eve.gd

https://eve.gd · 73/92 checks passed

Compliance report (framework 0.8)

Gate passed (every Core check must pass) · not counted towards the gate: paused 35, draft 48, ready for review 54.

Site level: 0 (no scored checks yet).

By level

Level	Result
Level 1 — Basic	33/37 (4 failed)
Level 2 — Enhanced	23/27 (4 failed)
Level 3 — Advanced	3/10 (7 failed)

By category

Category	Result
Accessibility	13/13
Accountability	4/5
AI & Automation	8/8
Interoperability	2/3
Privacy	15/16
Provenance	2/2
Security	7/11
Transparency	8/13
Responsibility to the Future	0/3

Level 1 — Basic

Accessibility

PASS WCAG 2.1 Level A automated testing

PASS Valid semantic HTML structure

PASS Keyboard navigability

PASS Skip navigation link present

PASS Text alternatives for images

PASS Decorative images properly marked

PASS Proper heading hierarchy

PASS Sufficient colour contrast

PASS No auto-playing media without controls

PASS Media elements have controls

AI & Automation

PASS AI content disclosure in metadata

PASS robots.txt AI crawler rules

PASS Dedicated AI policy page exists

PASS No undisclosed AI-generated content

PASS AI use policy in place

Privacy

PASS No third-party tracking scripts

PASS No third-party cookies

PASS No fingerprinting script patterns

PASS No behavioural or targeted advertising scripts

PASS First-party cookies functional only

PASS Session cookies only

PASS No hidden iframes or tracking beacons

PASS No tracking pixels

PASS Data-leaking third-party services

Security

FAIL HTTPS enforced

strict-transport-security: header not set on the response.

FAIL Security headers present

x-frame-options: header not set on the response.

FAIL Content Security Policy header

content-security-policy: header not set on the response.

FAIL Referrer-Policy header

referrer-policy: header not set on the response.

PASS No mixed content

PASS HTTP to HTTPS redirect

PASS Valid TLS certificate

PASS TLS certificate not expiring soon

Transparency

PASS Contact email present

PASS Contact form present

PASS Statement of purpose present

PASS Contact information present

PASS Funding/sponsorship disclosure

Level 2 — Enhanced

Accessibility

PASS Mobile responsive design

PASS Form labels accessible

Accountability

PASS Clear appeals process

PASS Published response timeframes

PASS Documented complaints process

PASS Named responsible person

AI & Automation

PASS AI-assisted content clearly marked

PASS Human oversight of AI documented

PASS Published AI use policy (detailed)

Interoperability

PASS RSS/Atom feeds present

PASS Content in open formats

Privacy

FAIL Cookie banner partner disclosure

banner_present: The page content shows no cookie or consent banner anywhere, only navigation, blog posts, and footer policy links.
Fix: Add a visible cookie/consent banner if the site sets any non-essential cookies, or document cookie-free status on the Privacy page.
partner_sharing_mentioned: No banner or on-page consent copy exists, so there is no disclosure of data sharing with third-party partners.
Fix: If third-party data sharing occurs, add consent copy disclosing which partners receive data and for what purpose.
partner_count_specific: Since no partner sharing is disclosed, no specific numeric count of partners is stated on the page.
Fix: If partner sharing exists, state the exact number of third-party partners in the consent disclosure.

PASS No dark patterns in consent flows

PASS Advertising clearly labelled if present

PASS Human-readable privacy policy

PASS Plain language data practices

PASS Data collection limited to necessity

PASS Published data retention periods

Provenance

PASS Basic authorship metadata

PASS Authorship metadata assessment

Security

PASS security.txt published

Transparency

FAIL Annual data practices statement

annual_statement: The page contains no privacy or data practices statement and no evidence of any periodic review of data handling.
Fix: Add a privacy statement that documents data practices and note a regular (e.g., annual) review cycle for it.
dated: No data practices statement exists on the page, so there is no date or version associated with one.
Fix: Publish a dated or versioned privacy/data practices statement so visitors can see when it was last updated.

FAIL Governance structure disclosed

governance_exists: The page is a personal academic biography and CV describing Martin Eve's career, awards, and publications, with no description of any governance or editorial structure.
Fix: Add a section outlining the governance or editorial structure of the site or associated projects, including decision-making processes and oversight bodies.
roles_clear: While the page lists Martin Eve's individual titles and positions, it does not identify the key roles or responsibilities within any governance framework.
Fix: Include a clear list of governance roles and their associated responsibilities so readers understand who is accountable for what.

