{
  "schemaVersion": 1,
  "type": "resource",
  "id": "tastefile",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "unresolved",
    "modes": [
      "http",
      "browser",
      "source-review"
    ],
    "summary": "Both candidate sites work as public pages, but their relationship to @tastefile_ai remains unconfirmed. The built-in example attempted a backend generation request that the guard blocked.",
    "reportUrl": "/design-evaluations/resource-tastefile.json",
    "identity": {
      "target": "Candidate only; attribution unresolved: https://usetastefile.com/",
      "version": "Unversioned public page observed 2026-10-19",
      "integrity": "SHA-256 688400241e741966e626d8e664814478fc256b2069d93ef5047b34cb85f02d36 of one initial HTML response (234016 bytes). This does not fingerprint the entire application or its dependencies."
    },
    "environment": [
      "Windows; Chrome 155.0.8059.82 headless via Playwright, fresh isolated contexts with a 1365 × 900 viewport.",
      "Reduced motion requested. GET/HEAD requests allowed; other methods and WebSocket connections blocked.",
      "No owner browser profile, account, credentials, purchase, upload, private fixture or service write."
    ],
    "tests": [
      {
        "name": "Candidate identities",
        "mode": "browser",
        "method": "Open usetastefile.com and tastefile.ai in separate fresh contexts.",
        "result": "pass",
        "observation": "Both returned HTTP 200 and described distinct workflows."
      },
      {
        "name": "Built-in example",
        "mode": "browser",
        "method": "Click Try an example without entering user material; keep non-GET traffic blocked.",
        "result": "pass",
        "observation": "The editor populated 783 CSS characters and showed a preview labeled design.md with 160 lines."
      },
      {
        "name": "Generation request boundary",
        "mode": "browser",
        "method": "Observe requests during the built-in sample.",
        "result": "blocked",
        "observation": "POST /api/generate was attempted and blocked before transmission. The displayed preview does not establish successful backend generation."
      },
      {
        "name": "Publisher attribution",
        "mode": "source-review",
        "method": "Compare public identities and search the exact handle without using an account.",
        "result": "blocked",
        "observation": "No primary association between @tastefile_ai and either candidate domain was established."
      }
    ],
    "security": {
      "scope": "Both public candidate pages and the built-in sample's attempted network behavior.",
      "findings": [
        {
          "level": "caution",
          "basis": "observed",
          "title": "Example action attempts a generation request",
          "detail": "Even the built-in sample initiated POST /api/generate at usetastefile.com. The guard prevented that request. A preview still appeared, so its presence cannot prove that remote generation succeeded or that processing is entirely local."
        },
        {
          "level": "caution",
          "basis": "documented",
          "title": "The other candidate has a different data surface",
          "detail": "tastefile.ai publicly frames its workflow around coding-agent history and an installation command. That is materially different from pasting Figma CSS; no installer or history access was tested."
        }
      ],
      "limits": [
        "Passive public-page observations and the stated bounded sample only; no exploitation, authenticated authorization, backend, retention or comprehensive dependency audit.",
        "Request blocking changes application behavior; no secure/safe certification is implied."
      ]
    },
    "practicalCaveats": [
      "Resolve the publisher identity before recommending an installation or submitting design material.",
      "Treat the built-in output as a demonstration until generation and data handling are verified."
    ],
    "limits": [
      "No custom CSS, website URL, file, agent history, credential or installation was submitted.",
      "Candidate functionality does not resolve the original identity ambiguity."
    ],
    "sources": [
      {
        "label": "Candidate CSS/design.md product; attribution unconfirmed",
        "url": "https://usetastefile.com/"
      },
      {
        "label": "Different Tastefile workflow",
        "url": "https://tastefile.ai/"
      }
    ]
  }
}