Conformance
A live, computed conformance report — not a badge. The build folds its own evidence (the gates that ran, the artifacts it signs) through lone's web-build conformance model. The strong claim is withheld unless every required criterion is met; anything not yet assessed says so, plainly.
22 met
1 unmet
14 not assessed
37 total
Conformance
Partial conformance: automated DOM checks clean; WCAG 2.2 AA (manual audit) not supplied; OWASP ASVS Level 2 not supplied; Core Web Vitals (p75) not supplied; runtime reliability not supplied.
22/37 criteria met · 1 unmet · 14 not assessed · Bounded Systems Web-Build Conformance Standard v1.0.0
html 2/2 met
html: 2/2 met
- met HTML author requirements HTML Living Standard · author conformance lone static checks clean (no findings) api/v1/conformance.json
- met Nu HTML Checker errors Nu Html Checker · zero errors 0 validator errors workflow: conformance.yml
accessibility 4/6 met
accessibility: 4/6 met (2 not assessed)
- met WAI-ARIA author requirements WAI-ARIA 1.2 · author conformance lone static checks clean (no findings) api/v1/conformance.json
- met WCAG 2.2 AA (automated subset) WCAG 2.2 · AA (automated subset) lone static checks clean (no findings) api/v1/conformance.json
- met axe serious/critical violations axe-core · serious/critical 0 serious/critical violations workflow: axe.yml
- not assessed WCAG 2.2 AA (manual audit) WCAG 2.2 · AA (manual) no manual WCAG 2.2 AA audit supplied
- not assessed WCAG 2.2 AAA (selected) WCAG 2.2 · AAA (selected) no AAA attestation supplied (optional)
- met Agent heuristic accessibility review ARIA/WCAG (machine heuristic) · agent heuristic (recommended) agent heuristic pass clean — 7 page(s), 0 warning(s). AGENT/STATIC HEURISTIC — NOT AT-user testing; a11y.wcag22-aa-manual stays not-assessed. workflow: a11y-heuristic.yml
design 3/5 met
design: 3/5 met (2 not assessed)
- met Palette contrast (design tokens) WCAG 2.2 + APCA · AA (token-level) color tokens CVD-safe, APCA baseline, non-text contrast ok bdelanghe/brand: tokens/token-a11y.json
- met Typography tokens WCAG 2.2 · AA (token-level) type tokens meet line-height, spacing, size, and weight bars bdelanghe/brand: tokens/token-a11y.json
- not assessed Target size (interactive tokens) WCAG 2.2 · AA (token-level) no target-size report supplied bdelanghe/brand: tokens/token-a11y.json
- not assessed Effective contrast under opacity WCAG 2.2 · AA (token-level) no opacity-contrast report supplied bdelanghe/brand: tokens/token-a11y.json
- met Token likeness hygiene Design-system hygiene · recommended categorical tokens distinct; no redundant tokens bdelanghe/brand: tokens/token-a11y.json
security 1/3 met
security: 1/3 met (2 not assessed)
- not assessed OWASP ASVS Level 2 OWASP ASVS 5.0.0 · L2 no OWASP ASVS attestation supplied
- met known critical/high vulns OWASP ASVS 5.0.0 · zero critical/high 0 known critical/high vulns workflow: brand-checks.yml
- not assessed HSTS preload RFC 6797 / hstspreload.org · preloaded no HSTS preload status supplied
performance 0/1 met
performance: 0/1 met (1 not assessed)
- not assessed Core Web Vitals (p75) Core Web Vitals · p75 mobile + desktop no Core Web Vitals field data supplied
compatibility 1/1 met
compatibility: 1/1 met
- met Baseline Widely Available Baseline · Widely Available Baseline Widely Available workflow: conformance.yml
reliability 0/1 met
reliability: 0/1 met (1 not assessed)
- not assessed runtime reliability Bounded Systems reliability bar · — no runtime reliability report supplied
semantic 3/5 met
semantic: 3/5 met (2 not assessed)
- met JSON-LD 1.1 + SHACL conformance JSON-LD 1.1 / SHACL · conforms JSON-LD 1.1 conforms to SHACL shapes (0 violating blocks) workflow: shacl.yml
- not assessed CommonMark conformance CommonMark · conforms no CommonMark report supplied workflow: seo.yml
- met AI-readability llms.txt convention · recommended llms.txt present, links resolve, Markdown siblings exposed llms.txt
- not assessed OpenAPI 3.2 + JSON Schema 2020-12 OpenAPI 3.2 / JSON Schema 2020-12 · conditional no OpenAPI report supplied (only applies if an API is published)
- met Atom feed (RFC 4287) RFC 4287 · recommended Atom feed valid (RFC 4287) feed.xml
seo 1/1 met
seo: 1/1 met
- met Technical SEO Search-engine technical guidelines / RFC 9309 · clean canonical/titles/robots/sitemap clean, 0 broken internal links sitemap.xml
integrity 6/9 met
integrity: 6/9 met (3 not assessed)
- met SLSA provenance + in-toto SLSA / in-toto · present + signed + verified SLSA/in-toto provenance present, signed, and verified attestation.intoto.json
- met Reproducible build Reproducible Builds · reproducible build is byte-reproducible bdelanghe/site: flake.lock
- met SPDX SBOM SPDX · present + valid + complete + signed SPDX SBOM present, valid, complete, and signed sbom.spdx.json
- met Content digests (RFC 9530) RFC 9530 · recommended Repr-Digest headers present (RFC 9530) bdelanghe/site: build.mjs
- met Signed release manifest Bounded Systems release bar · present + signed release manifest present and signed site.sha256
- met IPFS CID recorded IPFS / CIDv1 · recommended IPFS CID recorded provenance.json
- not assessed HTTP correctness (RFC 9110) RFC 9110 · recommended no RFC 9110 HTTP report supplied (optional)
- not assessed OpenSSF Scorecard OpenSSF Scorecard · score ≥ 7.0 no OpenSSF Scorecard result supplied
- not assessed SLSA build level SLSA · ≥ target (default L3) no SLSA build level supplied
cognitive 1/3 met
cognitive: 1/3 met (1 unmet, 1 not assessed)
- met Interface-complexity budget (W3C COGA-derived) W3C COGA (derived) · budget (recommended) lone static checks clean (no findings) api/v1/conformance.json
- unmet COGA Obj-5: Focus budget (attention proxy) W3C COGA Making Content Usable — Objective 5 · Obj-5 proxy (recommended) not-yet-met: readingGrade threshold exceeded, avgSentenceLength threshold exceeded, jargonDensity threshold exceeded. AGENT/STATIC PROXY for COGA Obj-5 — NOT COGA usability testing with cognitive disabilities. Do NOT mass-rewrite content — editorial is the maintainer's call; gate reports honestly. workflow: a11y-heuristic.yml
- not assessed COGA usability testing W3C COGA · manual (recommended) no COGA usability testing supplied (optional)