Blind validations covered the static/degraded paths thoroughly, but these paths shipped unvalidated (declared honestly in each scorecard, tracked here so they aren't mistaken for passed):
- deps-audit: offline degraded path (network was live in both runs, so the declare-skipped-steps behavior for freshness/OSV was never exercised); monorepo per-workspace reporting; non-npm ecosystems.
- a11y-audit: the live keyboard pass (step 5) — validation agents have no browser; only the static path is validated.
- design-audit / perf-audit: browser render checks, same reason.
- perf-budget-check: the Lighthouse opt-in path and the fresh-build path (blocked by missing SITE_URL in the validation environment).
Each is a candidate for a targeted follow-up validation run when the environment allows (offline sim via network-blocked agent; browser-capable session for the live passes).
Blind validations covered the static/degraded paths thoroughly, but these paths shipped unvalidated (declared honestly in each scorecard, tracked here so they aren't mistaken for passed):
Each is a candidate for a targeted follow-up validation run when the environment allows (offline sim via network-blocked agent; browser-capable session for the live passes).