ultra11y 4.5.2 → 5.0.1

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "4.5.2",
+      "version": "5.0.1",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "4.5.2",
+  "version": "5.0.1",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "4.5.2",
+  "version": "5.0.1",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "4.5.2";
+const ULTRA11Y_PLUGIN_VERSION = "5.0.1";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/README.md

@@ -125,7 +125,7 @@ claude mcp add ultra11y -- npx -y ultra11y mcp
 **As a GitHub Action** — audits the PR diff and, optionally, the served pages:
 
 ```yaml
-- uses: maxgfr/ultra11y@v4
+- uses: maxgfr/ultra11y@v5
   with: { since: auto, standard: rgaa, fail-on: blocking }
 ```
 
@@ -383,7 +383,7 @@ a test). See [`CONTRIBUTING.md`](CONTRIBUTING.md) and `skills/ultra11y/reference
   block. It re-decides nothing and invents no format, so a page sheet and the compliance report
   cannot disagree; `check` gates it against invented criteria like any other report.
   See `references/pages.md`.
-- **A shipped GitHub Action** — `uses: maxgfr/ultra11y@v4` audits the **code** (PR diff) and,
+- **A shipped GitHub Action** — `uses: maxgfr/ultra11y@v5` audits the **code** (PR diff) and,
   optionally, the **pages** (it can start your app, wait for it, then scan real URLs or your
   declared sample). The engine ships inside the action, so there is nothing to install and no
   `setup-node`. The gate runs **last**, after SARIF, annotations, the summary, the sticky PR

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "4.5.2",
+  "version": "5.0.1",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join50, relative as relative5, resolve as resolve15, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "4.5.2";
+var VERSION = "5.0.1";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -53203,6 +53203,20 @@ function pageGridModel(result, derived, standard, lang) {
   for (const p of derived) for (const pc of derivePackResults(pageView(result, p), standard)) put(pc.id, p.id, pc.status);
   return { rows, status };
 }
+function renderRedirected(redirected, lang = "en") {
+  const fr = lang === "fr";
+  const out2 = [
+    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) de l'\xE9chantillon n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} sample page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
+    "",
+    fr ? "| Page | Demand\xE9 | Atteint | Motif |" : "| Page | Requested | Landed | Reason |",
+    "| --- | --- | --- | --- |"
+  ];
+  for (const r of redirected) {
+    const why = r.reason === "http-status" ? fr ? `HTTP ${r.status ?? "\u2265 400"} \u2014 page d'erreur rendue \xE0 la m\xEAme adresse` : `HTTP ${r.status ?? "\u2265 400"} \u2014 error page served at the same address` : fr ? "redirection" : "redirect";
+    out2.push(`| ${r.name} (\`${r.id}\`) | \`${r.requested}\` | \`${r.landed}\` | ${why} |`);
+  }
+  return out2;
+}
 function renderPageGrid(result, pages, standard = CORE2, lang = "en") {
   const s = L3[lang];
   const out2 = [];
@@ -53445,6 +53459,7 @@ function render(r, lang, opts) {
     const derived = derivePages(r, pageScope);
     out2.push(`## \u{1F4C4} ${s.perPageTitle}`, "", `> ${s.perPageNote}`, "");
     if (r.scope.sample?.transverse?.length) out2.push(`> ${s.transverseNote(r.scope.sample.transverse.join(", "))}`, "");
+    if (r.scope.redirected?.length) out2.push(...renderRedirected(r.scope.redirected, lang), "");
     const pack = isCore(opts.standard) ? void 0 : loadPack(opts.standard);
     for (const pg of derived) {
       const nc = pg.findings.filter((f) => !f.advisory);
@@ -57792,6 +57807,14 @@ function resolveHostAnchor(file, snippet2) {
 function mergeDynamic(audit2, dynamic, lang = "en") {
   const merged = JSON.parse(JSON.stringify(audit2));
   if (dynamic.sample) merged.scope.sample = dynamic.sample;
+  if (dynamic.redirected?.length) {
+    const byId3 = new Map((merged.scope.redirected ?? []).map((r) => [r.id, r]));
+    for (const r of dynamic.redirected) byId3.set(r.id, r);
+    const scannedIds = new Set((merged.scope.sample?.pages ?? []).map((p) => p.id));
+    const still = [...byId3.values()].filter((r) => !scannedIds.has(r.id));
+    if (still.length) merged.scope.redirected = still;
+    else delete merged.scope.redirected;
+  }
   if (dynamic.testedScs?.length) {
     const tested = /* @__PURE__ */ new Set([...merged.scope.scan?.testedScs ?? [], ...dynamic.testedScs]);
     merged.scope.scan = { testedScs: [...tested].sort() };
@@ -58354,17 +58377,23 @@ function clicksAllowed(storageState, interactClicks) {
 }
 function landedOnRequestedPage(requested, landed) {
   if (!landed || requested === landed) return true;
-  const path = (u) => {
+  const parse2 = (u) => {
     try {
-      return new URL(u, "http://x.invalid").pathname.replace(/\/+$/, "");
+      return new URL(u, "http://x.invalid");
     } catch {
       return void 0;
     }
   };
-  const a = path(requested);
-  const b = path(landed);
-  if (a === void 0 || b === void 0) return true;
-  return a === b;
+  const a = parse2(requested);
+  const b = parse2(landed);
+  if (!a || !b) return true;
+  const path = (u) => u.pathname.replace(/\/+$/, "");
+  if (path(a) !== path(b)) return false;
+  const host = (u) => u.hostname.replace(/^www\./, "");
+  if (host(a) !== host(b)) return false;
+  if (a.hash && a.hash !== b.hash) return false;
+  if (a.search && a.search !== b.search) return false;
+  return true;
 }
 async function probeLiveRegion(page, lang, allowClicks) {
   const detail = LIVE_REGION_DETAIL[lang] ?? LIVE_REGION_DETAIL.en;
@@ -58405,10 +58434,12 @@ async function runOnPage(browser, AxeBuilder, target, isFile, opts) {
   const empty = [];
   try {
     const url = isFile ? "file://" + resolve11(target) : target;
-    await page.goto(url, { waitUntil: "load", timeout: 45e3 });
+    const response = await page.goto(url, { waitUntil: "load", timeout: 45e3 });
     await page.waitForLoadState("networkidle", { timeout: 8e3 }).catch(() => {
     });
     await page.waitForTimeout(1200);
+    const landedUrl = page.url() || url;
+    const httpStatus = typeof response?.status === "function" ? response.status() : void 0;
     let snapshot;
     let screenshot;
     if (opts.snapshot !== false) {
@@ -58454,6 +58485,8 @@ async function runOnPage(browser, AxeBuilder, target, isFile, opts) {
     const liveRegion = opts.interact ? await probeLiveRegion(page, l, opts.allowClicks).catch(() => empty) : [];
     return {
       url: page.url() || target,
+      landedUrl,
+      ...httpStatus !== void 0 ? { httpStatus } : {},
       violations,
       reflow,
       focusVisible: dialogFocus.length ? [...focusVisible, ...dialogFocus] : focusVisible,
@@ -58546,8 +58579,14 @@ async function runSampleScanLocal(pages, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
-      if (!landedOnRequestedPage(page.url, out2.url)) {
-        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: out2.url });
+      const requestedUrl = isFile ? "file://" + resolve11(page.url) : page.url;
+      const landedUrl = out2.landedUrl ?? out2.url;
+      if (!landedOnRequestedPage(requestedUrl, landedUrl)) {
+        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: landedUrl, reason: "redirect" });
+        continue;
+      }
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: landedUrl, reason: "http-status", status: out2.httpStatus });
         continue;
       }
       findings.push(...tagSampleFindings(toDynamicResult(out2, page.url, lang, LOCAL_ENGINE).findings, page));
@@ -58557,13 +58596,15 @@ async function runSampleScanLocal(pages, opts) {
   } finally {
     await browser.close();
   }
+  const dropped = new Set(redirected.map((r) => r.id));
+  const scanned = pages.filter((p) => !dropped.has(p.id));
   return {
     tool: "ultra11y",
     engine: LOCAL_ENGINE,
-    target: `${pages.length} page(s) (\xE9chantillon)`,
+    target: `${scanned.length}/${pages.length} page(s) (\xE9chantillon)`,
     date: today(),
     findings,
-    sample: sampleScope({ pages }),
+    sample: sampleScope({ pages: scanned }),
     testedScs: localTestedScs(interact),
     ...snapshots.length ? { snapshots } : {},
     ...redirected.length ? { redirected } : {}
@@ -61882,6 +61923,20 @@ var ADJUDICATE_SCHEMA = {
           criteriaId: { type: "string" },
           verdict: { enum: ["C", "NC", "NA", "manual"] },
           justification: { type: "string", description: "REQUIRED for C and NA" },
+          // REQUIRED by the fold alongside `justification`, for exactly the same reason
+          // `normativeRef` is required on an NC: a cleared criterion has to name what it
+          // cleared. Omitting it here (and from the adjudicator contract) made every
+          // adjudication produce C/NA verdicts that `verify --apply` then refused wholesale —
+          // 63 rejections out of 97 verdicts on the run that surfaced this.
+          citations: {
+            type: "array",
+            description: "REQUIRED for C, and for NA when evidence was presented: the evidence items you cleared, `file`/`line` copied verbatim from this criterion's own evidence[]",
+            items: {
+              type: "object",
+              required: ["file", "line"],
+              properties: { file: { type: "string" }, line: { type: "number" }, selector: { type: "string" }, snippet: { type: "string" } }
+            }
+          },
           reason: { type: ["string", "null"], enum: ["needs-rendered-dom", "undecidable", null], description: "REQUIRED for a still-manual verdict" },
           findings: {
             type: "array",
@@ -62007,13 +62062,13 @@ For EACH of your criteria:
 
