Manifest position 711 · CrUX rank bucket 1000

https://ecnavi.jp

Coverage complete

Coverage-complete audit of seven representative public paths. Excluded: authenticated member-only dashboards, survey completion, external advertiser conversion and any real account creation/purchase because they require credentials or consequential user data.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	The dark-condition screenshot is pixel-identical in palette to the light capture; surfaces remain white and the platform probe found no dark-theme rule. F01 medium: The site does not adapt to dark color preference.
respect-user-preferences `respects-reduced-motion`	issues	high	The reduced-motion probe found 41 running, effectively continuous 1000 ms animations and no prefers-reduced-motion rule. F02 medium: Animations continue when reduced motion is requested.
respect-user-preferences `respects-contrast`	issues	high	The stylesheet probe found no contrast-preference adaptation; axe reported 42 serious color-contrast failures. F03 medium: Contrast preferences are not handled and ordinary contrast already fails.
implement-natural-interactions `view-transitions`	issues	high	The live stylesheet probe found no view-transition declarations on a multi-route Next.js experience. F04 low: Route and state changes do not use View Transitions.
implement-natural-interactions `scroll-driven-animations`	not-applicable	high	No scroll-linked parallax, reveal or scrollytelling effect was present; ordinary scrolling does not require a scroll-driven animation.
implement-natural-interactions `physical-gestures`	pass	high	Stylesheet probe found native CSS scroll-snap usage and no custom gesture blocker.
provide-guided-navigation `scroll-state-aware-chrome`	pass	high	Mobile and desktop captures show stable, predictable navigation chrome; no broken scroll-driven toggling was observed.
provide-guided-navigation `anchored-positioning`	not-applicable	high	No tooltip, anchored popover or edge-positioned menu was present in the representative public paths, so anchor positioning has no applicable target.
provide-guided-navigation `directs-attention`	pass	high	Named navigation, signup step indicator and clear section headings preserve orientation across representative pages.
maximize-content-reduce-noise `no-intrusive-interruptions`	issues	high	Desktop, search, guide and campaign screenshots show a centered modal and dimmed page before interaction. F05 high: A consent interstitial obscures every public content page on load.
maximize-content-reduce-noise `semantic-dismissible-primitives`	issues	high	DOM structure found four role=dialog DIVs but zero dialog elements and zero popovers. F06 medium: The consent modal is custom div chrome rather than a native dialog.
maximize-content-reduce-noise `reduced-chrome`	issues	high	The homepage and listing screenshots are dominated by banners, offer tiles and secondary promotion; the HAR records 135 image requests and 275 third-party requests. F07 high: Dense advertising and promotional chrome competes with the service content.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	issues	high	At a requested 360px viewport Chrome reports a 1140px layout viewport and 0.3158 visual scale because meta viewport content is empty; text and controls are tiny. F08 high: Mobile pages render a scaled desktop canvas instead of reflowing.
adapt-to-the-form-factor `component-level-responsiveness`	issues	high	The platform probe found no @container rules, while mobile screenshots show desktop cards merely scaled down. F09 medium: Components do not adapt to their available container.
adapt-to-the-form-factor `input-modality-aware`	issues	high	Programmatic focus on the first link computed outline-style none; the scaled 1140px canvas shrinks controls at 360px. F10 high: Keyboard focus is invisible and mobile targets are visually tiny.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	Homepage states the point-earning proposition and prominently exposes free registration; signup clearly requests email.
support-core-task-success `primary-flow-completion`	pass	high	The public acquisition path reaches a focused four-step signup flow without an account wall before registration; first-step form action is present.
support-core-task-success `clear-system-state-and-recovery`	pass	high	The tested nonexistent route returns HTTP 404 and a clear Japanese recovery page linking to EC Navi home.
be-fast-and-stable `good-core-web-vitals`	issues	high	Lighthouse reports performance 47, LCP 10.3s, TBT 470ms and time-to-interactive 46.5s; the trace independently records FCP/LCP 3.55s. F11 high: Load performance is outside the good range.
