer is 8.52 MB, of which 8.15 MB comes from Steam CDN origins and 6.63 MB is images; individual decorative images exceed 1.1 MB. F30 high: The storefront has no effective initial media budget. |
be-agent-readystructured-agent-capabilities | issues | high | Lighthouse agentic browsing scored 27; the DOM has no WebMCP tools and product actions are only encoded in presentation markup. F31 medium: The public commerce surface exposes no structured agent capability contract. |
be-agent-readyon-device-inference | not-applicable | high | No summarization, generation, or other inference feature is part of the audited storefront tasks. |
be-memory-efficientno-leak-under-repeated-interaction | pass | medium | After ten responsive-menu toggles, heap nodes fell from 520,001 to 518,959 and self size from 32,638,756 to 32,442,300 bytes. |
be-memory-efficientbounded-footprint | pass | medium | The settled homepage heap was about 32.6 MB self size and did not grow after repeated interaction. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | medium | Neither heap summary listed a Detached constructor among top retained constructors, and repeated menu toggling did not increase node or edge counts. |
Provenance
Canonical report: results/atomic/reports/0666-store_steampowered_com.json
Report SHA-256: dabb2ce0b043d2036508b233a2c1b5ffb2b2f43399a41235cfac29873bf93f61
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/store_steampowered_com/2026-07-22T06-28-39-595Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/store_steampowered_com/2026-07-22T06-28-39-595Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.