Manifest position 838 · CrUX rank bucket 1000

https://fastdl.app

Coverage complete

Atomic audit of 58 checks across home, primary-flow entry, FAQ, and Arabic localization templates.

Attempts

1 / 3

Judged checks

58 / 58

Blocked

Not run

This report has no published overall score. Blocked and not-run checks are not passes. A coverage-complete report means every check has a judged outcome; it does not mean every check passed.

All 58 atomic check outcomes

Principle / check	Status	Confidence	Evidence or reason
respect-user-preferences `respects-color-scheme`	issues	high	The dark-mode probe matched prefers-color-scheme: dark, but html computed color-scheme remained normal and body stayed rgb(249, 250, 251). F01 medium: The page does not follow the system dark-color preference.
respect-user-preferences `respects-reduced-motion`	pass	high	The page reported zero active animations under prefers-reduced-motion: reduce.
respect-user-preferences `respects-contrast`	issues	high	Lighthouse found 1.82:1 contrast for “Learn more” and 2.8:1 for the partners link against the dimmed consent surface. F02 medium: Consent content fails minimum contrast.
implement-natural-interactions `view-transitions`	issues	medium	Rendered CSS/DOM contained no view-transition declarations or startViewTransition usage across the home and FAQ routes. F03 low: Route changes have no authored View Transition.
implement-natural-interactions `scroll-driven-animations`	not-applicable	high	No scroll-linked animation or scrollytelling interaction is present, so implementation technique is not applicable.
implement-natural-interactions `physical-gestures`	not-applicable	high	No gesture-driven, swipe, pull-to-reveal, or carousel interaction was present on representative paths.
provide-guided-navigation `scroll-state-aware-chrome`	issues	medium	The page is roughly 9,048 CSS px tall on mobile, but inspected CSS contains no scroll-state query, progress indicator, or shrinking-header behavior. F04 low: The long page offers little scroll-state guidance.
provide-guided-navigation `anchored-positioning`	pass	high	No detached tooltip/popover drift was visible; the simple language/navigation controls remained within the viewport.
provide-guided-navigation `directs-attention`	pass	high	Navigation labels, H1, URL field, and Download action establish a clear attention path behind the consent layer.
maximize-content-reduce-noise `no-intrusive-interruptions`	issues	high	Desktop and 360px screenshots show a modal consent prompt covering the downloader and most of the viewport before interaction. F05 high: A consent wall obscures the primary task on every fresh visit.
maximize-content-reduce-noise `semantic-dismissible-primitives`	issues	high	DOM inspection found visible DIV role=dialog overlays and no <dialog> or popover elements. F06 medium: The consent modal is an ad-hoc div rather than a dialog primitive.
maximize-content-reduce-noise `reduced-chrome`	pass	high	The authored page uses a compact header and content sections without a heavy application frame.
adapt-to-the-form-factor `responsive-no-horizontal-scroll`	pass	high	At 360x800, scrollWidth and clientWidth were both 360 with 0 px horizontal overflow and a viewport meta tag.
adapt-to-the-form-factor `component-level-responsiveness`	issues	medium	The CSS probe found no @container usage even though feature/navigation components are reused across widths. F07 low: Repeated components do not use component-level responsiveness.
adapt-to-the-form-factor `input-modality-aware`	pass	high	Primary controls are at least 48 px in captured computed styles and Lighthouse reported named buttons/links.
support-core-task-success `clear-purpose-and-primary-action`	pass	high	The H1 is “Instagram Downloader” and the visible form exposes an Instagram URL input and Download action.
support-core-task-success `primary-flow-completion`	issues	high	Repeated fresh-session flow captures never exposed an immediate reject path; the modal covers the URL field and asks to share data with 210 partners. F08 high: The primary downloader is blocked by consent before users can act.
support-core-task-success `clear-system-state-and-recovery`	pass	high	The form exposes paste, clear, and download controls and retains the page context around the task.
be-fast-and-stable `good-core-web-vitals`	pass	high	Lighthouse measured LCP 1.2 s and CLS 0.023; trace LCP was 1.56 s with no trace long tasks.
be-fast-and-stable `visual-stability`	pass	high	Lighthouse CLS was 0.023 and mobile observed CLS 0.088, both below the 0.1 good threshold.
be-fast-and-stable `efficient-main-thread`	issues	high	Lighthouse measured 240 ms Total Blocking Time; the mobile layout observer also recorded a 72 ms long task. F09 medium: Main-thread blocking is above the good Lighthouse diagnostic range.
be-fast-and-stable `efficient-resource-delivery`	issues	high	HAR recorded 1,128,147 transferred bytes; 625,217 bytes were third-party and 875,583 bytes were scripts. F10 medium: Third-party scripts dominate a relatively simple page load.
be-fast-and-stable `trim-unused-and-duplicate-code`	issues	high	Lighthouse estimated 440 KiB unused JavaScript and 30 KiB unused CSS; app.js was about 65% unused. F11 medium: The page ships substantial unused JavaScript and CSS.
be-inclusive `names-roles-labels`	pass	high	Lighthouse passed form labels, button names, and link names; image audit found no missing alt text.
be-inclusive `sufficient-contrast`	pass	medium	Direct evidence across the representative home, FAQ, flow, and localized paths supported Text and essential UI meet WCAG colour-contrast minimums against their background.
be-inclusive `structure-and-focus`	pass	high	Lighthouse passed heading order and interactive naming across the rendered page.
be-inclusive `legible-text`	pass	high	Body copy and headings reflow without clipping in desktop and 360 px captures.
be-inclusive `zoom-reflow-targets-and-media`	pass	high	Viewport allows scaling to 5, mobile has no horizontal overflow, and no caption-requiring media is present.
