web-uplift audit: aifoc.us

Report mode (audit only) on this very blog. The model gathered DOM, computed styles, a perf trace, HAR, and screenshots, then judged all seventeen principles. aifoc.us.

findings

• F-SUST-FA · be-sustainable

  Font Awesome 6 (~290KB CSS + webfonts from cdnjs) loaded for ~12 icons.

  Fix: inline SVGs for the handful of icons actually used.
  medium
• F-INC-IFRAME · be-inclusive

  Embedded demo iframes (e.g. /model-gap.html) have no title attribute.

  Fix: accessible title on every iframe (the shortcode now defaults to one).
  medium
• F-INC-FORMLABEL · be-inclusive

  Newsletter email input labelled only by its placeholder.

  Fix: visible <label> (placeholders vanish on input and aren't screen-reader names).
  medium
• F-SEC-ANALYTICS · be-private-and-secure

  Two analytics stacks load: Google Analytics (165KB, cookies) and Cloudflare Web Analytics.

  Fix: drop one; keep the cookieless option.
  low
• F-INC-LANDMARK · be-inclusive

  Two identical newsletter forms create duplicate, indistinguishable landmarks.

  Fix: aria-label to differentiate, or render one.
  low
• F-RMOTION · respect-user-preferences

  No prefers-reduced-motion handling; share-button transition still animates.

  Fix: @media (prefers-reduced-motion: reduce).
  low
• F-SEC-HSTS · be-private-and-secure

  No Strict-Transport-Security header despite HTTPS-only hosting.

  Fix: HSTS header in the deploy config.
  low
• F-BP-SOFT404 · follow-best-practices

  Unknown paths return the homepage HTML with HTTP 200 (soft 404).

  Fix: real 404 route + template.
  low

credited strengths

A real model run over raw CDP, not a canned checklist. Each finding comes with evidence and a Modern-Web-Guidance-backed fix. web-uplift.