FAIL Funding disclosed with detail

detail: Funding is mentioned only by funder name without any amounts, percentages, or grant categories or durations.
Fix: Add meaningful detail such as grant amounts, durations, or funding categories alongside each named funder.
complete: The disclosure appears partial, naming funders only for the COPIM project while other funded work, prizes, and roles lack any funding accounting.
Fix: Provide a comprehensive funding statement covering all major funded projects and roles, not just the COPIM project.

PASS Named responsible person in contact

PASS Substantive statement of purpose

PASS Algorithm explanation if applicable

Level 3 — Advanced

Accessibility

PASS Published accessibility statement

Accountability

FAIL Published moderation policies

policy_exists: The page is an academic 'About' biography and publications list with no moderation policy published anywhere on it.
Fix: Publish a moderation policy page (e.g., for comments or user-contributed content) and link to it from the site navigation.
criteria_clear: No moderation criteria are stated on the page, which contains only biographical, supervision, and publication content.
Fix: Add a clearly worded section listing the specific criteria used to moderate or remove content.
enforcement: There is no explanation of any enforcement process anywhere on the page.
Fix: Document the enforcement process, including who reviews content, timelines, and any appeals mechanism.

Interoperability

FAIL Published uptime/status page

Not found at: /status

Security

PASS Incident response plan published

PASS Responsible disclosure or bug bounty

Transparency

FAIL Open source code or tech docs

open_source: The page mentions digital projects like meTypeset but provides no visible link to source code repositories.
Fix: Add explicit links to source code repositories (e.g., GitHub) for the site and mentioned projects like meTypeset.
tech_docs: No technical documentation for the site or the referenced computational projects is published or linked on this page.
Fix: Publish and link to technical documentation for the site infrastructure and digital humanities tools mentioned.

FAIL Algorithmic decision criteria published

criteria_published: The page states publications are automatically pulled from BIROn but does not publish the specific criteria (e.g., what determines inclusion, ordering, or link colour assignment) used by the automated process.
Fix: Add a short note describing the exact criteria the system uses to select and display records, such as which repository fields determine inclusion and how green/gold links are assigned.
weighting: There is no explanation of how items are prioritised, weighted, or ordered beyond an implicit chronological grouping.
Fix: Document the sorting and prioritisation logic, for example stating that entries are ordered by publication year and grouped by output type.
auditable: The page provides no technical detail, source, or methodology sufficient for an external party to audit or reproduce the automated retrieval.
Fix: Provide a link to the code, query, or API specification used to pull the data so external reviewers can verify the process.

Responsibility to the Future

FAIL Environmental / sustainability disclosure

disclosure_exists: The About page details Martin Eve's academic career, awards, and publications but contains no published environmental impact or sustainability disclosure.
Fix: Add a dedicated sustainability statement to the site describing the environmental impact of the website and its operations.
specific_metrics: The page provides no specific figures on carbon, energy use, or emissions anywhere in its content.
Fix: Include measurable metrics such as per-page carbon output or annual energy consumption using a tool like the Website Carbon Calculator.
hosting_disclosure: There is no mention of the carbon or energy profile of the site's hosting infrastructure on the page.
Fix: Disclose the hosting provider's energy sourcing (e.g., green/renewable hosting certification) and its associated carbon profile.

FAIL Worker wellbeing policy

policy_exists: The page is an academic 'About' biography for Martin Paul Eve and contains no published policy on worker wellbeing or working conditions.
Fix: Publish a dedicated worker wellbeing or working conditions policy page if the site represents an organization with employees.
specific_commitments: The page includes no specific commitments regarding pay, hours, mental health, or benefits.
Fix: Add concrete, measurable commitments covering pay, working hours, mental health support, and benefits.
accountability: The page does not identify any person, role, or body responsible for overseeing worker conditions.
Fix: Name a responsible role or oversight body and describe how workers can raise concerns or hold the organization accountable.

FAIL Succession and continuity plan

plan_exists: The about page is a personal academic biography with no published plan describing what happens if the site or associated organisations fail or exit.
Fix: Publish a succession or continuity plan section describing what happens to the site and its projects in the event of failure or exit.
data_and_content_fate: The page mentions defunct projects like meTypeset but provides no statement about the fate of user data or published content should the site cease.
Fix: Add explicit provisions stating how published content and any user data would be preserved, transferred, or archived if the site closes.
custodians_or_mirrors: While the page references the Birkbeck Institutional Repository (BIROn) for publications, it does not identify designated custodians, mirrors, or archive partners for the site itself in the event of exit.
Fix: Name specific custodians, mirror sites, or archive partners (e.g., an institutional or web archive) responsible for maintaining content if the site is discontinued.