DISCUSS A PARTNERSHIP
SERVICES↓
01 Shopify 02 WordPress 03 SEO & Search 04 Collaboration / White-Label 05 AI Systems
WORK SOLUTIONS RESOURCES ABOUT
DISCUSS A PARTNERSHIP
ENGINEERING SPECIFICATION • RELEASE GOVERNANCE

The 42-Point Pre-Flight QA Protocol:
Deterministic Verification for Agency Web Deployments.

A rigorous, repeatable quality assurance checklist engineered for digital agency founders, technical directors, delivery heads, and QA specialists. Validating code architecture, responsive parity, Core Web Vitals, accessibility, integrations, SEO, and security across WordPress and Shopify builds prior to staging and production sign-off.

PROTOCOL VERSION: 3.4
42 DETERMINISTIC GATES
7 OPERATIONAL CATEGORIES
RUNTIME: 45–90 MIN / RELEASE
PLATFORMS: WORDPRESS & SHOPIFY
CATEGORY 01 // ARCHITECTURE & GIT GOVERNANCE

Code Architecture & Version Control

Enforcing clean Git branching protocols, W3C standards, component modularity, and static code linting before pull requests merge into staging environments.

6 CHECKS (01–06)
CHECK 01 Git Flow / All Builds

Git Branch Isolation & Clean History

Verify feature branch naming conventions, branch isolation from main, and clean rebase/squash histories prior to pull request approval.

✓ Deterministic Pass Criteria
Branch created off current `staging` or `main`; zero merge conflict markers; commit authorship uses verified agency-domain email aliases under bilateral NDA.
Operational Context: Prevents staging collisions and keeps agency client code attribution 100% white-label. See our Git Flow staging isolation guide.
CHECK 02 HTML5 / DOM Semantics

W3C HTML5 Semantic Markup Validation

Validate template source code through the official W3C markup validator to catch unclosed elements, invalid tag nestings, and deprecated markup.

✓ Deterministic Pass Criteria
Zero fatal W3C syntax errors; proper document outline using `<header>`, `<nav>`, `<main>`, `<article>`, `<section>`, and `<footer>` landmarks.
Operational Context: Ensures stable document parsing across web crawlers and eliminates layout shifts caused by browser auto-closing tag quirks.
CHECK 03 CSS / Stylesheets

Modular CSS Architecture & Specificity Scope

Inspect stylesheet organization for component-level scoping (BEM, CSS Modules, or scoped Gutenberg/Liquid blocks) and purge unreferenced declarations.

✓ Deterministic Pass Criteria
Zero uncontrolled `!important` escalations; no unintended global typography or layout bleed outside the designated module scope.
Operational Context: Protects agency retainers against regression bugs when clients modify global theme options or block variations.
CHECK 04 JavaScript / Console

Zero Console Runtime Errors & Warnings

Inspect browser DevTools Console during initial page load, deep scrolling, drawer toggling, modal opening, and form input interactions.

✓ Deterministic Pass Criteria
Zero `Uncaught TypeError`, zero unhandled promise rejections, zero missing asset 404 errors recorded in the browser console.
Operational Context: Uncaught script errors break subsequent event listeners, frequently causing silent failure of analytics and cart interactions.
CHECK 05 Linters / Static Analysis

Code Linting & Platform Standards Compliance

Execute static code analysis across all custom templates: PHP_CodeSniffer for WordPress Coding Standards (WPCS) or Shopify Theme Check for Liquid.

✓ Deterministic Pass Criteria
Zero fatal linting errors; clean pass on security rules (e.g., input escaping, Liquid asset filtering, proper variable sanitization).
Operational Context: Ensures long-term maintainability when client codebases transition between different agency developers.
CHECK 06 Templates / Environment

Template Modularity & Environment Portability

Verify that all asset paths, API endpoints, and navigation links use dynamic environment helpers rather than hardcoded domain strings.

✓ Deterministic Pass Criteria
Zero hardcoded staging or local hostnames (`localhost`, `staging.client.com`); modular template partials adhere strictly to DRY architecture.
Operational Context: Prevents broken assets, failed API calls, or staging links from leaking into production after DNS cutover.
CATEGORY 02 // MULTI-VIEWPORT & ENGINE PARITY

Responsive Viewports & Cross-Browser Parity

Physical device validation across mobile, tablet, and desktop breakpoints combined with rendering parity across Chromium, WebKit, and Gecko rendering engines.

6 CHECKS (07–12)
CHECK 07 Mobile / 320px–414px

Mobile Viewport Layout & Touch Target Fidelity

Test compact screen viewports down to 320px width (iPhone SE, Galaxy A series) for horizontal scroll leakage and interactive button hitboxes.

