Manifest position 834 · CrUX rank bucket 1000

https://www.subito.it

Coverage complete

Complete atomic audit of 58 checks across five representative public paths. Authenticated messaging, checkout/payment completion and account settings were not covered because they require a user account; the audited primary public journey was search/listing/detail plus the seller entry.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	Screenshot comparison found the dark capture byte-identical to the light capture; the UI remains white under prefers-color-scheme: dark. F-01 low: Honours prefers-color-scheme: a usable dark mode exists and is driven by the user's preference (color-scheme / prefers-color-scheme / light-dark()), not hard-coded light only.
respect-user-preferences `respects-reduced-motion`	pass	high	Under prefers-reduced-motion: reduce, the probe found zero active animations and three reduced-motion CSS rules.
respect-user-preferences `respects-contrast`	issues	high	Lighthouse failed color contrast and the high-contrast capture was used to inspect control visibility. F-02 low: Honours prefers-contrast / forced-colors: controls, text and scrollbars remain visible under high-contrast preferences.
implement-natural-interactions `view-transitions`	pass	high	Rendered HTML includes the cross-document @view-transition initialization and pageswap/pagereveal handling.
implement-natural-interactions `scroll-driven-animations`	pass	high	DOM/CSS probes found no scroll-linked effects or animation-timeline use on the representative pages, so no JS scroll-animation anti-pattern was present.
implement-natural-interactions `physical-gestures`	pass	high	Mobile walkthroughs showed native scrolling and ordinary links/buttons; no custom pointer-driven gesture surface was present.
provide-guided-navigation `scroll-state-aware-chrome`	issues	high	Long listing/detail pages retain static navigation chrome; the CSS probe found no scroll timeline/state treatment to guide long-page position. F-03 low: Sticky/affixed UI reacts to scroll state and position (e.g. the new scroll-state(scrolled) query, shrinking headers, progress indicators) so chrome responds to position instead of static or JS-driven toggling.
provide-guided-navigation `anchored-positioning`	pass	high	The listing account callout remained attached within the viewport without clipping at 360px.
provide-guided-navigation `directs-attention`	pass	high	Listing and detail views provide breadcrumbs and a prominent “Torna alla ricerca” return action.
maximize-content-reduce-noise `no-intrusive-interruptions`	issues	high	The listing mobile capture shows an unsolicited “Accedi ora” callout covering search controls, alongside a persistent promotional banner. F-04 medium: No intrusive pop-ups, interstitials or banners that obscure content on load; overlays are dismissible and content-first.
maximize-content-reduce-noise `semantic-dismissible-primitives`	issues	high	DOM found a SECTION with role=dialog; Lighthouse reports aria-dialog-name failure, indicating custom dialog semantics without an accessible name. F-05 low: Overlays and rich controls use the right primitive: popover (with declarative light-dismiss) for transient UI, dialog for modal flows, details for disclosure, native-but-branded selects and pickers, rather than ad-hoc divs.
maximize-content-reduce-noise `reduced-chrome`	pass	high	Mobile home, listing, detail and sell captures devote the majority of viewport space to search, listings, item imagery or the selling task.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	Layout at 360x800 reported scrollWidth=clientWidth=360 and zero horizontal overflow on all four representative templates.
adapt-to-the-form-factor `component-level-responsiveness`	pass	high	CSS probe counted 13 container-query rules and all representative templates adapted cleanly at 360px.
adapt-to-the-form-factor `input-modality-aware`	issues	high	Lighthouse failed target-size; the probe counted 177 rendered interactive boxes below 24px in at least one dimension, while keyboard outline was visible. F-06 medium: Touch targets are adequately sized and hover-only affordances have a non-hover fallback, and keyboard focus is visible, so the UI works for touch, pointer and keyboard alike.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	First-view captures clearly expose Cerca on home/listing, item identity and price on detail, and “Inserisci il tuo annuncio” on sell.
support-core-task-success `primary-flow-completion`	pass	high	The public browse journey was completed from home to listing to a live item detail with a clear return path; the sell entry surface also loaded.