follow-best-practices `no-console-errors`	pass	high	Lighthouse errors-in-console passed and best-practices scored 1.0.
follow-best-practices `sound-document-and-assets`	pass	high	The document has an HTML doctype, charset/viewport metadata, and all 17 images have dimensions and alt text.
follow-best-practices `browser-platform-hygiene`	pass	high	Lighthouse best-practices scored 1.0 with no console/deprecation failure surfaced.
be-discoverable `title-and-description`	pass	high	A descriptive title and meta description are present in both raw and rendered HTML.
be-discoverable `crawlable-and-mobile-friendly`	pass	high	robots.txt allows crawling; viewport metadata and real href links are present; Lighthouse SEO scored 1.0.
be-discoverable `canonical-and-indexing-signals`	pass	high	Canonical points to /en4, robots allows indexing, sitemap exists, and 27 hreflang links were detected.
be-discoverable `structured-and-shareable-metadata`	pass	high	The page includes one JSON-LD block and localized hreflang metadata matching visible content.
be-private-and-secure `secure-transport-and-headers`	issues	high	Headers found no CSP or HSTS; cookies found six without Secure, including analytics cookies using SameSite=None. F12 high: Transport policy and cookies lack baseline hardening.
be-private-and-secure `data-minimisation-and-third-parties`	issues	high	Tracker capture found 8 third-party origins and Google Analytics, Tag Manager, and AdSense; the consent UI names 210 partners. F13 high: The default tracking footprint is excessive.
be-private-and-secure `in-context-permissions-and-modern-auth`	pass	high	No geolocation or notification prompt appeared on load; the site exposes no authentication flow requiring passkeys.
be-private-and-secure `defensive-browser-policies`	issues	high	The main response omitted Referrer-Policy, Permissions-Policy, X-Content-Type-Options, CSP, and HSTS; only X-Frame-Options was present. F14 medium: Several browser-enforced defenses are missing.
be-resilient `progressive-enhancement`	pass	high	Raw HTML retained 88% of rendered content, including title, H1, and description; it is not a JS shell.
be-resilient `resilient-runtime-behaviour`	pass	high	Home, FAQ, and RTL routes rendered without console errors; controls remained within mobile viewport.
be-resilient `offline-and-installable`	issues	medium	A manifest is linked, but the runtime probe found no active service-worker registration. F15 low: The app-like utility has no verified offline fallback.
be-resilient `network-and-http-failure-states`	pass	high	The primary form retains clear/reset controls and page context rather than replacing the document with a shell.
be-internationalised `lang-dir-and-logical-properties`	pass	high	English declares lang=en; the Arabic route renders RTL navigation and content at 360 px without horizontal overflow.
be-internationalised `locale-aware-data`	not-applicable	high	Representative pages contain no locale-sensitive dates, currencies, durations, or editable numeric data.
be-internationalised `time-zone-correctness`	not-applicable	high	The downloader and FAQ expose no events or time-zone-sensitive data.
be-trustworthy `no-dark-patterns`	issues	high	The first prompt offers Consent and Manage options, but no direct Reject all action, while describing sharing with 210 partners. F16 high: Consent choices are not presented symmetrically.
be-trustworthy `humane-error-handling`	pass	high	The single URL task keeps clear/reset available and does not show premature validation before interaction.
be-trustworthy `trustworthy-input-assistance`	not-applicable	high	The only primary field is a URL paste field; address, payment, identity, and sign-in autofill do not apply.
be-trustworthy `safe-commercial-and-account-flows`	not-applicable	high	No checkout, subscription, authentication, or account-management flow is offered.
be-sustainable `optimised-assets`	issues	high	Image inspection found 12 images without srcset, 10 legacy-format assets, 7 below-fold images not lazy-loaded, and one oversized image. F17 medium: Images are not consistently responsive or modern.
be-sustainable `no-wasteful-work`	issues	high	HAR showed 16 third-party requests and 625,217 third-party bytes, including analytics calls and large ad scripts on initial load. F18 medium: Advertising and analytics create avoidable background work.
be-sustainable `third-party-and-media-budget`	issues	high	More than half of the 1.13 MB transfer was third-party; Tag Manager, AdSense, and the consent platform were among the largest resources. F19 medium: Third-party payload is disproportionate to the downloader UI.
be-agent-ready `structured-agent-capabilities`	not-applicable	high	No declared agent-facing intent was found; this emerging capability is optional for the public downloader.
be-agent-ready `on-device-inference`	not-applicable	high	The product has no inference or summarisation task where built-in AI would add clear value.
be-memory-efficient `no-leak-under-repeated-interaction`	pass	high	After repeated theme interaction, node count fell from 349,896 to 346,817; retained self-size rose 6.2%, not evidence of unbounded growth in this bounded run.
be-memory-efficient `bounded-footprint`	issues	high	The baseline heap summary contained 349,896 nodes and 20,714,412 self-size bytes before any download flow. F20 medium: The initial memory footprint is heavy for a simple form/content page.
be-memory-efficient `no-detached-dom-or-unbounded-listeners`	pass	high	Neither heap summary surfaced Detached* constructors among dominant populations, and total node count did not grow after repetition.

Provenance

Canonical report: results/atomic/reports/0838-fastdl_app.json
Report SHA-256: 83d2e938b53f4c7727bbb0d049721145163ca7518110e02cffc613f092ebc0ca
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/fastdl_app/2026-07-23T08-26-13-025Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/fastdl_app/2026-07-23T08-26-13-025Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7

Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.