Launch log ·
The live path produced its first evidence-backed report
First real capture, sealed bundle, offline derivation, and deterministic package receipt — without pretending the product gate is closed.
The audit runner has now completed its first real run outside CI against the one target we can audit without permission: this site.
The pinned Playwright 1.55.0 runner captured desktop and mobile evidence, sealed 161 content-addressed artifacts, and verified the bundle manifest. The derivation stage then read that bundle without contacting the site, produced 31 evidence-linked findings and seven remediation groups, and packaged a self-contained HTML report, JSON report, and ZIP.
A machine-readable receipt in the repository binds the run to the source commit, pipeline, artifact count, manifest digest, report digests, package digest, and test count. The report itself is not published here because it contains the full captured evidence set; the receipt is enough to prove which bytes were produced without turning a private audit artifact into public site content.
What this closes
The capture half of gate 3 is closed: the runner produced a complete sealed artifact bundle for a real site under the pinned browser engine and published crawl budget.
What remains open
The combined public runner gate remains open. A real report exists, but the current definition still names evidence-domain checks it does not yet perform. Interaction coverage is explicitly absent, and the remaining domain work must be completed before this can honestly be called the complete report promised by the product specification.
Checkout is still not open, no price is published, and the demo route remains admin-gated.