 1. Read its worklist entry. \`evidence[]\` holds source-anchored excerpts (\`file\`, \`line\`, \`selector\`, \`snippet\`) harvested from the audited code \u2014 open the cited files at the cited lines whenever the snippet alone cannot decide.
 2. Rule it (the apply gate is FAIL-CLOSED \u2014 a verdict missing its required field does not fold):
-   - \`C\` (conforming) \u2014 REQUIRES \`justification\` explaining why the evidence satisfies the criterion.
+   - \`C\` (conforming) \u2014 REQUIRES \`justification\` explaining why the evidence satisfies the criterion, AND \`citations[]\` naming the evidence you cleared (\`file\`/\`line\` copied VERBATIM from this item's own \`evidence[]\`; an anchor that is not in that list is treated as fabricated). A criterion whose \`evidence[]\` is empty cannot be \`C\` at all \u2014 it is \`manual\` (\`undecidable\`), or \`NA\` if nothing in scope is concerned.
    - \`NC\` (non-conforming) \u2014 REQUIRES \`findings\`: at least one groundable \`{ file, line, selector?, message, snippet?, severity?, normativeRef }\` pointing at REAL source. The fold re-grounds every finding; an invented file:line is rejected. \`normativeRef\` MUST cite the precise failed test \u2014 under a country standard, one of the item's OWN tests, which the worklist lists for you under \xAB tests to rule on \xBB.
-   - \`NA\` (not applicable) \u2014 REQUIRES \`justification\`.
+   - \`NA\` (not applicable) \u2014 REQUIRES \`justification\`, AND \`citations[]\` whenever evidence WAS presented, to say which of those items fall outside the criterion's scope.
    - \`manual\` (still undecidable) \u2014 REQUIRES \`reason\`: \`needs-rendered-dom\` (only a rendered DOM can decide, e.g. computed contrast) or \`undecidable\` (the evidence cannot settle it either way).
 3. Never guess. A criterion you cannot decide from real evidence stays \`manual\` with a reason \u2014 that is a valid, honest verdict; the scan tier or a human picks it up.
 
-Return (structured output): \`{ "verdicts": [{ "criteriaId", "verdict", "justification", "reason", "findings" }] }\` \u2014 your ITEMS only, every field grounded in what you actually read, every NC finding carrying its \`normativeRef\`.
+Return (structured output): \`{ "verdicts": [{ "criteriaId", "verdict", "justification", "citations", "reason", "findings" }] }\` \u2014 your ITEMS only, every field grounded in what you actually read, every NC finding carrying its \`normativeRef\`, and every C (plus every evidenced NA) carrying its \`citations\`. A verdict that clears a criterion without naming what it cleared is refused by the fold, and one refusal discards the WHOLE adjudication \u2014 including every other verdict you got right.
 ${footer}`,
     refuter: `# Contract: refuter
 
@@ -66635,7 +66690,7 @@ async function cmdScan(p) {
     }
     sampleConfig = v.sample;
     if (!useLocal && sampleConfig.pages.some((pg) => pg.storageState)) {
-      const forced = typeof p.flags.runtime === "string" && p.flags.runtime === "docker";
+      const forced = runtimeFlag === "docker";
       console.error(
         lang === "fr" ? `ultra11y scan : l'\xE9chantillon comporte des pages authentifi\xE9es (storageState), non prises en charge par le runtime Docker.${forced ? " Retirez --runtime docker." : " Le runtime local n'a pas pu \xEAtre r\xE9solu : installez @playwright/test et @axe-core/playwright dans le projet audit\xE9 (ou pointez --cwd dessus). Via l'Action, ce sont des d\xE9pendances du d\xE9p\xF4t."}` : `ultra11y scan: the sample has authenticated pages (storageState), unsupported by the Docker runtime.${forced ? " Drop --runtime docker." : " The local runtime could not be resolved: install @playwright/test and @axe-core/playwright in the audited project (or point --cwd at it). Through the Action, those are dependencies of the repository."}`
       );
@@ -66668,10 +66723,17 @@ async function cmdScan(p) {
   }
   if (dynamic.redirected?.length) {
     for (const r of dynamic.redirected) {
+      const why = r.reason === "http-status" ? lang === "fr" ? `a r\xE9pondu HTTP ${r.status} \xE0 la m\xEAme adresse` : `answered HTTP ${r.status} at the same address` : lang === "fr" ? `a redirig\xE9 vers ${r.landed}` : `redirected to ${r.landed}`;
       console.error(
-        lang === "fr" ? `\u26A0\uFE0F ultra11y scan : \xAB ${r.name} \xBB (${r.id}) non enregistr\xE9e \u2014 ${r.requested} a redirig\xE9 vers ${r.landed}. L'enregistrer aurait d\xE9crit cet \xE9cran sous le nom du premier.` : `\u26A0\uFE0F ultra11y scan: "${r.name}" (${r.id}) not recorded \u2014 ${r.requested} redirected to ${r.landed}. Recording it would have described that screen under the first one's name.`
+        lang === "fr" ? `\u26A0\uFE0F ultra11y scan : \xAB ${r.name} \xBB (${r.id}) non enregistr\xE9e \u2014 ${r.requested} ${why}. L'enregistrer aurait d\xE9crit cet \xE9cran sous le nom demand\xE9.` : `\u26A0\uFE0F ultra11y scan: "${r.name}" (${r.id}) not recorded \u2014 ${r.requested} ${why}. Recording it would have described that screen under the requested name.`
       );
     }
+    if (useSample && sampleConfig && dynamic.redirected.length === sampleConfig.pages.length) {
+      console.error(
+        lang === "fr" ? `ultra11y scan : aucune des ${sampleConfig.pages.length} pages de l'\xE9chantillon n'a pu \xEAtre enregistr\xE9e \u2014 rien n'a \xE9t\xE9 mesur\xE9. V\xE9rifiez la session, l'URL de base et l'\xE9tat applicatif attendu par ces pages.` : `ultra11y scan: none of the ${sampleConfig.pages.length} sample pages could be recorded \u2014 nothing was measured. Check the session, the base URL, and the application state those pages expect.`
+      );
+      return 1;
+    }
   }
   if (useSample && sampleConfig) {
     const lintKey = typeof p.flags.standard === "string" && p.flags.standard ? p.flags.standard : "rgaa";

