Science Museum

https://www.sciencemuseum.org.uk · 31/92 checks passed · archives

Compliance report (framework 0.8)

Gate passed (every Core check must pass) · not counted towards the gate: paused 35, draft 48, ready for review 54.

Site level: 0 (no scored checks yet).

By level

Level	Result
Level 1 — Basic	19/37 (14 failed)
Level 2 — Enhanced	1/27 (5 failed)
Level 3 — Advanced	0/10 (1 failed)

By category

Category	Result
Accessibility	6/13
Accountability	0/5
AI & Automation	2/8
Interoperability	0/3
Privacy	8/16
Provenance	0/2
Security	4/11
Transparency	0/13
Responsibility to the Future	0/3

Level 1 — Basic

Accessibility

FAIL WCAG 2.1 Level A automated testing

1 WCAG 2.1 Level A violation reported by axe-core: html-has-lang.

FAIL Valid semantic HTML structure

1 WCAG 2.1 Level A violation reported by axe-core: html-has-lang.

FAIL Keyboard navigability

No focusable elements detected on the page.

FAIL Skip navigation link present

FAIL Proper heading hierarchy

Heading hierarchy issues: h1 -> h3 (skipped h2).

PASS Text alternatives for images

PASS Decorative images properly marked

PASS Sufficient colour contrast

PASS No auto-playing media without controls

PASS Media elements have controls

AI & Automation

FAIL No undisclosed AI-generated content

human_or_disclosed: The page returned a 403 Forbidden error with no accessible content, so authorship cannot be verified.
Fix: Restore access to the page so reviewers can evaluate whether content is human-authored or includes appropriate AI disclosure.
no_deception: No content is accessible due to the 403 error, making it impossible to confirm absence of deceptive AI-as-human presentation.
Fix: Resolve the Varnish cache 403 error and make content accessible so it can be reviewed for any undisclosed AI-generated text.

FAIL Dedicated AI policy page exists

Not found at any of: /ai-policy, /ai.

SKIPPED AI use policy in place

Skipped: Target page not found in captured content

PASS AI content disclosure in metadata

PASS robots.txt AI crawler rules

Privacy

FAIL No hidden iframes or tracking beacons

No hidden iframes detected.

PASS No third-party tracking scripts

PASS No third-party cookies

PASS No fingerprinting script patterns

PASS No behavioural or targeted advertising scripts

PASS First-party cookies functional only

PASS Session cookies only

PASS No tracking pixels

PASS Data-leaking third-party services

Security

FAIL HTTP to HTTPS redirect

Redirect chain (1 hops): https://www.sciencemuseum.org.uk

FAIL Security headers present

x-frame-options: header not set on the response.

FAIL Content Security Policy header

content-security-policy: header not set on the response.

FAIL Referrer-Policy header

referrer-policy: header not set on the response.

PASS HTTPS enforced

PASS No mixed content

PASS Valid TLS certificate

PASS TLS certificate not expiring soon

Transparency

FAIL Contact email present

Not found at any of: /contact, /contact-us.

FAIL Contact form present

Not found at any of: /contact, /contact-us.

SKIPPED Contact information present

Skipped: Target page not found in captured content

SKIPPED Statement of purpose present

Skipped: Target page not found in captured content

SKIPPED Funding/sponsorship disclosure

Skipped: Target page not found in captured content

Level 2 — Enhanced

Accessibility

FAIL Mobile responsive design

No viewport meta tag present — site won't adapt to mobile widths.

PASS Form labels accessible

Accountability

SKIPPED Named responsible person

Skipped: Target page not found in captured content

SKIPPED Published response timeframes

Skipped: Target page not found in captured content

SKIPPED Documented complaints process

Skipped: Target page not found in captured content

SKIPPED Clear appeals process

Skipped: Target page not found in captured content

AI & Automation

SKIPPED Published AI use policy (detailed)

Skipped: Target page not found in captured content

SKIPPED AI-assisted content clearly marked

Skipped: Target page not found in captured content

SKIPPED Human oversight of AI documented

Skipped: Target page not found in captured content

Interoperability

FAIL RSS/Atom feeds present

No RSS/Atom feeds discovered.

SKIPPED Content in open formats

Skipped: Target page not found in captured content

Privacy

FAIL Cookie banner partner disclosure

banner_present: The page returned a 403 Forbidden Varnish cache error with no content or cookie banner rendered.
Fix: Resolve the 403/Varnish error so the homepage loads and displays the cookie consent banner for review.
partner_sharing_mentioned: No banner or consent copy is present because the page only shows a 403 Forbidden error, so third-party partner sharing is not disclosed.
Fix: Restore page availability and ensure the consent banner explicitly discloses data sharing with third-party partners.
partner_count_specific: No partner sharing disclosure or numeric partner count is present, as the page content is solely a 403 Forbidden error message.
Fix: Once the page loads, include a specific numeric count of third-party partners in the consent banner copy.

SKIPPED Human-readable privacy policy

Skipped: Target page not found in captured content

SKIPPED Plain language data practices

Skipped: Target page not found in captured content

SKIPPED Data collection limited to necessity

Skipped: Target page not found in captured content

SKIPPED Published data retention periods

Skipped: Target page not found in captured content

SKIPPED No dark patterns in consent flows

Skipped: Target page not found in captured content

SKIPPED Advertising clearly labelled if present

Skipped: Target page not found in captured content

Provenance

FAIL Basic authorship metadata

No author or date metadata found on the page.

SKIPPED Authorship metadata assessment

Skipped: Target page not found in captured content

Security

FAIL security.txt published

security.txt not published.

Transparency

SKIPPED Named responsible person in contact

Skipped: Target page not found in captured content

SKIPPED Substantive statement of purpose

Skipped: Target page not found in captured content

SKIPPED Funding disclosed with detail

Skipped: Target page not found in captured content

SKIPPED Governance structure disclosed

Skipped: Target page not found in captured content

SKIPPED Algorithm explanation if applicable

Skipped: Target page not found in captured content

SKIPPED Annual data practices statement

Skipped: Target page not found in captured content

Level 3 — Advanced

Accessibility

SKIPPED Published accessibility statement

Skipped: Target page not found in captured content

Accountability

SKIPPED Published moderation policies

Skipped: Target page not found in captured content

Interoperability

FAIL Published uptime/status page

Not found at: /status

Security

SKIPPED Incident response plan published

Skipped: Target page not found in captured content

SKIPPED Responsible disclosure or bug bounty

Skipped: Target page not found in captured content

Transparency

SKIPPED Algorithmic decision criteria published

Skipped: Target page not found in captured content

SKIPPED Open source code or tech docs

Skipped: Target page not found in captured content

Responsibility to the Future

SKIPPED Environmental / sustainability disclosure

Skipped: Target page not found in captured content

SKIPPED Succession and continuity plan

Skipped: Target page not found in captured content

SKIPPED Worker wellbeing policy

Skipped: Target page not found in captured content