be-fast-and-stable `visual-stability`	pass	high	Mobile layout observer recorded CLS 0.0016 and Lighthouse CLS was 0.041, both in the good range.
be-fast-and-stable `efficient-main-thread`	issues	high	Lighthouse measured 470ms TBT and the trace recorded an 86.74ms long task. F12 medium: Main-thread work delays interactivity.
be-fast-and-stable `efficient-resource-delivery`	issues	high	HAR: 366 requests and 8.09MB transferred, including 5.08MB images and 660KB across 69 font requests; several large assets lack cache headers. F13 high: The initial page load is very heavy and inefficient.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Lighthouse estimates 752KiB unused JavaScript and 286KiB unused CSS, alongside 47 script requests. F14 medium: Large amounts of shipped code are unused.
be-inclusive `names-roles-labels`	issues	high	axe found one critical unnamed button and three serious unnamed links; the image audit found 37 images without alt text. F15 high: Controls and links lack accessible names.
be-inclusive `sufficient-contrast`	issues	high	axe reported 42 serious color-contrast failures and 75 additional nodes requiring review. F16 high: Many text elements fail WCAG AA contrast.
be-inclusive `structure-and-focus`	issues	high	axe found 18 region violations; DOM has no main landmark, multiple empty headings, and focused links compute outline-style none. F17 medium: Landmark, heading and focus structure is incomplete.
be-inclusive `legible-text`	issues	high	The 360px screenshots show an entire 1140px-wide desktop composition compressed into the viewport. F18 high: Mobile text is too small because the desktop page is scaled down.
be-inclusive `zoom-reflow-targets-and-media`	issues	high	DOM reports meta viewport content=""; layout resolves to 1140 CSS px at a 360px requested viewport. F19 high: The empty viewport declaration defeats proper mobile reflow and usable target sizing.
follow-best-practices `no-console-errors`	issues	high	Lighthouse errors-in-console audit failed with two items. F20 medium: The page emits browser console errors.
follow-best-practices `sound-document-and-assets`	issues	high	The image audit found 41 images without dimensions, 29 oversized images and 52 legacy-format images. F21 medium: Document assets are not consistently well structured.
follow-best-practices `browser-platform-hygiene`	issues	high	Lighthouse inspector-issues audit failed with one item, although BFCache and on-load permission audits passed. F22 low: DevTools reports inspector issues.
be-discoverable `title-and-description`	pass	high	Homepage, guide, search and signup expose descriptive titles; homepage/signup include descriptive meta text.
be-discoverable `crawlable-and-mobile-friendly`	issues	high	Lighthouse crawlable-anchors audit failed one item; DOM/axe found multiple unnamed links. F23 medium: Some links are not meaningfully crawlable or named.
be-discoverable `canonical-and-indexing-signals`	pass	high	robots.txt allows the public site and points to a valid sitemap index; tested pages return 200 and signup exposes canonical.
be-discoverable `structured-and-shareable-metadata`	pass	high	Homepage probe found two JSON-LD blocks and 12 Open Graph tags alongside visible entity content.
be-private-and-secure `secure-transport-and-headers`	issues	high	Headers found no CSP, HSTS or nosniff; 16 of 17 observed cookies lacked Secure and many used SameSite=None. F24 high: Transport is HTTPS, but baseline security headers and cookie flags are missing.
be-private-and-secure `data-minimisation-and-third-parties`	issues	high	Trackers observed 70 third-party origins and 21 known tracker domains; HAR attributes 275 requests and 5.49MB to third parties, while the dialog names 210 partners. F25 high: The page exposes an exceptionally broad tracking surface before consent.
be-private-and-secure `in-context-permissions-and-modern-auth`	issues	high	Login probe found no passkey/WebAuthn integration; password autocomplete is explicitly off and email has no autocomplete token. Lighthouse confirms no permission prompts on load. F26 medium: Authentication disables password-manager assistance and offers no passkey path.
be-private-and-secure `defensive-browser-policies`	issues	high	Headers found no frame protection, Referrer-Policy or Permissions-Policy in addition to no CSP/HSTS. F27 high: Browser-enforced defensive policies are absent.