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 4.5.2
+  version: 5.0.1
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join50, relative as relative5, resolve as resolve15, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "4.5.2";
+var VERSION = "5.0.1";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -53203,6 +53203,20 @@ function pageGridModel(result, derived, standard, lang) {
   for (const p of derived) for (const pc of derivePackResults(pageView(result, p), standard)) put(pc.id, p.id, pc.status);
   return { rows, status };
 }
+function renderRedirected(redirected, lang = "en") {
+  const fr = lang === "fr";
+  const out2 = [
+    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) de l'\xE9chantillon n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} sample page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
+    "",
+    fr ? "| Page | Demand\xE9 | Atteint | Motif |" : "| Page | Requested | Landed | Reason |",
+    "| --- | --- | --- | --- |"
+  ];
+  for (const r of redirected) {
+    const why = r.reason === "http-status" ? fr ? `HTTP ${r.status ?? "\u2265 400"} \u2014 page d'erreur rendue \xE0 la m\xEAme adresse` : `HTTP ${r.status ?? "\u2265 400"} \u2014 error page served at the same address` : fr ? "redirection" : "redirect";
+    out2.push(`| ${r.name} (\`${r.id}\`) | \`${r.requested}\` | \`${r.landed}\` | ${why} |`);
+  }
+  return out2;
+}
 function renderPageGrid(result, pages, standard = CORE2, lang = "en") {
   const s = L3[lang];
   const out2 = [];
@@ -53445,6 +53459,7 @@ function render(r, lang, opts) {
     const derived = derivePages(r, pageScope);
     out2.push(`## \u{1F4C4} ${s.perPageTitle}`, "", `> ${s.perPageNote}`, "");
     if (r.scope.sample?.transverse?.length) out2.push(`> ${s.transverseNote(r.scope.sample.transverse.join(", "))}`, "");
+    if (r.scope.redirected?.length) out2.push(...renderRedirected(r.scope.redirected, lang), "");
     const pack = isCore(opts.standard) ? void 0 : loadPack(opts.standard);
     for (const pg of derived) {
       const nc = pg.findings.filter((f) => !f.advisory);
@@ -57792,6 +57807,14 @@ function resolveHostAnchor(file, snippet2) {
 function mergeDynamic(audit2, dynamic, lang = "en") {
   const merged = JSON.parse(JSON.stringify(audit2));
   if (dynamic.sample) merged.scope.sample = dynamic.sample;
+  if (dynamic.redirected?.length) {
+    const byId3 = new Map((merged.scope.redirected ?? []).map((r) => [r.id, r]));
+    for (const r of dynamic.redirected) byId3.set(r.id, r);
+    const scannedIds = new Set((merged.scope.sample?.pages ?? []).map((p) => p.id));
+    const still = [...byId3.values()].filter((r) => !scannedIds.has(r.id));
+    if (still.length) merged.scope.redirected = still;
+    else delete merged.scope.redirected;
+  }
   if (dynamic.testedScs?.length) {
     const tested = /* @__PURE__ */ new Set([...merged.scope.scan?.testedScs ?? [], ...dynamic.testedScs]);
     merged.scope.scan = { testedScs: [...tested].sort() };
@@ -58354,17 +58377,23 @@ function clicksAllowed(storageState, interactClicks) {
 }
 function landedOnRequestedPage(requested, landed) {
   if (!landed || requested === landed) return true;
-  const path = (u) => {
+  const parse2 = (u) => {
     try {
-      return new URL(u, "http://x.invalid").pathname.replace(/\/+$/, "");
+      return new URL(u, "http://x.invalid");
     } catch {
       return void 0;
     }
   };
-  const a = path(requested);
-  const b = path(landed);
-  if (a === void 0 || b === void 0) return true;
-  return a === b;
+  const a = parse2(requested);
+  const b = parse2(landed);
+  if (!a || !b) return true;
+  const path = (u) => u.pathname.replace(/\/+$/, "");
+  if (path(a) !== path(b)) return false;
+  const host = (u) => u.hostname.replace(/^www\./, "");
+  if (host(a) !== host(b)) return false;
+  if (a.hash && a.hash !== b.hash) return false;
+  if (a.search && a.search !== b.search) return false;
+  return true;
 }
 async function probeLiveRegion(page, lang, allowClicks) {
   const detail = LIVE_REGION_DETAIL[lang] ?? LIVE_REGION_DETAIL.en;
@@ -58405,10 +58434,12 @@ async function runOnPage(browser, AxeBuilder, target, isFile, opts) {
   const empty = [];
   try {
     const url = isFile ? "file://" + resolve11(target) : target;
-    await page.goto(url, { waitUntil: "load", timeout: 45e3 });
+    const response = await page.goto(url, { waitUntil: "load", timeout: 45e3 });
     await page.waitForLoadState("networkidle", { timeout: 8e3 }).catch(() => {
     });
     await page.waitForTimeout(1200);
+    const landedUrl = page.url() || url;
+    const httpStatus = typeof response?.status === "function" ? response.status() : void 0;
     let snapshot;
     let screenshot;
     if (opts.snapshot !== false) {
@@ -58454,6 +58485,8 @@ async function runOnPage(browser, AxeBuilder, target, isFile, opts) {
     const liveRegion = opts.interact ? await probeLiveRegion(page, l, opts.allowClicks).catch(() => empty) : [];
     return {
       url: page.url() || target,
+      landedUrl,
+      ...httpStatus !== void 0 ? { httpStatus } : {},
       violations,
       reflow,
       focusVisible: dialogFocus.length ? [...focusVisible, ...dialogFocus] : focusVisible,
@@ -58546,8 +58579,14 @@ async function runSampleScanLocal(pages, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
-      if (!landedOnRequestedPage(page.url, out2.url)) {
-        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: out2.url });
+      const requestedUrl = isFile ? "file://" + resolve11(page.url) : page.url;
+      const landedUrl = out2.landedUrl ?? out2.url;
+      if (!landedOnRequestedPage(requestedUrl, landedUrl)) {
+        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: landedUrl, reason: "redirect" });
+        continue;
+      }
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: landedUrl, reason: "http-status", status: out2.httpStatus });
         continue;
       }
       findings.push(...tagSampleFindings(toDynamicResult(out2, page.url, lang, LOCAL_ENGINE).findings, page));
@@ -58557,13 +58596,15 @@ async function runSampleScanLocal(pages, opts) {
   } finally {
     await browser.close();
   }
+  const dropped = new Set(redirected.map((r) => r.id));
+  const scanned = pages.filter((p) => !dropped.has(p.id));
   return {
     tool: "ultra11y",
     engine: LOCAL_ENGINE,
-    target: `${pages.length} page(s) (\xE9chantillon)`,
+    target: `${scanned.length}/${pages.length} page(s) (\xE9chantillon)`,
     date: today(),
     findings,
-    sample: sampleScope({ pages }),
+    sample: sampleScope({ pages: scanned }),
     testedScs: localTestedScs(interact),
     ...snapshots.length ? { snapshots } : {},
     ...redirected.length ? { redirected } : {}
@@ -61882,6 +61923,20 @@ var ADJUDICATE_SCHEMA = {
           criteriaId: { type: "string" },
           verdict: { enum: ["C", "NC", "NA", "manual"] },
           justification: { type: "string", description: "REQUIRED for C and NA" },
+          // REQUIRED by the fold alongside `justification`, for exactly the same reason
+          // `normativeRef` is required on an NC: a cleared criterion has to name what it
+          // cleared. Omitting it here (and from the adjudicator contract) made every
+          // adjudication produce C/NA verdicts that `verify --apply` then refused wholesale —
+          // 63 rejections out of 97 verdicts on the run that surfaced this.
+          citations: {
+            type: "array",
+            description: "REQUIRED for C, and for NA when evidence was presented: the evidence items you cleared, `file`/`line` copied verbatim from this criterion's own evidence[]",
+            items: {
+              type: "object",
+              required: ["file", "line"],
+              properties: { file: { type: "string" }, line: { type: "number" }, selector: { type: "string" }, snippet: { type: "string" } }
+            }
+          },
           reason: { type: ["string", "null"], enum: ["needs-rendered-dom", "undecidable", null], description: "REQUIRED for a still-manual verdict" },
           findings: {
             type: "array",
@@ -62007,13 +62062,13 @@ For EACH of your criteria:
 
 1. Read its worklist entry. \`evidence[]\` holds source-anchored excerpts (\`file\`, \`line\`, \`selector\`, \`snippet\`) harvested from the audited code \u2014 open the cited files at the cited lines whenever the snippet alone cannot decide.
 2. Rule it (the apply gate is FAIL-CLOSED \u2014 a verdict missing its required field does not fold):
-   - \`C\` (conforming) \u2014 REQUIRES \`justification\` explaining why the evidence satisfies the criterion.
+   - \`C\` (conforming) \u2014 REQUIRES \`justification\` explaining why the evidence satisfies the criterion, AND \`citations[]\` naming the evidence you cleared (\`file\`/\`line\` copied VERBATIM from this item's own \`evidence[]\`; an anchor that is not in that list is treated as fabricated). A criterion whose \`evidence[]\` is empty cannot be \`C\` at all \u2014 it is \`manual\` (\`undecidable\`), or \`NA\` if nothing in scope is concerned.
    - \`NC\` (non-conforming) \u2014 REQUIRES \`findings\`: at least one groundable \`{ file, line, selector?, message, snippet?, severity?, normativeRef }\` pointing at REAL source. The fold re-grounds every finding; an invented file:line is rejected. \`normativeRef\` MUST cite the precise failed test \u2014 under a country standard, one of the item's OWN tests, which the worklist lists for you under \xAB tests to rule on \xBB.
-   - \`NA\` (not applicable) \u2014 REQUIRES \`justification\`.
+   - \`NA\` (not applicable) \u2014 REQUIRES \`justification\`, AND \`citations[]\` whenever evidence WAS presented, to say which of those items fall outside the criterion's scope.
    - \`manual\` (still undecidable) \u2014 REQUIRES \`reason\`: \`needs-rendered-dom\` (only a rendered DOM can decide, e.g. computed contrast) or \`undecidable\` (the evidence cannot settle it either way).
 3. Never guess. A criterion you cannot decide from real evidence stays \`manual\` with a reason \u2014 that is a valid, honest verdict; the scan tier or a human picks it up.
 
-Return (structured output): \`{ "verdicts": [{ "criteriaId", "verdict", "justification", "reason", "findings" }] }\` \u2014 your ITEMS only, every field grounded in what you actually read, every NC finding carrying its \`normativeRef\`.
+Return (structured output): \`{ "verdicts": [{ "criteriaId", "verdict", "justification", "citations", "reason", "findings" }] }\` \u2014 your ITEMS only, every field grounded in what you actually read, every NC finding carrying its \`normativeRef\`, and every C (plus every evidenced NA) carrying its \`citations\`. A verdict that clears a criterion without naming what it cleared is refused by the fold, and one refusal discards the WHOLE adjudication \u2014 including every other verdict you got right.
 ${footer}`,
     refuter: `# Contract: refuter
 