support-core-task-success `clear-system-state-and-recovery`	issues	high	A deliberately unknown route rendered “Servizio non disponibile… Torna tra poco” but provided no home, back, retry, search, or support action. F-07 medium: Loading, empty, success, error, offline, and partial-completion states are visible and actionable; users can retry, undo, cancel, go back, or continue without losing context.
be-fast-and-stable `good-core-web-vitals`	issues	high	Lighthouse performance was 0.56 with LCP 12.2s, CLS 0.119 and TBT 200ms; a warm raw-CDP trace was faster (LCP 1.69s), showing condition sensitivity but not negating the throttled failure. F-08 high: Core Web Vitals are in the good range: LCP is fast, interaction latency (INP) is low, and CLS is minimal; work is prioritised and deferred sensibly.
be-fast-and-stable `visual-stability`	issues	high	Lighthouse measured CLS 0.119, found three layout shifts, and flagged unsized images; the image audit found 39 images without explicit dimensions. F-09 medium: No cumulative layout shift from late content (images, banners, fonts) that arrives without reserved space.
be-fast-and-stable `efficient-main-thread`	issues	high	Lighthouse measured 3.0s main-thread work and 1.7s JavaScript execution, despite the warm trace observing no long tasks. F-10 medium: The main thread is not blocked by long tasks or heavy scripting; work is deferred, chunked, prioritised, or moved off-thread.
be-fast-and-stable `efficient-resource-delivery`	issues	high	HAR recorded 120 requests and 3.24MB, nine parser-inserted VeryHigh-priority stylesheets; Lighthouse estimated 1.18s render-blocking savings. F-11 high: Critical resources are delivered efficiently: cache headers are useful, render-blocking chains are short, fonts do not block or shift text, HTTP delivery is modern, and network dependency trees do not delay the main content.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Lighthouse estimated 657KiB unused JavaScript and 38KiB unused CSS; HAR recorded 43 script requests transferring 1.85MB. F-12 medium: The page does not ship large unused or duplicated JavaScript/CSS, avoidable legacy bundles, or third-party code that dominates the load without user value.
be-inclusive `names-roles-labels`	issues	high	Lighthouse failed aria-dialog-name and link-name; the image audit also reported 23 images without alt attributes (some decorative). F-13 high: Interactive elements have accessible names, correct roles, and form fields have labels; images have alt text where meaningful; canvas/expressive content is exposed to assistive technology.
be-inclusive `sufficient-contrast`	issues	high	Lighthouse’s automated WCAG contrast audit failed on the home template. F-14 high: Text and essential UI meet WCAG colour-contrast minimums against their background.
be-inclusive `structure-and-focus`	issues	high	Lighthouse failed heading-order and agent accessibility-tree checks; the homepage DOM had no h1, though a focused link had a visible auto outline. F-15 low: Heading and landmark structure is logical, focus order follows reading order, keyboard focus is always visible, and interactive state survives DOM moves.
be-inclusive `legible-text`	pass	high	Mobile screenshots show readable, unclipped Italian headings, labels, prices and body text across all four templates.
be-inclusive `zoom-reflow-targets-and-media`	issues	high	Viewport permits scaling and 360px reflow has no overflow, but Lighthouse failed touch-target sizing. No essential video/audio was present. F-16 low: The experience remains usable when zoomed or reflowed, touch targets are large enough, media has captions or equivalents where needed, and the viewport does not prevent user scaling.
follow-best-practices `no-console-errors`	issues	high	Lighthouse recorded browser console errors during its full load, while the later three-second page probe observed none. F-17 low: The page loads without console errors or uncaught exceptions.
follow-best-practices `sound-document-and-assets`	issues	high	Document has HTML doctype and UTF-8, but Lighthouse flagged unsized images and the image audit found 39 missing dimensions plus 17 oversized assets. F-18 low: Valid doctype and charset, images sized with correct aspect ratio, no deprecated APIs misused, and CSS/HTML are well structured and not needlessly repetitive. (HTTPS, CSP and permission hygiene are judged under be-private-and-secure, not here.)