✓ Deterministic Pass Criteria
Zero unintended horizontal scrollbars (`overflow-x: hidden` fallback absent); all clickable buttons and tap targets meet minimum 48px × 48px footprint.
Operational Context: Over 60% of agency ecommerce traffic originates on mobile; accidental horizontal scrolling causes immediate merchant customer drop-off.
CHECK 08 Tablet / 768px–1024px

Tablet Portrait & Landscape Breakpoint Behavior

Evaluate intermediary screen dimensions in portrait (768px) and landscape (1024px), verifying navigation transitions and column restructuring.

✓ Deterministic Pass Criteria
Navigation drawer switches cleanly without overlapping logo or search; multi-column product grids stack logically without clipped card text.
Operational Context: Tablet viewports are the most frequently overlooked agency QA blind spot, often resulting in awkward menu wrapping.
CHECK 09 Desktop / 1280px–1920px+

High-Resolution Desktop & Ultra-Wide Scaling

Verify layout stability on standard desktop displays (1440px) and ultra-wide retina monitors (1920px to 2560px+), inspecting container max-widths.

✓ Deterministic Pass Criteria
Max-width constraints prevent over-stretched text lines (> 85 characters); hero graphics and background banners scale without pixelation.
Operational Context: Agency clients and executive decision-makers review staging deliveries on large Apple Studio Displays and 4K screens.
CHECK 10 Chromium / Chrome & Edge

Chromium Engine Compatibility Verification

Validate CSS Grid calculations, sub-pixel font rendering, and hardware-accelerated animations across Google Chrome and Microsoft Edge.

✓ Deterministic Pass Criteria
Pixel-accurate layout fidelity matching design prototypes; fluid 60fps CSS transitions without jank or scroll hitching.
Operational Context: Represents the dominant global browser market share and the baseline for Google Search rendering bots.
CHECK 11 WebKit / Safari Desktop & iOS

WebKit Engine Parity & iOS Safari Quirk Checks

Test on real iOS mobile devices and macOS Safari, inspecting for WebKit-specific quirks: auto-zoom on inputs, flex child min-height bugs, and date pickers.

✓ Deterministic Pass Criteria
Input text font-size $\ge$ 16px preventing mobile auto-zoom; zero flexbox child collapse; native iOS date/select pickers render cleanly.
Operational Context: iOS Safari drives the highest purchasing conversion in mobile ecommerce but exhibits distinct CSS rendering behaviors.
CHECK 12 Gecko / Mozilla Firefox

Gecko Engine Parity & Firefox Visual Validation

Inspect layout rendering, custom scrollbar styling, and SVG clipping paths inside Mozilla Firefox on macOS and Windows.

✓ Deterministic Pass Criteria
SVG icons render crisply without clipping; CSS scrollbar styling fallbacks active; form select dropdowns display custom arrow styling.
Operational Context: Guarantees comprehensive cross-browser peace of mind for B2B and technical audiences.
CATEGORY 03 // CORE WEB VITALS & SPEED

Core Web Vitals & Performance

Empirical benchmarking of loading speed, layout stability, interactive responsiveness, script deferral, and server caching to safeguard search rankings.

6 CHECKS (13–18)
CHECK 13 LCP / Loading Velocity

Largest Contentful Paint (LCP) Benchmark (≤ 2.5s)

Audit the Largest Contentful Paint element (hero image, heading, or video poster) under simulated 4G mobile throttling in Lighthouse CI.

✓ Deterministic Pass Criteria
Mobile LCP $\le$ 2.5s; primary hero graphic converted to WebP/AVIF, preloaded in `<head>`, and configured with `fetchpriority="high"`.
Operational Context: Direct Google search ranking signal and the primary determinant of perceived storefront loading speed.
CHECK 14 CLS / Visual Stability

Cumulative Layout Shift (CLS) Elimination (≤ 0.05)

Verify that page elements do not unexpectedly shift during asset downloads, web font swapping, or dynamic widget injections.

✓ Deterministic Pass Criteria
Mobile and desktop CLS $\le$ 0.05 (Google threshold 0.1); 100% of images, videos, and dynamic iframes declare explicit `width` and `height` or `aspect-ratio`.
Operational Context: Layout shifts cause users to mis-click buttons, triggering accidental link clicks and cart abandonment.
CHECK 15 INP / Interactivity

Interaction to Next Paint (INP) Minimization (≤ 200ms)

Profile main-thread latency during user interactions: mobile menu toggling, product variant selection, and accordion expansions.