@@ -66635,7 +66690,7 @@ async function cmdScan(p) {
     }
     sampleConfig = v.sample;
     if (!useLocal && sampleConfig.pages.some((pg) => pg.storageState)) {
-      const forced = typeof p.flags.runtime === "string" && p.flags.runtime === "docker";
+      const forced = runtimeFlag === "docker";
       console.error(
         lang === "fr" ? `ultra11y scan : l'\xE9chantillon comporte des pages authentifi\xE9es (storageState), non prises en charge par le runtime Docker.${forced ? " Retirez --runtime docker." : " Le runtime local n'a pas pu \xEAtre r\xE9solu : installez @playwright/test et @axe-core/playwright dans le projet audit\xE9 (ou pointez --cwd dessus). Via l'Action, ce sont des d\xE9pendances du d\xE9p\xF4t."}` : `ultra11y scan: the sample has authenticated pages (storageState), unsupported by the Docker runtime.${forced ? " Drop --runtime docker." : " The local runtime could not be resolved: install @playwright/test and @axe-core/playwright in the audited project (or point --cwd at it). Through the Action, those are dependencies of the repository."}`
       );
@@ -66668,10 +66723,17 @@ async function cmdScan(p) {
   }
   if (dynamic.redirected?.length) {
     for (const r of dynamic.redirected) {
+      const why = r.reason === "http-status" ? lang === "fr" ? `a r\xE9pondu HTTP ${r.status} \xE0 la m\xEAme adresse` : `answered HTTP ${r.status} at the same address` : lang === "fr" ? `a redirig\xE9 vers ${r.landed}` : `redirected to ${r.landed}`;
       console.error(
-        lang === "fr" ? `\u26A0\uFE0F ultra11y scan : \xAB ${r.name} \xBB (${r.id}) non enregistr\xE9e \u2014 ${r.requested} a redirig\xE9 vers ${r.landed}. L'enregistrer aurait d\xE9crit cet \xE9cran sous le nom du premier.` : `\u26A0\uFE0F ultra11y scan: "${r.name}" (${r.id}) not recorded \u2014 ${r.requested} redirected to ${r.landed}. Recording it would have described that screen under the first one's name.`
+        lang === "fr" ? `\u26A0\uFE0F ultra11y scan : \xAB ${r.name} \xBB (${r.id}) non enregistr\xE9e \u2014 ${r.requested} ${why}. L'enregistrer aurait d\xE9crit cet \xE9cran sous le nom demand\xE9.` : `\u26A0\uFE0F ultra11y scan: "${r.name}" (${r.id}) not recorded \u2014 ${r.requested} ${why}. Recording it would have described that screen under the requested name.`
       );
     }
+    if (useSample && sampleConfig && dynamic.redirected.length === sampleConfig.pages.length) {
+      console.error(
+        lang === "fr" ? `ultra11y scan : aucune des ${sampleConfig.pages.length} pages de l'\xE9chantillon n'a pu \xEAtre enregistr\xE9e \u2014 rien n'a \xE9t\xE9 mesur\xE9. V\xE9rifiez la session, l'URL de base et l'\xE9tat applicatif attendu par ces pages.` : `ultra11y scan: none of the ${sampleConfig.pages.length} sample pages could be recorded \u2014 nothing was measured. Check the session, the base URL, and the application state those pages expect.`
+      );
+      return 1;
+    }
   }
   if (useSample && sampleConfig) {
     const lintKey = typeof p.flags.standard === "string" && p.flags.standard ? p.flags.standard : "rgaa";

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 4.5.2
+  version: 5.0.1
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/references/ci.md

@@ -15,7 +15,7 @@ permissions:
 steps:
   - uses: actions/checkout@v4
     with: { fetch-depth: 0 }        # the diff gate needs the base ref
-  - uses: maxgfr/ultra11y@v4      # or pin the exact version, as `init --ci` does
+  - uses: maxgfr/ultra11y@v5      # or pin the exact version, as `init --ci` does
     with:
       since: auto                   # the PR's base branch
       standard: rgaa
@@ -27,7 +27,7 @@ steps:
 Page by page, with a real browser, in the same step:
 
 ```yaml
-  - uses: maxgfr/ultra11y@v4
+  - uses: maxgfr/ultra11y@v5
     with:
       standard: rgaa
       start: npm run start
@@ -37,7 +37,7 @@ Page by page, with a real browser, in the same step:
 ```
 
 `ultra11y init --ci` writes a workflow using it, **pinned to the exact engine version that
-generated the file** (`@v<that version>`) so a CI run stays reproducible. `@v<major>` — `@v3`
+generated the file** (`@v<that version>`) so a CI run stays reproducible. `@v<major>` — `@v5`
 today — is a moving alias the release workflow repoints at each release, for teams who would
 rather take fixes automatically. It moves **within** a major only: when a breaking change cuts
 the next one, the old alias freezes where it is, so a pipeline pinned to it keeps working and
@@ -66,7 +66,7 @@ partial by construction. `adjudicate` closes that — opt-in, in two modes.
 env:
   ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}   # the job's env, never an input
 steps:
-  - uses: maxgfr/ultra11y@v4
+  - uses: maxgfr/ultra11y@v5
     with:
       standard: rgaa
       adjudicate: api          # or `agent`
@@ -76,8 +76,17 @@ steps:
 |---|---|---|
 | `adjudicate` | `none` | `api` · `agent` · `none` |
 | `adjudicate-model` | *(empty)* | model id for `api`; else `$ULTRA11Y_LLM_MODEL`, else the engine default |
+| `adjudicate-max-turns` | *(empty)* | turn budget for `agent`; empty derives it from the worklist |
 | `gate-adjudicated` | `false` | let a model-ruled NC fail the job |
 
+**The turn budget is derived, and that matters more than it sounds.** The runbook is sequential
+and the whole point of agent mode is that it opens the files a criterion cites, so the cost is
+per item — under RGAA the worklist runs to ~80. A budget too small does not truncate the result,
+it **loses** it: the fold is fail-closed on a single unfilled verdict, so a run cut short throws
+away every verdict it had already produced, and you pay for all of them. The action therefore
+counts the worklist and budgets from it. `adjudicate-max-turns` overrides that when you know
+better.
+
 **`api`** sends the worklist to the Messages API in batches of 8 and folds the verdicts back.
 **`agent`** emits the worklist plus `orchestrate --eco`'s runbook and hands them to a
 `claude-code-action` run, then folds the same way. Both end in the **same fail-closed gate** an
@@ -264,7 +273,7 @@ The action audits the **code** and, when you point it at a served app, the **pag
 list can come from three places, and none of them has to be written by hand:
 
 ```yaml
-- uses: maxgfr/ultra11y@v4
+- uses: maxgfr/ultra11y@v5
   with:
     standard: rgaa
     start: npm run start
@@ -303,7 +312,7 @@ the setup project their E2E suite depends on — and hand the action its path:
 
 ```yaml
 - run: npx playwright test --project=setup      # your existing login, writing the session file
-- uses: maxgfr/ultra11y@v4
+- uses: maxgfr/ultra11y@v5
   with:
     standard: rgaa
     sample: 'true'
@@ -458,9 +467,9 @@ one job — the code diff, then the served pages — died on a `409 Conflict`, w
 written and never uploaded. Pass `artifact-name` on each invocation:
 
 ```yaml
-- uses: maxgfr/ultra11y@v4
+- uses: maxgfr/ultra11y@v5
   with: { since: auto, artifact-name: a11y-code }
-- uses: maxgfr/ultra11y@v4
+- uses: maxgfr/ultra11y@v5
   with: { crawl: http://localhost:3000, artifact-name: a11y-pages }
 ```
 

package/skills/ultra11y/references/pages.md

@@ -222,15 +222,31 @@ the §1–5 structure of a conformance document.
 
 ### Four honesty rules
 
-**0. A page is recorded only if the browser stayed on it.** A sample page's declared `id` and
-`name` are the identity the report speaks, and they are applied to whatever was on screen. So a
-route that redirects — an expired session bouncing to sign-in, a wizard step the application
-state does not open — would be filed under the requested page's name while showing something
-else: a sheet, a screenshot and a rate that describe a different screen, with nothing about the
-document looking wrong. `scan --sample` compares the landed **path** against the requested one
-(a query string or fragment the app appends is the same page) and **drops** a page that moved,
-naming it and where it went. A page reported missing is a bug in the sample or in the state you
-seeded, and both are fixable; a page reported under the wrong name is a false conformance claim.
+**0. A page is recorded only if the browser stayed on it, and answered.** A sample page's
+declared `id` and `name` are the identity the report speaks, and they are applied to whatever was
+on screen. So a route that redirects — an expired session bouncing to sign-in, a wizard step the
+application state does not open — would be filed under the requested page's name while showing
+something else: a sheet, a screenshot and a rate that describe a different screen, with nothing
+about the document looking wrong.
+
+`scan --sample` refuses two ways:
+
+- **It moved.** The address is compared as the app routes: the **path** always; the **fragment**
+  and the **query** when the request carried one, because a hash-router app puts the route there
+  and `#/admin` → `#/login` is exactly the bounce this rule exists for; the **host**, since a
+  same-path landing on an IdP is the same misattribution (a scheme, a port or a `www.` differ
+  freely — that is canonicalisation). The comparison uses the URL captured right after the
+  navigation settles, before any probe could click something that routes.
+- **It answered an error.** A framework's own not-found page is a complete, valid document
+  served at the address you asked for — `notFound()` in Next is exactly that — so no address
+  comparison can see it. The HTTP status can: anything ≥ 400 is refused.
+
+A refused page is **named in the report**, with what was asked, what was reached and why, and it
+is removed from `scope.sample` — leaving it there would put it back in the grid with the same
+basis as a page really visited, so the deliverable would claim we looked at it. A run where
+*every* page was refused exits non-zero: that is not a partial result, it is a scan that measured
+nothing. A page reported missing is a bug in the sample or in the state you seeded, and both are
+fixable; a page reported under the wrong name is a false conformance claim.
 
