{
  "schemaVersion": 1,
  "type": "resource",
  "id": "wellmade",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "checked",
    "modes": [
      "http",
      "browser",
      "source-review"
    ],
    "summary": "The UI category opened with visual examples in a fresh browser. Public browsing works in this sample; account and submission features remain untested.",
    "reportUrl": "/design-evaluations/resource-wellmade.json",
    "identity": {
      "target": "https://wellmade.fyi/",
      "version": "Unversioned public page observed 2026-10-19",
      "integrity": "SHA-256 6cdd51d14dee65c93c1c855766997bb2eab6e69d8ab38151c576040fed3d4a12 of one initial HTML response (10423 bytes). This does not fingerprint the entire application or its dependencies."
    },
    "environment": [
      "Windows; Chrome 155.0.8059.82 headless via Playwright, fresh isolated contexts with a 1365 × 900 viewport.",
      "Reduced motion requested. GET/HEAD requests allowed; other methods and WebSocket connections blocked.",
      "No owner browser profile, account, credentials, purchase, upload, private fixture or service write."
    ],
    "tests": [
      {
        "name": "Category navigation",
        "mode": "browser",
        "method": "Select UI from the public gallery.",
        "result": "pass",
        "observation": "The browser reached /t/ui with the UI · Wellmade title; the sampled DOM contained 82 images and 14 videos."
      },
      {
        "name": "Save and authentication",
        "mode": "browser",
        "method": "Use save, submission or X sign-in controls.",
        "result": "not-run",
        "observation": "These account-related controls were visible but not activated."
      }
    ],
    "security": {
      "scope": "One public category path, response headers and passive request destinations.",
      "findings": [
        {
          "level": "info",
          "basis": "observed",
          "title": "Protective headers on sampled responses",
          "detail": "The response included HSTS, frame-ancestors none, X-Frame-Options DENY and nosniff. These are useful response-level controls, not evidence about account authorization or stored data."
        },
        {
          "level": "caution",
          "basis": "advice",
          "title": "Check the source before reuse",
          "detail": "Follow the specific work back to its creator and establish permission before reusing visuals or branding."
        }
      ],
      "limits": [
        "Passive public-page observations and the stated bounded sample only; no exploitation, authenticated authorization, backend, retention or comprehensive dependency audit.",
        "Request blocking changes application behavior; no secure/safe certification is implied."
      ]
    },
    "practicalCaveats": [
      "Images and videos in a gallery do not show keyboard behavior or small-screen layout of the original product.",
      "A public browse pass does not cover saving or publishing work through an account."
    ],
    "limits": [
      "One category was sampled; no sign-in, save, submission or asset download.",
      "No full media, accessibility, permission or backend audit."
    ],
    "sources": [
      {
        "label": "Public creative-work gallery",
        "url": "https://wellmade.fyi/"
      },
      {
        "label": "Sampled UI category",
        "url": "https://wellmade.fyi/t/ui"
      }
    ]
  }
}