✓ Deterministic Pass Criteria
INP under 200ms on simulated mid-tier mobile hardware; zero long tasks (> 50ms) blocking the main thread during interaction handlers.
Operational Context: Google's 2024+ Core Web Vital replacing FID; poor INP results in perceptible UI freezing.
CHECK 16 Scripts / Deferral

JavaScript Asset Deferral & Code-Splitting

Inspect script tags in the DOM to ensure non-critical vendor scripts and third-party trackers do not block initial page rendering.

✓ Deterministic Pass Criteria
All non-critical scripts execute with `defer` or `async`; route-specific components dynamically imported; zero synchronous external JS in `<head>`.
Operational Context: Un-deferred scripts delay first paint by hundreds of milliseconds, depressing conversion rates.
CHECK 17 Fonts / Web Typography

Web Font Delivery & FOUT/FOIT Prevention

Evaluate font loading mechanisms, verifying self-hosted WOFF2 files or preconnected font providers with appropriate font-display swap rules.

✓ Deterministic Pass Criteria
`font-display: swap` applied to all `@font-face` rules; primary font files preloaded in `<head>`; zero blank text flashing during slow network loads.
Operational Context: Unoptimized custom fonts are one of the most common causes of visual builder performance drag on WordPress and Shopify.
CHECK 18 Caching / Compression

Browser Caching, Compression & CDN Delivery

Inspect HTTP response headers for static assets using `curl -I` to verify cache lifetimes and edge compression negotiation.

✓ Deterministic Pass Criteria
`Cache-Control: public, max-age=31536000, immutable` on hashed static assets; active Gzip or Brotli content encoding verified on text payloads.
Operational Context: Offloads repeat visits to local browser cache, dropping repeat-view load times below 500ms.
CATEGORY 04 // ACCESSIBILITY & INCLUSIVITY

Accessibility & WCAG 2.1 AA Standards

Testing keyboard traversals, color contrast compliance, screen reader hierarchies, form label associations, and ARIA state announcements for legal compliance.

6 CHECKS (19–24)
CHECK 19 Contrast / WCAG AA

Color Contrast Compliance (≥ 4.5:1 Ratio)

Audit all typography, button text, link states, and placeholder values against background colors using automated WCAG AA contrast checkers.

✓ Deterministic Pass Criteria
Minimum contrast ratio of 4.5:1 for standard body text; 3.0:1 for large text (≥ 24px or 18.5px bold) and active UI borders.
Operational Context: Protects agency clients from ADA / accessibility demand letters while improving outdoor mobile readability.
CHECK 20 Keyboard / Focus States

Full Keyboard Traversal & Visible Focus Indicators

Navigate the entire website using only the keyboard (`Tab`, `Shift+Tab`, `Enter`, `Spacebar`, arrow keys) without mouse interaction.

✓ Deterministic Pass Criteria
100% of interactive elements focusable in logical sequence; clear visible focus rings on all active elements (`outline: none` prohibited without replacement).
Operational Context: Critical for power users, assistive technology users, and passing enterprise procurement audits.
CHECK 21 Navigation / Bypass

Skip-to-Content Navigation Mechanism

Verify that a functional skip link is present as the very first focusable element in the DOM upon pressing the Tab key on page load.

✓ Deterministic Pass Criteria
Hidden skip link becomes visible on keyboard focus, links directly to `#main-content`, and successfully shifts focus past header navigation.
Operational Context: Core requirement of WCAG 2.1 Success Criterion 2.4.1 (Bypass Blocks).
CHECK 22 Forms / Field Labels

Accessible Form Control Association & Error Links

Inspect all form fields for explicit label associations, accessible descriptions, and proper programmatic error announcements.

✓ Deterministic Pass Criteria
Every input possesses a matching `<label for="id">` or `aria-label`; error messages programmatically linked via `aria-describedby` and `aria-invalid`.
Operational Context: Placeholder text is not an accessible label; missing labels prevent screen reader users from submitting leads or orders.
CHECK 23 Images / Alt Attributes

Image Alternative Text & Decorative Element Isolation

Scan all `<img>` tags in template partials, dynamic post feeds, and product galleries to ensure proper descriptive or decorative alt handling.

✓ Deterministic Pass Criteria
Informative imagery carries contextual descriptive alt text; decorative graphics/icons declare empty `alt=""` and `aria-hidden="true"`.
Operational Context: Eliminates keyword stuffing in image tags while providing screen reader users with necessary visual context.
CHECK 24 Screen Readers / ARIA

Heading Hierarchy Integrity & Dynamic ARIA Toggles

Review heading structures (H1 through H6) for skipped levels and verify interactive toggles (accordions, drawers) with VoiceOver or NVDA.