 **1. A finding is attributed to a page only when something says so.** In order: the snapshot
 path it was raised on (`.ultra11y/pages/<id>/dom.html` — the id is *in the path*, which is what

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join50, relative as relative5, resolve as resolve15, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "4.5.2";
+var VERSION = "5.0.1";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -53203,6 +53203,20 @@ function pageGridModel(result, derived, standard, lang) {
   for (const p of derived) for (const pc of derivePackResults(pageView(result, p), standard)) put(pc.id, p.id, pc.status);
   return { rows, status };
 }
+function renderRedirected(redirected, lang = "en") {
+  const fr = lang === "fr";
+  const out2 = [
+    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) de l'\xE9chantillon n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} sample page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
+    "",
+    fr ? "| Page | Demand\xE9 | Atteint | Motif |" : "| Page | Requested | Landed | Reason |",
+    "| --- | --- | --- | --- |"
+  ];
+  for (const r of redirected) {
+    const why = r.reason === "http-status" ? fr ? `HTTP ${r.status ?? "\u2265 400"} \u2014 page d'erreur rendue \xE0 la m\xEAme adresse` : `HTTP ${r.status ?? "\u2265 400"} \u2014 error page served at the same address` : fr ? "redirection" : "redirect";
+    out2.push(`| ${r.name} (\`${r.id}\`) | \`${r.requested}\` | \`${r.landed}\` | ${why} |`);
+  }
+  return out2;
+}
 function renderPageGrid(result, pages, standard = CORE2, lang = "en") {
   const s = L3[lang];
   const out2 = [];
@@ -53445,6 +53459,7 @@ function render(r, lang, opts) {
     const derived = derivePages(r, pageScope);
     out2.push(`## \u{1F4C4} ${s.perPageTitle}`, "", `> ${s.perPageNote}`, "");
     if (r.scope.sample?.transverse?.length) out2.push(`> ${s.transverseNote(r.scope.sample.transverse.join(", "))}`, "");
+    if (r.scope.redirected?.length) out2.push(...renderRedirected(r.scope.redirected, lang), "");
     const pack = isCore(opts.standard) ? void 0 : loadPack(opts.standard);
     for (const pg of derived) {
       const nc = pg.findings.filter((f) => !f.advisory);
@@ -57792,6 +57807,14 @@ function resolveHostAnchor(file, snippet2) {
 function mergeDynamic(audit2, dynamic, lang = "en") {
   const merged = JSON.parse(JSON.stringify(audit2));
   if (dynamic.sample) merged.scope.sample = dynamic.sample;
+  if (dynamic.redirected?.length) {
+    const byId3 = new Map((merged.scope.redirected ?? []).map((r) => [r.id, r]));
+    for (const r of dynamic.redirected) byId3.set(r.id, r);
+    const scannedIds = new Set((merged.scope.sample?.pages ?? []).map((p) => p.id));
+    const still = [...byId3.values()].filter((r) => !scannedIds.has(r.id));
+    if (still.length) merged.scope.redirected = still;
+    else delete merged.scope.redirected;
+  }
   if (dynamic.testedScs?.length) {
     const tested = /* @__PURE__ */ new Set([...merged.scope.scan?.testedScs ?? [], ...dynamic.testedScs]);
     merged.scope.scan = { testedScs: [...tested].sort() };
@@ -58354,17 +58377,23 @@ function clicksAllowed(storageState, interactClicks) {
 }
 function landedOnRequestedPage(requested, landed) {
   if (!landed || requested === landed) return true;
-  const path = (u) => {
+  const parse2 = (u) => {
     try {
-      return new URL(u, "http://x.invalid").pathname.replace(/\/+$/, "");
+      return new URL(u, "http://x.invalid");
     } catch {
       return void 0;
     }
   };
-  const a = path(requested);
-  const b = path(landed);
-  if (a === void 0 || b === void 0) return true;
-  return a === b;
+  const a = parse2(requested);
+  const b = parse2(landed);
+  if (!a || !b) return true;
+  const path = (u) => u.pathname.replace(/\/+$/, "");
+  if (path(a) !== path(b)) return false;
+  const host = (u) => u.hostname.replace(/^www\./, "");
+  if (host(a) !== host(b)) return false;
+  if (a.hash && a.hash !== b.hash) return false;
+  if (a.search && a.search !== b.search) return false;
+  return true;
 }
 async function probeLiveRegion(page, lang, allowClicks) {
   const detail = LIVE_REGION_DETAIL[lang] ?? LIVE_REGION_DETAIL.en;
@@ -58405,10 +58434,12 @@ async function runOnPage(browser, AxeBuilder, target, isFile, opts) {
   const empty = [];
   try {
     const url = isFile ? "file://" + resolve11(target) : target;
-    await page.goto(url, { waitUntil: "load", timeout: 45e3 });
+    const response = await page.goto(url, { waitUntil: "load", timeout: 45e3 });
     await page.waitForLoadState("networkidle", { timeout: 8e3 }).catch(() => {
     });
     await page.waitForTimeout(1200);
+    const landedUrl = page.url() || url;
+    const httpStatus = typeof response?.status === "function" ? response.status() : void 0;
     let snapshot;
     let screenshot;
     if (opts.snapshot !== false) {
@@ -58454,6 +58485,8 @@ async function runOnPage(browser, AxeBuilder, target, isFile, opts) {
     const liveRegion = opts.interact ? await probeLiveRegion(page, l, opts.allowClicks).catch(() => empty) : [];
     return {
       url: page.url() || target,
+      landedUrl,
+      ...httpStatus !== void 0 ? { httpStatus } : {},
       violations,
       reflow,
       focusVisible: dialogFocus.length ? [...focusVisible, ...dialogFocus] : focusVisible,
@@ -58546,8 +58579,14 @@ async function runSampleScanLocal(pages, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
-      if (!landedOnRequestedPage(page.url, out2.url)) {
-        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: out2.url });
+      const requestedUrl = isFile ? "file://" + resolve11(page.url) : page.url;
+      const landedUrl = out2.landedUrl ?? out2.url;
+      if (!landedOnRequestedPage(requestedUrl, landedUrl)) {
+        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: landedUrl, reason: "redirect" });
+        continue;
+      }
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: landedUrl, reason: "http-status", status: out2.httpStatus });
         continue;
       }
       findings.push(...tagSampleFindings(toDynamicResult(out2, page.url, lang, LOCAL_ENGINE).findings, page));
@@ -58557,13 +58596,15 @@ async function runSampleScanLocal(pages, opts) {
   } finally {
     await browser.close();
   }
+  const dropped = new Set(redirected.map((r) => r.id));
+  const scanned = pages.filter((p) => !dropped.has(p.id));
   return {
     tool: "ultra11y",
     engine: LOCAL_ENGINE,
-    target: `${pages.length} page(s) (\xE9chantillon)`,
+    target: `${scanned.length}/${pages.length} page(s) (\xE9chantillon)`,
     date: today(),
     findings,
-    sample: sampleScope({ pages }),
+    sample: sampleScope({ pages: scanned }),
     testedScs: localTestedScs(interact),
     ...snapshots.length ? { snapshots } : {},
     ...redirected.length ? { redirected } : {}
@@ -61882,6 +61923,20 @@ var ADJUDICATE_SCHEMA = {
           criteriaId: { type: "string" },
           verdict: { enum: ["C", "NC", "NA", "manual"] },
           justification: { type: "string", description: "REQUIRED for C and NA" },
+          // REQUIRED by the fold alongside `justification`, for exactly the same reason
+          // `normativeRef` is required on an NC: a cleared criterion has to name what it
+          // cleared. Omitting it here (and from the adjudicator contract) made every
+          // adjudication produce C/NA verdicts that `verify --apply` then refused wholesale —
+          // 63 rejections out of 97 verdicts on the run that surfaced this.
+          citations: {
+            type: "array",
+            description: "REQUIRED for C, and for NA when evidence was presented: the evidence items you cleared, `file`/`line` copied verbatim from this criterion's own evidence[]",
+            items: {
+              type: "object",
+              required: ["file", "line"],
+              properties: { file: { type: "string" }, line: { type: "number" }, selector: { type: "string" }, snippet: { type: "string" } }
+            }
+          },
           reason: { type: ["string", "null"], enum: ["needs-rendered-dom", "undecidable", null], description: "REQUIRED for a still-manual verdict" },
           findings: {
             type: "array",
@@ -62007,13 +62062,13 @@ For EACH of your criteria:
 
 1. Read its worklist entry. \`evidence[]\` holds source-anchored excerpts (\`file\`, \`line\`, \`selector\`, \`snippet\`) harvested from the audited code \u2014 open the cited files at the cited lines whenever the snippet alone cannot decide.
 2. Rule it (the apply gate is FAIL-CLOSED \u2014 a verdict missing its required field does not fold):
-   - \`C\` (conforming) \u2014 REQUIRES \`justification\` explaining why the evidence satisfies the criterion.
+   - \`C\` (conforming) \u2014 REQUIRES \`justification\` explaining why the evidence satisfies the criterion, AND \`citations[]\` naming the evidence you cleared (\`file\`/\`line\` copied VERBATIM from this item's own \`evidence[]\`; an anchor that is not in that list is treated as fabricated). A criterion whose \`evidence[]\` is empty cannot be \`C\` at all \u2014 it is \`manual\` (\`undecidable\`), or \`NA\` if nothing in scope is concerned.
    - \`NC\` (non-conforming) \u2014 REQUIRES \`findings\`: at least one groundable \`{ file, line, selector?, message, snippet?, severity?, normativeRef }\` pointing at REAL source. The fold re-grounds every finding; an invented file:line is rejected. \`normativeRef\` MUST cite the precise failed test \u2014 under a country standard, one of the item's OWN tests, which the worklist lists for you under \xAB tests to rule on \xBB.
-   - \`NA\` (not applicable) \u2014 REQUIRES \`justification\`.
+   - \`NA\` (not applicable) \u2014 REQUIRES \`justification\`, AND \`citations[]\` whenever evidence WAS presented, to say which of those items fall outside the criterion's scope.
    - \`manual\` (still undecidable) \u2014 REQUIRES \`reason\`: \`needs-rendered-dom\` (only a rendered DOM can decide, e.g. computed contrast) or \`undecidable\` (the evidence cannot settle it either way).
 3. Never guess. A criterion you cannot decide from real evidence stays \`manual\` with a reason \u2014 that is a valid, honest verdict; the scan tier or a human picks it up.
 
