Manifest position 918 · CrUX rank bucket 1000
https://xxxbp.tv
Coverage complete
Coverage-complete agentic audit of five representative templates/journeys. Excluded: authenticated account interiors and actual media consumption beyond player readiness because they require credentials or extended playback.
All 58 atomic check outcomes
| Principle / check | Status | Confidence | Evidence or reason |
|---|---|---|---|
respect-user-preferencesrespects-color-scheme | issues | high | The light and dark captures retain the same palette, and the DOM reports color-scheme: normal. F-respect-user-preferences-respects-color-scheme medium: The fixed black/yellow palette does not respond to the user’s color-scheme preference. |
respect-user-preferencesrespects-reduced-motion | pass | high | The emulation matched reduce and getAnimations() returned no active animation, so no nonessential motion persisted. |
respect-user-preferencesrespects-contrast | pass | high | The forced-colors mobile capture retained readable text, visible controls, thumbnails, and clear boundaries. |
implement-natural-interactionsview-transitions | issues | high | The runtime CSS probe found zero view-transition rules on this multi-route site. F-implement-natural-interactions-view-transitions low: Route and state changes have no View Transition treatment. |
implement-natural-interactionsscroll-driven-animations | pass | high | No parallax, reveal, or other scroll-linked effect was observed, so there is no main-thread scroll-animation anti-pattern to replace. |
implement-natural-interactionsphysical-gestures | pass | high | The audited journeys use native scrolling, links, and buttons and did not install a custom gesture surface that fights platform behavior. |
provide-guided-navigationscroll-state-aware-chrome | issues | high | Mobile layout measured 32,716px of content while the header scrolls away and no scroll-state or timeline CSS was found. F-provide-guided-navigation-scroll-state-aware-chrome medium: The very long feed has no scroll-aware navigation or progress cue. |
provide-guided-navigationanchored-positioning | pass | high | The install overlay stays attached to the viewport edge without clipping at desktop and mobile sizes; no drifting tooltip/menu was observed. |
provide-guided-navigationdirects-attention | pass | high | Active sort tabs, the player title/breadcrumb, tag chips, and strong section headings visibly preserve orientation. |
maximize-content-reduce-noiseno-intrusive-interruptions | issues | high | Desktop, mobile, video, and registration screenshots show the PWA install card before user interaction; on registration it covers the email/password region. F-maximize-content-reduce-noise-no-intrusive-interruptions high: An unsolicited install dialog obscures core content and form fields on load. |
maximize-content-reduce-noisesemantic-dismissible-primitives | pass | high | The install surface has role=dialog, aria-modal, aria-labelledby, and an explicit Close button; disclosure/navigation controls use native buttons. |
maximize-content-reduce-noisereduced-chrome | pass | high | Outside the install prompt finding, the listing gives most viewport area to thumbnails/content and collapses desktop navigation on mobile. |
adapt-to-the-form-factorresponsive-no-horizontal-scroll | pass | high | All three mobile layouts reported 0px horizontal overflow and a viewport meta tag. |
adapt-to-the-form-factorcomponent-level-responsiveness | issues | high | The stylesheet runtime probe found zero @container rules despite cards appearing across grid, sidebar, and single-column contexts. F-adapt-to-the-form-factor-component-level-responsiveness low: Reusable cards adapt only at viewport level, with no component-level query support. |
adapt-to-the-form-factorinput-modality-aware | issues | high | Focused visible login, email, password, Create account, Country, install, and menu controls all computed to outline: none and box-shadow: none while matching :focus-visible. F-adapt-to-the-form-factor-input-modality-aware high: Keyboard focus is not visibly indicated on primary controls and fields. |
support-core-task-successclear-purpose-and-primary-action | pass | high | The listing H1 states the page purpose, search and sort controls are prominent, and the player presents a central Play action. |
support-core-task-successprimary-flow-completion | pass | high | A representative listing item resolves to a loaded 11:15 video with readyState 4 and a visible Play control. |
support-core-task-successclear-system-state-and-recovery | pass | high | The 404 state clearly says the page was not found and provides a Return to Homepage recovery link. |
be-fast-and-stablegood-core-web-vitals | issues | high | Lighthouse measured FCP 9.9s, LCP 17.2s, and performance 0.56; the separate trace measured LCP 2.89s, showing high run variability but a clear slow-path failure. F-be-fast-and-stable-good-core-web-vitals critical: The measured mobile load misses the LCP performance bar by a wide margin. |