follow-best-practices `browser-platform-hygiene`	pass	high	Lighthouse best-practices scored 0.96; no permission request fired on load and the runtime probe found no immediate uncaught error.
be-discoverable `title-and-description`	pass	high	Home, listing, detail and sell templates have distinct descriptive titles and meta descriptions.
be-discoverable `crawlable-and-mobile-friendly`	issues	high	Viewport and robots are present, but Lighthouse failed crawlable-anchors; recon found multiple category links resolving only to the homepage “#”. F-19 low: Links are crawlable (real href), there is a viewport meta tag, robots does not block indexing, and link text is descriptive.
be-discoverable `canonical-and-indexing-signals`	issues	high	Home/listing/detail have sound indexing signals, but the sell template lacked a canonical and /sitemap.xml returned 503 during the audit. F-20 low: Public pages expose the indexing signals search engines need: successful HTTP status, canonical URL when appropriate, hreflang for localized variants, robots/sitemap consistency, and no accidental noindex/noarchive policy.
be-discoverable `structured-and-shareable-metadata`	pass	high	Home/listing/detail include JSON-LD plus Open Graph metadata; the item detail contained four JSON-LD blocks matching the visible listing.
be-private-and-secure `secure-transport-and-headers`	issues	high	HTTPS, HSTS, nosniff and SAMEORIGIN are present, but CSP is absent and didomi_dcs is not Secure; two cookies use SameSite=None. F-21 high: Served over HTTPS with a sensible Content-Security-Policy and secure, SameSite cookies; no mixed content or obvious transport/header smells.
be-private-and-secure `data-minimisation-and-third-parties`	issues	high	Tracker capture found 20 third-party origins and seven known tracker domains; HAR attributed 83 requests and 2.51MB to non-main origins. F-22 high: No over-collection of user data, no leaky third parties, and analytics/background data collection is minimised and batched rather than chatty or session-wide by default.
be-private-and-secure `in-context-permissions-and-modern-auth`	issues	low	No permission request fired on load, but recon of the visible authentication entry found no evidence of passkey/WebAuthn support for this account-based marketplace. F-23 low: Permission prompts are requested in context (not on load), and authentication uses modern, phishing-resistant methods (passkeys / WebAuthn) where relevant rather than passwords alone.
be-private-and-secure `defensive-browser-policies`	issues	high	HSTS, X-Frame-Options and Referrer-Policy are present, but CSP and Permissions-Policy are absent; cookies include SameSite=None and one non-Secure cookie. F-24 medium: Browser-enforced defenses are configured where appropriate: HSTS, clickjacking protection (frame-ancestors / X-Frame-Options), Trusted Types for XSS-sensitive apps, origin isolation, privacy-preserving third-party cookie posture, and sensible Referrer-Policy / Permissions-Policy.
be-resilient `progressive-enhancement`	pass	high	Discoverability fetch returned 200 with 74% rendered-word coverage in raw HTML; title and description survive without JavaScript and it is not a JS shell.
be-resilient `resilient-runtime-behaviour`	pass	high	Menus/callouts and long templates stayed within the 360px viewport; layouts had zero horizontal overflow and no broken shell.
be-resilient `offline-and-installable`	issues	high	A manifest exists but uses display:"browser" and prefer_related_applications:true; runtime probe found no controlling service worker. F-25 low: Where the site is an app, it is installable (web app manifest) and offers an offline fallback and works on flaky networks. (Contextual: a brochure or intrinsically-online site may reasonably not need this.)
be-resilient `network-and-http-failure-states`	issues	high	Unknown-route test produced a branded error message but no actionable retry, home, search, back, or support control. F-26 medium: HTTP errors, network failures, timeouts and stale data states are handled intentionally: users see useful recovery options rather than blank screens, infinite spinners, broken shells, or misleading success states.