-Return (structured output): \`{ "verdicts": [{ "criteriaId", "verdict", "justification", "reason", "findings" }] }\` \u2014 your ITEMS only, every field grounded in what you actually read, every NC finding carrying its \`normativeRef\`.
+Return (structured output): \`{ "verdicts": [{ "criteriaId", "verdict", "justification", "citations", "reason", "findings" }] }\` \u2014 your ITEMS only, every field grounded in what you actually read, every NC finding carrying its \`normativeRef\`, and every C (plus every evidenced NA) carrying its \`citations\`. A verdict that clears a criterion without naming what it cleared is refused by the fold, and one refusal discards the WHOLE adjudication \u2014 including every other verdict you got right.
 ${footer}`,
     refuter: `# Contract: refuter
 
@@ -66635,7 +66690,7 @@ async function cmdScan(p) {
     }
     sampleConfig = v.sample;
     if (!useLocal && sampleConfig.pages.some((pg) => pg.storageState)) {
-      const forced = typeof p.flags.runtime === "string" && p.flags.runtime === "docker";
+      const forced = runtimeFlag === "docker";
       console.error(
         lang === "fr" ? `ultra11y scan : l'\xE9chantillon comporte des pages authentifi\xE9es (storageState), non prises en charge par le runtime Docker.${forced ? " Retirez --runtime docker." : " Le runtime local n'a pas pu \xEAtre r\xE9solu : installez @playwright/test et @axe-core/playwright dans le projet audit\xE9 (ou pointez --cwd dessus). Via l'Action, ce sont des d\xE9pendances du d\xE9p\xF4t."}` : `ultra11y scan: the sample has authenticated pages (storageState), unsupported by the Docker runtime.${forced ? " Drop --runtime docker." : " The local runtime could not be resolved: install @playwright/test and @axe-core/playwright in the audited project (or point --cwd at it). Through the Action, those are dependencies of the repository."}`
       );
@@ -66668,10 +66723,17 @@ async function cmdScan(p) {
   }
   if (dynamic.redirected?.length) {
     for (const r of dynamic.redirected) {
+      const why = r.reason === "http-status" ? lang === "fr" ? `a r\xE9pondu HTTP ${r.status} \xE0 la m\xEAme adresse` : `answered HTTP ${r.status} at the same address` : lang === "fr" ? `a redirig\xE9 vers ${r.landed}` : `redirected to ${r.landed}`;
       console.error(
-        lang === "fr" ? `\u26A0\uFE0F ultra11y scan : \xAB ${r.name} \xBB (${r.id}) non enregistr\xE9e \u2014 ${r.requested} a redirig\xE9 vers ${r.landed}. L'enregistrer aurait d\xE9crit cet \xE9cran sous le nom du premier.` : `\u26A0\uFE0F ultra11y scan: "${r.name}" (${r.id}) not recorded \u2014 ${r.requested} redirected to ${r.landed}. Recording it would have described that screen under the first one's name.`
+        lang === "fr" ? `\u26A0\uFE0F ultra11y scan : \xAB ${r.name} \xBB (${r.id}) non enregistr\xE9e \u2014 ${r.requested} ${why}. L'enregistrer aurait d\xE9crit cet \xE9cran sous le nom demand\xE9.` : `\u26A0\uFE0F ultra11y scan: "${r.name}" (${r.id}) not recorded \u2014 ${r.requested} ${why}. Recording it would have described that screen under the requested name.`
       );
     }
+    if (useSample && sampleConfig && dynamic.redirected.length === sampleConfig.pages.length) {
+      console.error(
+        lang === "fr" ? `ultra11y scan : aucune des ${sampleConfig.pages.length} pages de l'\xE9chantillon n'a pu \xEAtre enregistr\xE9e \u2014 rien n'a \xE9t\xE9 mesur\xE9. V\xE9rifiez la session, l'URL de base et l'\xE9tat applicatif attendu par ces pages.` : `ultra11y scan: none of the ${sampleConfig.pages.length} sample pages could be recorded \u2014 nothing was measured. Check the session, the base URL, and the application state those pages expect.`
+      );
+      return 1;
+    }
   }
   if (useSample && sampleConfig) {
     const lintKey = typeof p.flags.standard === "string" && p.flags.standard ? p.flags.standard : "rgaa";

package/src/cli.ts

@@ -3010,7 +3010,10 @@ async function cmdScan(p: ParsedArgs): Promise<number> {
       // of this message — "use --runtime local" alone sends an Action user to a flag they
       // cannot reach, and telling them to force a runtime that still cannot load would
       // exchange this error for a worse one.
-      const forced = typeof p.flags.runtime === "string" && p.flags.runtime === "docker";
+      // `runtimeFlag`, not `p.flags.runtime`: `--docker` is a documented alias, and reading the
+      // raw flag would hand a caller who typed it the OTHER half of this message — "install
+      // these dependencies" when the fix is to drop the flag they just passed.
+      const forced = runtimeFlag === "docker";
       console.error(
         lang === "fr"
           ? `ultra11y scan : l'échantillon comporte des pages authentifiées (storageState), non prises en charge par le runtime Docker.${
@@ -3064,12 +3067,32 @@ async function cmdScan(p: ParsedArgs): Promise<number> {
   // the cause is always fixable — an expired session, or state the wizard step needs.
   if (dynamic.redirected?.length) {
     for (const r of dynamic.redirected) {
+      const why =
+        r.reason === "http-status"
+          ? lang === "fr"
+            ? `a répondu HTTP ${r.status} à la même adresse`
+            : `answered HTTP ${r.status} at the same address`
+          : lang === "fr"
+            ? `a redirigé vers ${r.landed}`
+            : `redirected to ${r.landed}`;
       console.error(
         lang === "fr"
-          ? `⚠️ ultra11y scan : « ${r.name} » (${r.id}) non enregistrée — ${r.requested} a redirigé vers ${r.landed}. L'enregistrer aurait décrit cet écran sous le nom du premier.`
-          : `⚠️ ultra11y scan: "${r.name}" (${r.id}) not recorded — ${r.requested} redirected to ${r.landed}. Recording it would have described that screen under the first one's name.`,
+          ? `⚠️ ultra11y scan : « ${r.name} » (${r.id}) non enregistrée — ${r.requested} ${why}. L'enregistrer aurait décrit cet écran sous le nom demandé.`
+          : `⚠️ ultra11y scan: "${r.name}" (${r.id}) not recorded — ${r.requested} ${why}. Recording it would have described that screen under the requested name.`,
       );
     }
+    // Every page refused is not a partial result, it is a scan that measured nothing. Exiting
+    // 0 there would hand CI a green step and an empty report — the exact shape of a run that
+    // passed. The usual cause is one fixable thing (an expired session, a wrong base URL),
+    // so failing here is what makes it visible on the first run instead of the tenth.
+    if (useSample && sampleConfig && dynamic.redirected.length === sampleConfig.pages.length) {
+      console.error(
+        lang === "fr"
+          ? `ultra11y scan : aucune des ${sampleConfig.pages.length} pages de l'échantillon n'a pu être enregistrée — rien n'a été mesuré. Vérifiez la session, l'URL de base et l'état applicatif attendu par ces pages.`
+          : `ultra11y scan: none of the ${sampleConfig.pages.length} sample pages could be recorded — nothing was measured. Check the session, the base URL, and the application state those pages expect.`,
+      );
+      return 1;
+    }
   }
   // Advisory sample-methodology lint: which normative page KINDS the configured sample
   // lacks. Standard-agnostic mechanics + RGAA-specific required kinds; scan has no

package/src/orchestrate-templates.ts

@@ -34,6 +34,21 @@ const ADJUDICATE_SCHEMA = {
           criteriaId: { type: "string" },
           verdict: { enum: ["C", "NC", "NA", "manual"] },
           justification: { type: "string", description: "REQUIRED for C and NA" },
+          // REQUIRED by the fold alongside `justification`, for exactly the same reason
+          // `normativeRef` is required on an NC: a cleared criterion has to name what it
+          // cleared. Omitting it here (and from the adjudicator contract) made every
+          // adjudication produce C/NA verdicts that `verify --apply` then refused wholesale —
+          // 63 rejections out of 97 verdicts on the run that surfaced this.
+          citations: {
+            type: "array",
+            description:
+              "REQUIRED for C, and for NA when evidence was presented: the evidence items you cleared, `file`/`line` copied verbatim from this criterion's own evidence[]",
+            items: {
+              type: "object",
+              required: ["file", "line"],
+              properties: { file: { type: "string" }, line: { type: "number" }, selector: { type: "string" }, snippet: { type: "string" } },
+            },
+          },
           reason: { type: ["string", "null"], enum: ["needs-rendered-dom", "undecidable", null], description: "REQUIRED for a still-manual verdict" },
           findings: {
             type: "array",
@@ -176,13 +191,13 @@ For EACH of your criteria:
 