be-fast-and-stablevisual-stability | pass | high | CLS was 0.034 on home, 0.032 on registration, and 0 on the mobile player, all within the good range. |
be-fast-and-stableefficient-main-thread | pass | high | The trace recorded one 53.86ms long task and 3.86ms TBT; mobile layout observed only one 51ms task. |
be-fast-and-stableefficient-resource-delivery | issues | high | HAR recorded 202 requests and 2.76MB transferred, including 145 image requests; Lighthouse reported 7.98s redirect savings and cache/image-delivery opportunities. F-be-fast-and-stable-efficient-resource-delivery high: The page sends an excessive request/image payload and has inefficient cache and redirect behavior. |
be-fast-and-stabletrim-unused-and-duplicate-code | issues | high | Lighthouse reported about 32KiB unused CSS, 22KiB unused JS, 74KiB unminified JS savings, and 18KiB legacy-JS savings. F-be-fast-and-stable-trim-unused-and-duplicate-code medium: The page ships avoidable unused, legacy, and unminified code. |
be-inclusivenames-roles-labels | issues | high | Lighthouse failed dialog-name, image-alt, and form-label audits; the DOM probe also found icon-only buttons without accessible text. F-be-inclusive-names-roles-labels high: Some controls, images, and the on-load dialog lack robust accessible naming. |
be-inclusivesufficient-contrast | issues | high | Lighthouse failed the color-contrast audit; the forced-colors screenshot remains operable but does not repair ordinary-theme contrast failures. F-be-inclusive-sufficient-contrast high: Some text and essential UI fail minimum color contrast. |
be-inclusivestructure-and-focus | issues | high | The direct focus probe found :focus-visible elements with no outline or box shadow, although landmarks and headings are present. F-be-inclusive-structure-and-focus high: Visible keyboard focus is absent across the primary navigation and registration form. |
be-inclusivelegible-text | pass | high | Body copy, titles, and form labels reflow without clipping or horizontal overflow and use readable line lengths in audited states. |
be-inclusivezoom-reflow-targets-and-media | pass | high | The direct DOM has width=device-width, initial-scale=1.0 without a scaling prohibition, and audited templates reflow at 360px with large primary buttons. |
follow-best-practicesno-console-errors | pass | high | Lighthouse did not report the errors-in-console audit among failed audits, and all representative pages completed navigation. |
follow-best-practicessound-document-and-assets | issues | high | The image primitive found 99 of 100 images without width/height and 99 without srcset; 98 use legacy formats. F-follow-best-practices-sound-document-and-assets medium: Image assets lack intrinsic sizing and responsive delivery metadata. |
follow-best-practicesbrowser-platform-hygiene | issues | high | Lighthouse reported three deprecation warnings and a failed inspector-issues audit. F-follow-best-practices-browser-platform-hygiene medium: Deprecated API and DevTools inspector issues remain in production. |
be-discoverabletitle-and-description | pass | high | The homepage exposes a descriptive title and meta description in both rendered and raw HTML. |
be-discoverablecrawlable-and-mobile-friendly | pass | high | Internal navigation uses real href URLs, viewport metadata is present, and robots.txt allows the homepage/content routes while excluding private/filter surfaces. |
be-discoverablecanonical-and-indexing-signals | pass | high | The page returned 200, declares a canonical and hreflang links, and robots.txt points to a populated sitemap without blocking the audited public URLs. |
be-discoverablestructured-and-shareable-metadata | pass | high | Open Graph/Twitter metadata and JSON-LD WebSite, Organization, and ItemList entities agree with visible content. |
be-private-and-securesecure-transport-and-headers | issues | high | All five observed cookies lacked Secure and used SameSite=None; session_id also lacked HttpOnly. CSP and X-Content-Type-Options were absent. F-be-private-and-secure-secure-transport-and-headers critical: Session cookies and key browser security headers are unsafe or absent. |
be-private-and-securedata-minimisation-and-third-parties | issues | high | Tracker evidence found 11 third-party origins, while the HAR recorded 202 requests; no consent or minimization control appeared before those requests. F-be-private-and-secure-data-minimisation-and-third-parties high: The initial page load contacts a broad advertising/tracking surface. |
be-private-and-securein-context-permissions-and-modern-auth | issues | high | The registration path contains username, email, and new-password fields; no WebAuthn/passkey affordance was observed. No permission prompt fired on load. F-be-private-and-secure-in-context-permissions-and-modern-auth medium: Account creation exposes password-only authentication with no passkey path. |
