Thinking Way Outside The Box

https://thinkingwayoutsidethebox.org · 33/92 checks passed · not_for_profit

Compliance report (framework 0.8)

Gate passed (every Core check must pass) · not counted towards the gate: paused 35, draft 48, ready for review 54.

Site level: 0 (no scored checks yet).

By level

Level	Result
Level 1 — Basic	21/37 (12 failed)
Level 2 — Enhanced	4/27 (2 failed)
Level 3 — Advanced	0/10 (1 failed)

By category

Category	Result
Accessibility	9/13
Accountability	0/5
AI & Automation	3/8
Interoperability	1/3
Privacy	8/16
Provenance	1/2
Security	3/11
Transparency	0/13
Responsibility to the Future	0/3

Level 1 — Basic

Accessibility

FAIL WCAG 2.1 Level A automated testing

1 WCAG 2.1 Level A violation reported by axe-core: link-name.

FAIL Valid semantic HTML structure

1 WCAG 2.1 Level A violation reported by axe-core: link-name.

FAIL Sufficient colour contrast

1 colour-contrast violation reported by axe-core (text below 4.5:1).

PASS Keyboard navigability

PASS Skip navigation link present

PASS Text alternatives for images

PASS Decorative images properly marked

PASS Proper heading hierarchy

PASS No auto-playing media without controls

PASS Media elements have controls

AI & Automation

FAIL Dedicated AI policy page exists

Not found at any of: /ai-policy, /ai.

SKIPPED AI use policy in place

Skipped: Target page not found in captured content

PASS AI content disclosure in metadata

PASS robots.txt AI crawler rules

PASS No undisclosed AI-generated content

Privacy

FAIL Data-leaking third-party services

Detected 2 data-leaking services across 1 category: google fonts (fonts.googleapis.com, fonts.gstatic.com).

PASS No third-party tracking scripts

PASS No third-party cookies

PASS No fingerprinting script patterns

PASS No behavioural or targeted advertising scripts

PASS First-party cookies functional only

PASS Session cookies only

PASS No hidden iframes or tracking beacons

PASS No tracking pixels

Security

FAIL HTTPS enforced

strict-transport-security: header not set on the response.

FAIL HTTP to HTTPS redirect

Redirect chain (1 hops): https://thinkingwayoutsidethebox.org

FAIL Security headers present

x-frame-options: header not set on the response.

FAIL Content Security Policy header

content-security-policy: header not set on the response.

FAIL Referrer-Policy header

referrer-policy: header not set on the response.

PASS No mixed content

PASS Valid TLS certificate

PASS TLS certificate not expiring soon

Transparency

FAIL Contact email present

Not found at any of: /contact, /contact-us.

FAIL Contact form present

Not found at any of: /contact, /contact-us.

SKIPPED Contact information present

Skipped: Target page not found in captured content

SKIPPED Statement of purpose present

Skipped: Target page not found in captured content

SKIPPED Funding/sponsorship disclosure

Skipped: Target page not found in captured content

Level 2 — Enhanced

Accessibility

PASS Mobile responsive design

PASS Form labels accessible

Accountability

SKIPPED Named responsible person

Skipped: Target page not found in captured content

SKIPPED Published response timeframes

Skipped: Target page not found in captured content

SKIPPED Documented complaints process

Skipped: Target page not found in captured content

SKIPPED Clear appeals process

Skipped: Target page not found in captured content

AI & Automation

SKIPPED Published AI use policy (detailed)

Skipped: Target page not found in captured content

SKIPPED AI-assisted content clearly marked

Skipped: Target page not found in captured content

SKIPPED Human oversight of AI documented

Skipped: Target page not found in captured content

Interoperability

SKIPPED Content in open formats

Skipped: Target page not found in captured content

PASS RSS/Atom feeds present

Privacy

FAIL Cookie banner partner disclosure

banner_present: No cookie or consent banner is visible anywhere in the page content provided.
Fix: Add a visible cookie/consent banner on first visit that informs users about cookie use and offers accept/reject choices.
partner_sharing_mentioned: There is no mention of data sharing with third-party partners in any banner or on-page consent copy.
Fix: Include explicit language in the consent banner and privacy policy disclosing whether and with whom user data is shared with third parties.
partner_count_specific: No partner sharing is disclosed and therefore no specific numeric count of partners is stated.
Fix: If partners receive data, state the exact number of partners (e.g., 'shared with 12 partners') and link to a full list in the consent banner.

SKIPPED Human-readable privacy policy

Skipped: Target page not found in captured content

SKIPPED Plain language data practices

Skipped: Target page not found in captured content

SKIPPED Data collection limited to necessity

Skipped: Target page not found in captured content

SKIPPED Published data retention periods

Skipped: Target page not found in captured content

SKIPPED No dark patterns in consent flows

Skipped: Target page not found in captured content

SKIPPED Advertising clearly labelled if present

Skipped: Target page not found in captured content

Provenance

SKIPPED Authorship metadata assessment

Skipped: Target page not found in captured content

PASS Basic authorship metadata

Security

FAIL security.txt published

security.txt not published.

Transparency

SKIPPED Named responsible person in contact

Skipped: Target page not found in captured content

SKIPPED Substantive statement of purpose

Skipped: Target page not found in captured content

SKIPPED Funding disclosed with detail

Skipped: Target page not found in captured content

SKIPPED Governance structure disclosed

Skipped: Target page not found in captured content

SKIPPED Algorithm explanation if applicable

Skipped: Target page not found in captured content

SKIPPED Annual data practices statement

Skipped: Target page not found in captured content

Level 3 — Advanced

Accessibility

SKIPPED Published accessibility statement

Skipped: Target page not found in captured content

Accountability

SKIPPED Published moderation policies

Skipped: Target page not found in captured content

Interoperability

FAIL Published uptime/status page

Not found at: /status

Security

SKIPPED Incident response plan published

Skipped: Target page not found in captured content

SKIPPED Responsible disclosure or bug bounty

Skipped: Target page not found in captured content

Transparency

SKIPPED Algorithmic decision criteria published

Skipped: Target page not found in captured content

SKIPPED Open source code or tech docs

Skipped: Target page not found in captured content

Responsibility to the Future

SKIPPED Environmental / sustainability disclosure

Skipped: Target page not found in captured content

SKIPPED Succession and continuity plan

Skipped: Target page not found in captured content

SKIPPED Worker wellbeing policy

Skipped: Target page not found in captured content