 1. Read its worklist entry. \`evidence[]\` holds source-anchored excerpts (\`file\`, \`line\`, \`selector\`, \`snippet\`) harvested from the audited code — open the cited files at the cited lines whenever the snippet alone cannot decide.
 2. Rule it (the apply gate is FAIL-CLOSED — a verdict missing its required field does not fold):
-   - \`C\` (conforming) — REQUIRES \`justification\` explaining why the evidence satisfies the criterion.
+   - \`C\` (conforming) — REQUIRES \`justification\` explaining why the evidence satisfies the criterion, AND \`citations[]\` naming the evidence you cleared (\`file\`/\`line\` copied VERBATIM from this item's own \`evidence[]\`; an anchor that is not in that list is treated as fabricated). A criterion whose \`evidence[]\` is empty cannot be \`C\` at all — it is \`manual\` (\`undecidable\`), or \`NA\` if nothing in scope is concerned.
    - \`NC\` (non-conforming) — REQUIRES \`findings\`: at least one groundable \`{ file, line, selector?, message, snippet?, severity?, normativeRef }\` pointing at REAL source. The fold re-grounds every finding; an invented file:line is rejected. \`normativeRef\` MUST cite the precise failed test — under a country standard, one of the item's OWN tests, which the worklist lists for you under « tests to rule on ».
-   - \`NA\` (not applicable) — REQUIRES \`justification\`.
+   - \`NA\` (not applicable) — REQUIRES \`justification\`, AND \`citations[]\` whenever evidence WAS presented, to say which of those items fall outside the criterion's scope.
    - \`manual\` (still undecidable) — REQUIRES \`reason\`: \`needs-rendered-dom\` (only a rendered DOM can decide, e.g. computed contrast) or \`undecidable\` (the evidence cannot settle it either way).
 3. Never guess. A criterion you cannot decide from real evidence stays \`manual\` with a reason — that is a valid, honest verdict; the scan tier or a human picks it up.
 
-Return (structured output): \`{ "verdicts": [{ "criteriaId", "verdict", "justification", "reason", "findings" }] }\` — your ITEMS only, every field grounded in what you actually read, every NC finding carrying its \`normativeRef\`.
+Return (structured output): \`{ "verdicts": [{ "criteriaId", "verdict", "justification", "citations", "reason", "findings" }] }\` — your ITEMS only, every field grounded in what you actually read, every NC finding carrying its \`normativeRef\`, and every C (plus every evidenced NA) carrying its \`citations\`. A verdict that clears a criterion without naming what it cleared is refused by the fold, and one refusal discards the WHOLE adjudication — including every other verdict you got right.
 ${footer}`,
     refuter: `# Contract: refuter
 

package/src/pages.ts

@@ -23,7 +23,7 @@
 //      scored 100% on "does each image have a relevant alternative?". See `pageStatus`.
 import { snapshotPageId } from "./snapshot.js";
 import { CORE, type StandardId, derivePackResults, isCore, loadPack, themeName } from "./standards/index.js";
-import type { AuditResult, CriterionResult, Finding, Lang, PageResult, PageScope, Status } from "./types.js";
+import type { AuditResult, CriterionResult, Finding, Lang, PageResult, PageScope, Status, ScanRedirect } from "./types.js";
 import { isUrlPath } from "./util.js";
 import { automatability, compareSC, scTitle } from "./wcag.js";
 
@@ -375,6 +375,37 @@ export function pageGridModel(result: AuditResult, derived: PageResult[], standa
   return { rows, status };
 }
 
+/** The pages a scan REFUSED to record, named in the deliverable.
+ *
+ *  Honesty rule 0 (see the header) removes these from `scope.sample`, because a page kept
+ *  there is re-added to the grid with the same basis as one really visited. Removing it is
+ *  correct and insufficient: the report would then just be shorter than the sample the
+ *  project declares, and a silently shorter report reads as a complete one. So the drop is
+ *  stated — which page, where it went, and why — because that is what makes it fixable. */
+export function renderRedirected(redirected: ScanRedirect[], lang: Lang = "en"): string[] {
+  const fr = lang === "fr";
+  const out: string[] = [
+    fr
+      ? `> ⚠️ **${redirected.length} page(s) de l'échantillon n'ont pas été enregistrées** — le navigateur n'est pas resté sur l'adresse demandée. Les enregistrer aurait décrit un autre écran sous le nom demandé. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.`
+      : `> ⚠️ **${redirected.length} sample page(s) were not recorded** — the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
+    "",
+    fr ? "| Page | Demandé | Atteint | Motif |" : "| Page | Requested | Landed | Reason |",
+    "| --- | --- | --- | --- |",
+  ];
+  for (const r of redirected) {
+    const why =
+      r.reason === "http-status"
+        ? fr
+          ? `HTTP ${r.status ?? "≥ 400"} — page d'erreur rendue à la même adresse`
+          : `HTTP ${r.status ?? "≥ 400"} — error page served at the same address`
+        : fr
+          ? "redirection"
+          : "redirect";
+    out.push(`| ${r.name} (\`${r.id}\`) | \`${r.requested}\` | \`${r.landed}\` | ${why} |`);
+  }
+  return out;
+}
+
 /** The Markdown grid: one row per criterion, one column per page. */
 export function renderPageGrid(result: AuditResult, pages: PageScope[], standard: StandardId = CORE, lang: Lang = "en"): string {
   const s = L[lang];

package/src/report.ts

@@ -11,7 +11,7 @@ import { guidelineTitle, scTitle } from "./wcag.js";
 import { prdUnits, partitionUnits } from "./prd.js";
 import { renderAuditorUnit, type AuditorCropLookup } from "./auditor.js";
 import { resolveMessage } from "./messages.js";
-import { attributePages, derivePages, pagesOf, renderPageGrid } from "./pages.js";
+import { attributePages, derivePages, pagesOf, renderPageGrid, renderRedirected } from "./pages.js";
 import { PAGES_DIR } from "./snapshot.js";
 import {
   type StandardId,
@@ -376,6 +376,10 @@ function render(
     const derived = derivePages(r, pageScope);
     out.push(`## 📄 ${s.perPageTitle}`, "", `> ${s.perPageNote}`, "");
     if (r.scope.sample?.transverse?.length) out.push(`> ${s.transverseNote(r.scope.sample.transverse.join(", "))}`, "");
+    // Pages the scan refused to record. Named here, in the section a reader uses to judge
+    // coverage, because the alternative is a report that is simply shorter than the sample
+    // the project declares — and a silently shorter deliverable reads as a complete one.
+    if (r.scope.redirected?.length) out.push(...renderRedirected(r.scope.redirected, lang), "");
     // Standard-aware per-finding label: a pack report (RGAA, …) speaks its own criteria
     // everywhere else, so this per-page line should too, rather than the raw WCAG SC id.
     // `loadPack` once, outside the finding loop — never per-finding.

package/src/scan-local.ts

@@ -614,24 +614,48 @@ export function clicksAllowed(storageState: string | undefined, interactClicks:
  *  failure mode an accessibility report has: a reader sees a page sheet, a screenshot and a
  *  conformance rate, and none of it describes the page named at the top.
  *
- *  Only the PATH is compared. A query string or fragment the app appends to its own route is
- *  the same page; a different path is a different page. Anything unparseable is treated as a
- *  match — this guard exists to catch a redirect, not to invent one. Exported for the
+ *  What counts as "the same page" is decided per component, because which component carries
+ *  the route is the app's choice, not ours:
+ *
+ *  - **path** always, trailing slash folded (`/aide/` ≡ `/aide`).
+ *  - **fragment** only when the REQUEST had one. That is the hash-router case, where the
+ *    fragment IS the route: asking for `#/admin` and landing on `#/login` is precisely the
+ *    bounce this guard exists to catch, and comparing paths alone (both empty) would miss it.
+ *    When the request carried no fragment, one the app appended to its own route is noise.
+ *  - **query** on the same rule, for `?page=admin` style routing.
+ *  - **host** always, since a same-path bounce to an IdP or a maintenance host is exactly the
+ *    misattribution above. Only the scheme, the port and a `www.` prefix may differ — those
+ *    are canonicalisation, not another page.
+ *
+ *  `requested` must be the RESOLVED navigation target, not the raw config value: a relative
+ *  `dist/index.html` becomes `file:///abs/dist/index.html` before `goto`, and comparing the
+ *  two forms would drop every relative file target. Anything unparseable is treated as a
+ *  match — this guard catches a redirect, it does not invent one. Exported for the
  *  browser-free policy test. */
 export function landedOnRequestedPage(requested: string, landed: string): boolean {
   if (!landed || requested === landed) return true;
-  const path = (u: string): string | undefined => {
+  const parse = (u: string): URL | undefined => {
     try {
-      // `file://` targets and relative paths never redirect; base makes them parseable.
-      return new URL(u, "http://x.invalid").pathname.replace(/\/+$/, "");
+      return new URL(u, "http://x.invalid");
     } catch {
       return undefined;
     }
   };
-  const a = path(requested);
-  const b = path(landed);
-  if (a === undefined || b === undefined) return true;
-  return a === b;
+  const a = parse(requested);
+  const b = parse(landed);
+  if (!a || !b) return true;
+
+  const path = (u: URL): string => u.pathname.replace(/\/+$/, "");
+  if (path(a) !== path(b)) return false;
+
+  // `www.` is canonicalisation; a different host is a different site.
+  const host = (u: URL): string => u.hostname.replace(/^www\./, "");
+  if (host(a) !== host(b)) return false;
+
+  // Only compared when the REQUEST carried one — see the doc block.
+  if (a.hash && a.hash !== b.hash) return false;
+  if (a.search && a.search !== b.search) return false;
+  return true;
 }
 
 async function probeLiveRegion(page: Any, lang: Lang, allowClicks: boolean): Promise<ProbeHit[]> {
@@ -716,13 +740,26 @@ async function runOnPage(
   const empty: ProbeHit[] = [];
   try {
     const url = isFile ? "file://" + resolve(target) : target;
-    await page.goto(url, { waitUntil: "load", timeout: 45000 });
+    const response = await page.goto(url, { waitUntil: "load", timeout: 45000 });
     // Let the client hydrate and any framework JS inject content/landmarks (SPA routes,
     // DSFR JS) before measuring — otherwise axe/probes see the pre-hydration DOM and
     // report false "no h1 / not in a landmark". Bounded networkidle + a short settle.
     await page.waitForLoadState("networkidle", { timeout: 8000 }).catch(() => {});
     await page.waitForTimeout(1200);
 
