SnapSweep fixture site
Static hub for the seeded-defect fixture corpus: the WP-B golden and adversarial
pages plus the WP-G adversarial-oracle set. Every page here is deterministic — no
external requests, no randomness, no storage writes; the only timer in the corpus is
the bounded 600 ms success theater on the fake-success page. Defect ledger and
page map: README.md (this dir) and adversarial-oracle/README.md.
Golden pages
- Golden index — bench-shaped index page, 60 interactable surfaces (63 with structural containers)
- Panel A — shared nav, hero action, 4 links, 2 actions, duplicate-labelled row buttons
- Panel B — same shape as Panel A with distinct labels
- Form Flow — 8-field GET form; includes the hidden label association on
#ff-custom - Form Result — static GET target of Form Flow; query strings are never reflected
Adversarial pages (crawler / enumerator)
- Fake Success — trap (a): success theater with no network call and no state change
- Swallowed Errors — trap (b): silent throw, clean console, stale panel; the Ping button proves the page is live
- Unlabeled — 4 nameless inputs in distinct group contexts, a nameless select, glyph-only buttons
- Shadow DOM — open shadow roots, two host headings, duplicate labels inside the shadow trees
- Iframe Host — two same-origin iframes embedding the same child document
- Iframe Child — the embedded child document (2 buttons, 1 input, its own nav)
- I18n RTL — Arabic RTL page, Hebrew section, mixed-bidi text, one LTR block
- Mobile Viewport — desktop nav at ≥800 px; hamburger and drawer links below
- Canvas Only — full-viewport canvas: zero interactable a11y nodes, unsupported marker expected
- Duplicates — dedup stress: row context separates, identical cards fold, frames never fold
Adversarial-oracle pages (verification oracle)
- Oracle index — the WP-G catalog page listing controls, traps and broken pages
- Control Healthy — control: navigate, focus, hover state flip and hover network all genuinely work
- Healthy Target — the HTTP 200 navigation target of the healthy control
- Trap: Focus Mimic — success styling and
data-stateflip, but focus never lands - Trap: Console Swallow — the handler throws inside a silent catch; the console stays clean and the state never flips
- Trap: Covered Control — visible and enabled button under a full-viewport overlay
- Trap: Flaky Control — the disclosure works only on every other page load
- Trap: Background Poll — the page polls on its own; the hover handler fetches nothing
- Trap: Redirect Escape — parse-time redirect off-origin (without
?to=it targets the RFC 2606traps.invalid) - Escape Landing — the reachable out-of-scope landing page for the escape trap
- Broken 404 Link — a link to a real HTTP 404, plus a working-link control
- Broken Focus Never — a normal-looking focusable button that blurs synchronously