{
  "schemaVersion": 1,
  "type": "resource",
  "id": "colorion-animated-buttons",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "checked",
    "modes": [
      "http",
      "browser",
      "local-fixture"
    ],
    "summary": "The first Fill Up CSS sample was disclosed and rendered locally. Its fill panel moved on hover, and the authored native button retained keyboard activation and a visible focus outline.",
    "reportUrl": "/design-evaluations/resource-colorion-animated-buttons.json",
    "identity": {
      "target": "colorion-animated-buttons first public CSS sample",
      "version": "unversioned generated sample",
      "integrity": "sha256:dd260fbe774b60fa2c079769e7fc349d4be089eb48e941759e9357baa664a592"
    },
    "environment": [
      "Chromium 155.0.8059.82 on Windows; fresh temporary profile and fresh account-free contexts.",
      "Public HTTPS GET/HEAD requests only; telemetry/auth routes and WebSockets blocked. No account storage or credential environment variables.",
      "Synthetic local inputs only. Package/skill source inspected before execution; no install lifecycle scripts run.",
      "Local package/CSS browser fixtures block real network. Variate additionally uses Node filesystem permissions and a no-network preload."
    ],
    "tests": [
      {
        "name": "Public document and DOM",
        "mode": "browser",
        "method": "Fresh Chromium GET, then inspect rendered controls after hydration delay",
        "result": "pass",
        "observation": "HTTP 200; 70 captured button labels; 0 inputs; 0 canvases."
      },
      {
        "name": "CSS sample generation",
        "mode": "browser",
        "method": "Open first CSS disclosure and inspect code or captured copy output; system clipboard is not written",
        "result": "pass",
        "observation": "Captured 1247 UTF-8 bytes; SHA256 dd260fbe774b60fa2c079769e7fc349d4be089eb48e941759e9357baa664a592. This verifies disclosed/generated output, not OS clipboard permission."
      },
      {
        "name": "Fill-panel hover response",
        "mode": "local-fixture",
        "method": "Read pseudo-element transform before and after pointer hover",
        "result": "pass",
        "observation": "{\"before\": \"matrix(1, 0, 0, 1, 0, 41)\", \"after\": \"matrix(1, 0, 0, 1, 0, 0)\"}"
      },
      {
        "name": "Native keyboard activation",
        "mode": "local-fixture",
        "method": "Tab to authored button and press Enter; inspect local click counter",
        "result": "pass",
        "observation": "{\"focused\": true, \"clicks\": 1, \"outlineStyle\": \"auto\", \"outlineWidth\": \"3px\"}"
      },
      {
        "name": "Visible focus boundary",
        "mode": "local-fixture",
        "method": "Inspect computed keyboard focus outline",
        "result": "pass",
        "observation": "{\"focused\": true, \"clicks\": 1, \"outlineStyle\": \"auto\", \"outlineWidth\": \"3px\"}"
      }
    ],
    "security": {
      "scope": "Passive inspection of the public response headers, requested hosts and the named browser sample. Also inspected pinned source and the specified synthetic fixture outputs. No active exploitation, authenticated permissions test or complete security audit.",
      "findings": [
        {
          "level": "caution",
          "basis": "observed",
          "title": "The tested sample was self-contained CSS",
          "detail": "The inspected sample contained no remote imports or script, and the isolated render made no outbound requests. That finding covers this hashed sample only."
        }
      ],
      "limits": [
        "No authenticated workspace, private content, production backend permissions or data-retention verification.",
        "One sample only. Clipboard output was captured in memory; no operating-system clipboard permission, full collection or contrast audit."
      ]
    },
    "practicalCaveats": [
      "Keep semantic button markup and test your own colors, disabled state and touch behavior; the sample’s hover treatment alone is not a complete button contract.",
      "Pin and recheck the selected version or sample before adoption; the observations apply only to the scope and date shown."
    ],
    "limits": [
      "One sample only. Clipboard output was captured in memory; no operating-system clipboard permission, full collection or contrast audit.",
      "Fresh-browser restrictions can affect external assets and hydration. Initial failed selectors and limited probes remain in the evidence; they are not blanket product failures."
    ],
    "sources": [
      {
        "label": "Primary public resource",
        "url": "https://animatedbuttons.colorion.co/"
      }
    ]
  }
}