+    // The identity of what is ABOUT to be measured, captured here and nowhere later. The
+    // probes below click buttons, and a click that routes (history.pushState) leaves
+    // `page.url()` on another route — read at the end, it would accuse the server of a
+    // redirect that never happened and throw away a page audited at the right address.
+    // `file://` is normalised through the same resolve() the navigation used, so a relative
+    // target compares against its own resolved form rather than against a bare path.
+    const landedUrl = (page.url() as string) || url;
+    // A framework can answer 404/500 with a full, valid document AT THE SAME URL —
+    // Next's `notFound()` is exactly that. The path guard cannot see it, and recording it
+    // would file an error page under a real page's name. `status()` is the only signal that
+    // separates them. `file://` navigations report no status; absent is not a failure.
+    const httpStatus: number | undefined = typeof response?.status === "function" ? (response.status() as number) : undefined;
+
     // THE SNAPSHOT IS COLLECTED FIRST, on the PRISTINE page — before axe injects its source,
     // before any probe fills an input, resizes the viewport or bolts on the text-spacing
     // stylesheet. A snapshot is meant to be "the page as the browser built it"; collected
@@ -792,6 +829,8 @@ async function runOnPage(
     const liveRegion = opts.interact ? await probeLiveRegion(page, l, opts.allowClicks).catch(() => empty) : [];
     return {
       url: (page.url() as string) || target,
+      landedUrl,
+      ...(httpStatus !== undefined ? { httpStatus } : {}),
       violations,
       reflow,
       focusVisible: dialogFocus.length ? [...focusVisible, ...dialogFocus] : focusVisible,
@@ -923,12 +962,23 @@ export async function runSampleScanLocal(pages: SamplePage[], opts: LocalManyOpt
         snapshot: Boolean(opts.snapshotRoot),
       });
       // The declared identity is applied to whatever the browser had on screen, so a page
-      // that bounced elsewhere would be filed under the name of the page nobody looked at.
-      // Drop it instead, and say which one and where it went: a page reported missing is a
-      // bug in the sample or the seeded state, and both are fixable. A page reported under
-      // the wrong name is neither — it is a false conformance claim.
-      if (!landedOnRequestedPage(page.url, out.url)) {
-        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: out.url });
+      // that bounced elsewhere — or answered an error at the same address — would be filed
+      // under the name of the page nobody looked at. Drop it instead, and say which one and
+      // why: a page reported missing is a bug in the sample or the seeded state, and both
+      // are fixable. A page reported under the wrong name is neither — it is a false
+      // conformance claim.
+      //
+      // Compared against the RESOLVED target and the URL captured before the probes ran
+      // (`landedUrl`), never `out.url`: that one is read at the end of the run, so a probe
+      // click that routed would look exactly like a server redirect.
+      const requestedUrl = isFile ? "file://" + resolve(page.url) : page.url;
+      const landedUrl = out.landedUrl ?? out.url;
+      if (!landedOnRequestedPage(requestedUrl, landedUrl)) {
+        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: landedUrl, reason: "redirect" });
+        continue;
+      }
+      if (out.httpStatus !== undefined && out.httpStatus >= 400) {
+        redirected.push({ id: page.id, name: page.name, requested: page.url, landed: landedUrl, reason: "http-status", status: out.httpStatus });
         continue;
       }
       findings.push(...tagSampleFindings(toDynamicResult(out, page.url, lang, LOCAL_ENGINE).findings, page));
@@ -940,13 +990,20 @@ export async function runSampleScanLocal(pages: SamplePage[], opts: LocalManyOpt
   } finally {
     await browser.close();
   }
+  // The sample RECORDED is the sample actually scanned. Keeping a dropped page here would be
+  // worse than losing it: `pagesOf` re-adds every declared page to the grid with
+  // `basis: "attributed"` — the same basis as a page that was really visited — so the
+  // deliverable would positively claim we looked at a page we refused to record. The pages
+  // that were dropped travel in `redirected`, which says so out loud.
+  const dropped = new Set(redirected.map((r) => r.id));
+  const scanned = pages.filter((p) => !dropped.has(p.id));
   return {
     tool: "ultra11y",
     engine: LOCAL_ENGINE,
-    target: `${pages.length} page(s) (échantillon)`,
+    target: `${scanned.length}/${pages.length} page(s) (échantillon)`,
     date: today(),
     findings,
-    sample: sampleScope({ pages }),
+    sample: sampleScope({ pages: scanned }),
     testedScs: localTestedScs(interact),
     ...(snapshots.length ? { snapshots } : {}),
     ...(redirected.length ? { redirected } : {}),

package/src/scan.ts

@@ -171,6 +171,15 @@ export interface RunnerOutput {
   // base64). Absent when snapshotting was off or the collection failed — in which case the
   // page keeps its findings but earns no snapshot, and therefore no conforming-by-silence.
   snapshot?: CollectedPage & { screenshot?: string };
+  // WHERE the browser was when the measurement started — read right after goto + settle,
+  // before any probe could click something that routes. `url` above is read at the END and
+  // is the address the run finished on; only this one is the identity of what was audited.
+  // Local runtime only; absent from a Docker RunnerOutput.
+  landedUrl?: string;
+  // The navigation's HTTP status. A framework can answer 404/500 with a full document at the
+  // requested URL (Next's `notFound()`), which no URL comparison can detect. Absent for
+  // `file://` and for the Docker runner — absent is never treated as a failure.
+  httpStatus?: number;
 }
 
 /** The page id for a scanned target. A served URL slugifies from its PATH, which is the
@@ -541,6 +550,18 @@ export function mergeDynamic(audit: AuditResult, dynamic: DynamicResult, lang: L
   // Record the normative page sample the dynamic tier ran over (Task 5) — drives the
   // report's « Constats par page » section. Storage-state paths were already dropped upstream.
   if (dynamic.sample) merged.scope.sample = dynamic.sample;
+  // Pages the scan refused to record. They are NOT in `sample`, so without this the audit
+  // would simply be quietly shorter than the sample the repository declares — and a shorter
+  // deliverable that says nothing reads as a complete one. Unioned across merges by id, so a
+  // page recovered by a later scan stops being reported as missing.
+  if (dynamic.redirected?.length) {
+    const byId = new Map((merged.scope.redirected ?? []).map((r) => [r.id, r]));
+    for (const r of dynamic.redirected) byId.set(r.id, r);
+    const scannedIds = new Set((merged.scope.sample?.pages ?? []).map((p) => p.id));
+    const still = [...byId.values()].filter((r) => !scannedIds.has(r.id));
+    if (still.length) merged.scope.redirected = still;
+    else delete merged.scope.redirected;
+  }
   // Record which needs-rendering SCs this scan actually MEASURED (union across merges) —
   // the partial-audit advisory keys on this, so a Docker run (reflow only) never silently
   // suppresses the banner for the local-only probes it did not run.

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "4.5.2";
+export const VERSION = "5.0.1";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,
@@ -57,6 +57,12 @@ export interface ScanRedirect {
   name: string;
   requested: string;
   landed: string;
+  // WHY it was refused. `redirect`: the browser ended up at another address. `http-status`:
+  // it stayed at the requested one but the server answered an error — a framework's own
+  // not-found page is a full, valid document at the right URL, which no address comparison
+  // can tell from the real thing.
+  reason?: "redirect" | "http-status";
+  status?: number;
 }
 
 // ---- WCAG 2.2 canonical core (src/data/wcag.json, produced by scripts/build-standards.mjs)
@@ -478,6 +484,12 @@ export interface AuditResult {
     // merges. Drives the partial-audit advisory (src/report.ts untestedNeedsRendering) so
     // the banner never claims a probe ran when it did not. Optional/additive.
     scan?: { testedScs: string[] };
+    // Sample pages a `scan --sample` REFUSED to record, and why. They are deliberately absent
+    // from `sample` above — a page kept there would be re-added to the per-page grid with the
+    // same basis as one really visited, so the deliverable would claim a page nobody looked
+    // at. Carried here instead so the report can say what is missing rather than hide it.
+    // Optional/additive — absent when every page was reached.
+    redirected?: ScanRedirect[];
   };
   guidelines: GuidelineTally[];
   criteria: CriterionResult[];