be-private-and-securedefensive-browser-policies | issues | high | Header evidence found no CSP/frame-ancestors, X-Frame-Options, Referrer-Policy, or Permissions-Policy; HSTS was present. F-be-private-and-secure-defensive-browser-policies high: Clickjacking, referrer, and permissions defenses are not configured in response headers. |
be-resilientprogressive-enhancement | pass | high | Non-JS raw HTML contains 85% of rendered content words, plus title, H1, and description; it is not a JS shell. |
be-resilientresilient-runtime-behaviour | pass | high | Listing, player, registration, and 404 templates rendered complete UI at both form factors without clipped horizontal content or blank shells. |
be-resilientoffline-and-installable | pass | high | A valid manifest is linked and the page is controlled by an active service worker, satisfying installability/offline infrastructure for this app-like site. |
be-resilientnetwork-and-http-failure-states | pass | high | A nonexistent route renders a specific error message and Return to Homepage action instead of a blank shell. |
be-internationalisedlang-dir-and-logical-properties | pass | high | The document declares lang=en and publishes x-default plus locale-specific hreflang alternatives; audited text order is correct for the LTR English surface. |
be-internationalisedlocale-aware-data | issues | high | The UI offers country and hreflang variants but listing metadata remains phrases such as “2 days ago” and “A month ago” with no localized output observed. F-be-internationalised-locale-aware-data medium: Locale-varying pages expose English-only relative dates and interface text. |
be-internationalisedtime-zone-correctness | not-applicable | high | No applicable surface was found. |
be-trustworthyno-dark-patterns | pass | high | Ads are labeled Advertising or Live, the install prompt has a clear close control, and no confirmshaming or hidden pricing was observed on audited public paths. |
be-trustworthyhumane-error-handling | issues | high | The register DOM marks login, email, and password as required:false; an empty submit navigated away rather than yielding inspectable in-place recovery. F-be-trustworthy-humane-error-handling medium: Registration fields do not expose client-side required constraints before submission. |
be-trustworthytrustworthy-input-assistance | pass | high | Registration uses autocomplete=username, email, and new-password with visible labels for each account field. |
be-trustworthysafe-commercial-and-account-flows | pass | high | The free registration surface states what the account unlocks, presents a single Create account action, and links terms and privacy policy. |
be-sustainableoptimised-assets | issues | high | The image audit found 98 legacy-format images and 99 without srcset; the HAR transferred 2.21MB across 145 image requests. F-be-sustainable-optimised-assets high: The image-heavy feed does not use modern, responsive delivery. |
be-sustainableno-wasteful-work | issues | high | Of 100 audited images, 96 below-fold images were not lazy-loaded; HAR captured 145 image requests on initial load. F-be-sustainable-no-wasteful-work high: Almost the entire long feed is fetched eagerly before it is needed. |
be-sustainablethird-party-and-media-budget | issues | high | The initial load contacted 11 third-party origins and sent 202 requests; multiple live/ad units render alongside the primary grid. F-be-sustainable-third-party-and-media-budget high: Third-party advertising and media consume a disproportionate initial-load budget. |
be-agent-readystructured-agent-capabilities | not-applicable | high | No applicable surface was found. |
be-agent-readyon-device-inference | not-applicable | high | No applicable surface was found. |
be-memory-efficientno-leak-under-repeated-interaction | pass | high | After 20 menu toggles, snapshot self-size fell from 11,955,725 to 11,917,574 bytes; node count changed by only 658 (0.36%), with no monotonic retained-growth signal. |
be-memory-efficientbounded-footprint | pass | high | The loaded long feed used about 11.96MB heap self-size, 5.73MB live JS heap, and 3,042 DOM elements, proportionate to its 100-card media listing. |
be-memory-efficientno-detached-dom-or-unbounded-listeners | pass | high | Neither heap summary reported Detached* among constructors, and repeated toggling produced only a 0.36% node-count delta rather than unbounded accumulation. |
Provenance
Canonical report: results/atomic/reports/0918-xxxbp_tv.json
Report SHA-256: e389484c87148630bdca9b07f0922f5131f6d7f91df90adf298498672cdec2c7
Local retained report: runs/2026-07-17T17-27-24-856Z/atomic-reports/xxxbp_tv/2026-07-23T20-37-08-206Z/report.json
Local evidence root: runs/2026-07-17T17-27-24-856Z/atomic-reports/xxxbp_tv/2026-07-23T20-37-08-206Z
Catalog SHA-256: sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7
Raw screenshots, HARs, traces, heaps, and other browser artifacts are retained at the local evidence root and intentionally are not committed. Artifact paths in the canonical report are relative to that root.