be-internationalised `lang-dir-and-logical-properties`	issues	high	HTML correctly declares lang=it and dir=ltr, but CSS probe counted 189 physical left/right-style rules, limiting writing-mode resilience. F-27 low: Correct lang and dir attributes, logical CSS properties (inline/block) rather than physical left/right, and translation-ready markup so the layout and reading order survive other languages and writing modes.
be-internationalised `locale-aware-data`	pass	high	The Italian detail template renders “75.000 €” and Italian relative/date text consistent with the declared it locale.
be-internationalised `time-zone-correctness`	pass	low	Visible listing timestamps are expressed in local Italian terms and no cross-time-zone scheduling surface appeared in the representative paths.
be-trustworthy `no-dark-patterns`	pass	high	Public search, listing, item price and sell entry use direct labels; no forced continuity, disguised ad action, or confirmshaming was observed in the exercised paths.
be-trustworthy `humane-error-handling`	pass	high	The sell entry asks for an item name or category with explanatory copy before deeper validation; no premature invalid state appeared.
be-trustworthy `trustworthy-input-assistance`	issues	high	Search and geo inputs, plus the sell item-name input, explicitly use autocomplete="off", preventing useful browser assistance. F-28 low: Input is assisted, not obstructed: correct autocomplete tokens so address, payment, sign-in and sign-up fields autofill, and inputs are highlighted/sized to help the user rather than trip them up.
be-trustworthy `safe-commercial-and-account-flows`	pass	high	The item detail exposes the full €75,000 price before contact and account actions are explicitly labelled; no subscription commitment was encountered.
be-sustainable `optimised-assets`	issues	high	Image audit found 17 oversized, 20 without srcset, 16 legacy-format and 23 below-fold non-lazy images. F-29 medium: Images and decorative assets are optimised and served at appropriate resolutions; decorative pseudo-element imagery and heavy decorative images are resolution-optimised rather than oversized.
be-sustainable `no-wasteful-work`	issues	high	HAR loaded 120 resources and 43 scripts on the landing page, including ad/analytics work; 83 requests were outside the main origin. F-30 medium: Background work and fetching are not wasteful: background processing is efficient and de-prioritised, and the lightest technique that achieves the result is preferred over heavy or redundant work.
be-sustainable `third-party-and-media-budget`	issues	high	2.51MB of 3.24MB transferred from non-main origins; GTM, consent and ad scripts were among the largest payloads. F-31 medium: Third-party scripts, fonts, video, audio, animation and heavy media are proportionate to the user value they provide; autoplay or background media is avoided unless essential and resource use is cached or deferred where possible.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	The emerging agent-capability check is not applicable: no declared agent-facing product intent or WebMCP surface was in scope.
be-agent-ready `on-device-inference`	not-applicable	high	The emerging on-device-inference check is not applicable: the marketplace paths expose no summarisation or language-model task.
be-memory-efficient `no-leak-under-repeated-interaction`	issues	high	Heap after ten bottom/top scroll cycles was 39.5MB/714k nodes versus 26.4MB/438k baseline. Separate browser sessions and dynamic content reduce confidence, but the 49.8% retained-size signal warrants investigation. F-32 medium: Repeating a representative interaction (open/close a modal, navigate a route and back, infinite-scroll a list) about 10 times does not grow retained heap without bound; what is allocated during the interaction is released when it ends.
be-memory-efficient `bounded-footprint`	issues	high	Baseline heap contained 437,993 nodes and 26.4MB self size before interaction, high for a landing/listing surface and consistent with the heavy script footprint. F-33 medium: Heap size and DOM node count are reasonable for what the page is; the footprint is proportionate rather than bloated.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	high	Neither heap summary exposed Detached* constructors among retained constructor summaries; no direct detached-DOM signal was found, though timer instrumentation was limited.

Provenance

Canonical report: results/atomic/reports/0834-www_subito_it.json
Report SHA-256: 11a2cb9840e06cf8367e882577d21aa6e15e375d8a76c679bc4b8b6ed0cb7271
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_subito_it/2026-07-23T07-47-59-595Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/www_subito_it/2026-07-23T07-47-59-595Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.