be-resilient `progressive-enhancement`	issues	high	Discoverability captured a blank crawler screenshot for the homepage and only 33% raw/rendered word coverage; guide and search retain partial content but explicitly require JavaScript for points. F28 high: Core homepage content disappears without JavaScript.
be-resilient `resilient-runtime-behaviour`	pass	high	Representative mobile captures show menus/content contained without clipped custom overlays; native 404 state remains usable.
be-resilient `offline-and-installable`	issues	high	The platform probe found no web app manifest; no offline fallback was exposed during recon. F29 medium: The app-like rewards service has no install/offline metadata.
be-resilient `network-and-http-failure-states`	pass	high	A real nonexistent route returns HTTP 404 with concise explanation and a clear home recovery link.
be-internationalised `lang-dir-and-logical-properties`	not-applicable	high	The audited service is explicitly Japanese, uses lang=ja and presents no multi-locale or time-sensitive public surface; multi-locale data/time handling is outside this run’s declared public context.
be-internationalised `locale-aware-data`	not-applicable	high	The audited service is explicitly Japanese, uses lang=ja and presents no multi-locale or time-sensitive public surface; multi-locale data/time handling is outside this run’s declared public context.
be-internationalised `time-zone-correctness`	not-applicable	high	The audited service is explicitly Japanese, uses lang=ja and presents no multi-locale or time-sensitive public surface; multi-locale data/time handling is outside this run’s declared public context.
be-trustworthy `no-dark-patterns`	issues	high	The first layer offers “Manage options” and a prominent “Consent” button but no equally direct reject action, while blocking the whole page and listing 210 partners. F30 high: The consent choice architecture nudges acceptance.
be-trustworthy `humane-error-handling`	issues	high	Signup DOM shows the email input is not required and has no aria-invalid state; empty submit triggers navigation rather than local actionable validation. F31 medium: The registration email field lacks client-side required/error semantics.
be-trustworthy `trustworthy-input-assistance`	issues	high	Signup email has no autocomplete token; login email has none and password sets autocomplete="off". F32 medium: Registration and sign-in forms omit or disable autocomplete.
be-trustworthy `safe-commercial-and-account-flows`	pass	high	Registration shows a clear four-step progression and no charge/continuity commitment; no checkout or subscription purchase was in public scope.
be-sustainable `optimised-assets`	issues	high	Image audit found 29 oversized, 54 without srcset and 52 legacy-format images; images transfer 5.08MB. F33 high: Image delivery wastes bandwidth.
be-sustainable `no-wasteful-work`	issues	high	HAR records 90 fetch/XHR requests, 366 requests overall and 275 third-party requests during an idle load. F34 high: Background advertising and analytics work is excessive.
be-sustainable `third-party-and-media-budget`	issues	high	Third parties transfer 5.49MB; 70 origins are contacted and 69 font files alone transfer 661KB. F35 high: Third-party resources dominate the page budget.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	Agent-facing/on-device inference capability is emerging and no agent integration intent is declared for this conventional rewards site.
be-agent-ready `on-device-inference`	not-applicable	high	Agent-facing/on-device inference capability is emerging and no agent integration intent is declared for this conventional rewards site.
be-memory-efficient `no-leak-under-repeated-interaction`	pass	medium	After ten full-page scroll down/up cycles, heap grew 3.6% (77.35MB to 80.14MB) without evidence of unbounded retained growth; confidence is medium because separate loads add noise.
be-memory-efficient `bounded-footprint`	issues	high	Baseline heap summary contains 1,245,449 nodes and 77.35MB self size for a mostly static listings page; after repeated scrolling it reaches 80.14MB. F36 medium: The idle page has a disproportionate memory footprint.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	medium	Neither heap summary lists Detached* constructors among the largest populations, and repeated scrolling caused only modest total growth.

Provenance

Canonical report: results/atomic/reports/0711-ecnavi_jp.json
Report SHA-256: c50df9521537d86ef4a3c7aafabb9c8286f496138f61d4c11fbf35701844260c
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/ecnavi_jp/2026-07-22T13-41-17-880Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/ecnavi_jp/2026-07-22T13-41-17-880Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.