Cold + warm timings, headers, a11y smoke

Every public page, measured.

Sequential Chromium walk over every public Verdikt page. Records TTFB, load event, transfer size, console errors, failed requests, security headers, and accessibility basics for each. Data is regenerated by python scripts/perf_sweep.py.

Loading perf data…

Rollup

Latest sweep

Buckets are exclusive — every page counted once. Anything red is a real regression against the budget below.

Per page

Cold response

Cache-cleared first hit. Budget: TTFB < 300 ms, Load < 2500 ms, transfer < 500 KB.

URL	TTFB	DCL	Load	Resources	Transfer	Verdict

Cache

Warm vs cold

Same-context reload after a cold hit — proxy for repeat-visit experience.

URL	Cold Load	Warm Load	Δ	Cold KB	Warm KB

Security headers

Response headers matrix

Presence per page. Missing headers are fine on localhost but must be added at the reverse proxy for the Nebius deploy.

URL	CSP	HSTS	X-Frame	Referrer	Permissions

Findings

What to fix

Show findings

Automated flags — any page that busts a budget or has console/network errors surfaces here.