{
  "schemaVersion": 1,
  "type": "resource",
  "id": "appshot",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "limited",
    "modes": [
      "http",
      "browser"
    ],
    "summary": "The YoungPhoto screenshot detail worked, but the observed Functional category link returned a genuine 404 page. App-detail browsing is usable; that category path was broken in this snapshot.",
    "reportUrl": "/design-evaluations/resource-appshot.json",
    "identity": {
      "target": "https://www.appshot.gallery/",
      "version": "Unversioned public page observed on 2026-10-19",
      "integrity": "sha256:631f2f945595eedfb31b43aed36aefe7e2ddc4f873c22233434b8646305e70e6 — initial HTTP 200 response body only; not whole-application integrity."
    },
    "environment": [
      "Chromium 155.0.8059.82, 1365×900 desktop viewport.",
      "Separate fresh, ephemeral browser contexts for entry and interaction; no owner profile, credentials or stored session.",
      "Only GET/HEAD network requests allowed; forms, downloads, WebSockets and service workers blocked. Some analytics endpoints also blocked.",
      "Short bounded waits; no mobile, assistive-technology, cross-browser or performance certification."
    ],
    "tests": [
      {
        "name": "Public HTTP response",
        "mode": "http",
        "method": "Anonymous GET with redirects followed, response-body SHA-256 and selected security-header summaries; no cookies retained.",
        "result": "pass",
        "observation": "The standalone client received 200 at https://www.appshot.gallery/. This establishes response delivery only."
      },
      {
        "name": "Fresh browser entry",
        "mode": "browser",
        "method": "Open the catalog URL in a new anonymous Chromium context with read-only network guards and no inherited profile.",
        "result": "pass",
        "observation": "The document returned 200 and identified itself as “APPSHOT.GALLERY: App Store Screenshot Inspiration for ASO & Mobile UI”. 118 image elements were present; no account was used."
      },
      {
        "name": "Observed public sample or navigation",
        "mode": "browser",
        "method": "Follow the observed YoungPhoto - Aesthetic Camera Photo & Video 5.0 $1.99 link to https://www.appshot.gallery/app/youngphoto-aesthetic-camera.",
        "result": "pass",
        "observation": "The destination returned 200; title: “YoungPhoto - Aesthetic Camera | - ASO Screenshot Inspiration”. 79 page image elements had decoded during the bounded wait. This count is not a catalog size or performance benchmark."
      },
      {
        "name": "Functional category link",
        "mode": "browser",
        "method": "Follow the Functional category href observed on the homepage.",
        "result": "fail",
        "observation": "https://www.appshot.gallery/keyword/functional returned HTTP 404 and the site’s 404 page. The separate YoungPhoto detail check passed."
      }
    ],
    "security": {
      "scope": "Passive inspection of the initial public document’s response headers and anonymous browser request hostnames, with read-only guards. No source exploitation, account access, dependency audit or private data.",
      "findings": [
        {
          "level": "info",
          "basis": "observed",
          "title": "Public response protections",
          "detail": "The initial browser page used HTTPS. Its response included HSTS. An enforcing CSP response header declared frame-ancestors. X-Frame-Options was SAMEORIGIN. This records the sampled response only; meta policies, backend authorization and exploit resistance were not assessed."
        },
        {
          "level": "info",
          "basis": "observed",
          "title": "Request surface in the anonymous visit",
          "detail": "Appshot Gallery attempted requests to 9 additional hosts, including cdn.prod.website-files.com, d3e54v103j8qbb.cloudfront.net, ajax.googleapis.com, plausible.io. Host counts include requests stopped by the test guard; they do not establish what data a service retained."
        },
        {
          "level": "caution",
          "basis": "advice",
          "title": "Before using this reference",
          "detail": "Use the working detail route while checking category links before relying on them. These are App Store promotional screenshots, not an in-app workflow test."
        }
      ],
      "limits": [
        "No authentication, authorization, tenant separation, data retention or backend handling was tested.",
        "Header presence or absence is a sampled configuration observation, not a security certification or an exploit finding.",
        "1 blocked-request records were retained across entry and interaction checks. Guards may alter normal page behavior; the logs do not represent unrestricted traffic."
      ]
    },
    "practicalCaveats": [
      "Use the working detail route while checking category links before relying on them. These are App Store promotional screenshots, not an in-app workflow test.",
      "Store screenshots can be promotional compositions rather than actual in-app states."
    ],
    "limits": [
      "No app was installed or purchased; other category paths, App Store requirements and screenshot reuse permissions were not validated.",
      "Results describe the observed public pages and a bounded action, not the entire product or the referenced designs."
    ],
    "sources": [
      {
        "label": "Public resource entry",
        "url": "https://www.appshot.gallery/"
      },
      {
        "label": "Observed sample or category",
        "url": "https://www.appshot.gallery/app/youngphoto-aesthetic-camera"
      }
    ]
  }
}