✓ Deterministic Pass Criteria
Exactly one `<h1>` per page; zero skipped heading depths (e.g., H2 to H4); `aria-expanded="true/false"` updates dynamically on accordion buttons.
Operational Context: Screen reader users navigate pages by heading levels; broken heading orders destroy comprehension.
CATEGORY 05 // CONVERSIONS & TRANSACTIONS

Forms, Checkout & Third-Party Integrations

End-to-end operational testing of lead capture forms, webhook notifications, cart persistence, payment gateway sandboxes, multi-currency routing, and tag consent.

6 CHECKS (25–30)
CHECK 25 Forms / Validation

Form Submission Processing & AJAX Feedback States

Submit test entries across all contact, quote request, newsletter, and audit forms, validating client-side feedback and server-side responses.

✓ Deterministic Pass Criteria
Unambiguous success message rendered without page crash; invalid email/phone patterns trigger localized inline error states; form state resets.
Operational Context: Broken form submission feedback causes users to abandon inquiries or repeatedly click submit, generating duplicate leads.
CHECK 26 Email / Webhooks

Notification Routing, Webhook Dispatch & Anti-Spam

Verify automated transactional email delivery to agency/client inboxes and validate webhook payloads sent to CRM or email marketing platforms.

✓ Deterministic Pass Criteria
Notification email received in inbox (SPF/DKIM/DMARC pass); webhook payload verified in CRM endpoint; honeypot/CAPTCHA silently blocks bot submissions.
Operational Context: Missing lead notification emails are the #1 most embarrassing agency delivery failure reported by clients.
CHECK 27 Ecommerce / Cart State

Ecommerce Cart Drawer State & AJAX Persistence

Test adding simple, variable, and subscription products to the cart drawer, altering quantities, removing line items, and refreshing sessions.

✓ Deterministic Pass Criteria
Cart subtotal, line item pricing, and item count badge recalculate instantly via AJAX; cart state persists across tabs and browser reloads.
Operational Context: Cart drawer desynchronization causes pricing confusion, discount calculation bugs, and merchant customer frustration.
CHECK 28 Checkout / Payments

End-to-End Checkout Funnel & Payment Verification

Execute complete test orders using sandbox payment gateways (Stripe, PayPal, Apple Pay, Shopify Payments), testing tax and shipping calculations.

✓ Deterministic Pass Criteria
Successful transaction completion; accurate tax/shipping calculation; valid order confirmation page rendered; automated customer receipt dispatched.
Operational Context: Directly safeguards merchant revenue. See our white-label Shopify engineering standards.
CHECK 29 i18n / Currencies

Multi-Currency Routing & Internationalization Parity

Test multi-currency switchers and localized subdirectories (Shopify Markets, WooCommerce Multilingual) across simulated geographic locations.

✓ Deterministic Pass Criteria
Selected currency symbol and price conversion persist through cart and checkout; localized language translations render without untranslated string fallbacks.
Operational Context: Currency mismatch during final checkout steps causes immediate international buyer abandonment.
CHECK 30 GTM / Consent Privacy

Third-Party Tag Containment & Consent Management

Verify Google Tag Manager (GTM) triggers, tracking pixel execution, and cookie banner consent mode compliance (GDPR, UK DPA, CCPA).

✓ Deterministic Pass Criteria
Zero analytical or advertising cookies stored prior to explicit user banner consent; GTM container fires tags strictly according to consent state.
Operational Context: Essential for international agency governance and preventing third-party scripts from hijacking page performance.
CATEGORY 06 // SEARCH ENGINE OPTIMIZATION

Technical SEO, Schemas & Metadata

Auditing title uniqueness, canonical precision, robots directives, JSON-LD Schema.org graphs, social card rendering, and sitemap integrity.

6 CHECKS (31–36)
CHECK 31 Titles & Meta / Crawl

Page Title & Meta Description Uniqueness

Run automated crawler audit across all published staging URLs to verify title tags, meta descriptions, and header hierarchy uniqueness.

✓ Deterministic Pass Criteria
100% of public URLs possess unique titles (≤ 60 chars) and meta descriptions (≤ 160 chars); zero duplicate metadata across different URLs.
Operational Context: Prevents internal search cannibalization. Read our master recommendations in agency search architecture.
CHECK 32 Canonicals / URLs

Self-Referential Canonical URL Integrity

Verify `<link rel="canonical">` tags across all indexable routes, testing uppercase, lowercase, trailing slash, and clean URL variations.

✓ Deterministic Pass Criteria
Every indexable page features an absolute self-referential canonical tag matching the site's standardized URL convention with zero circular redirects.
Operational Context: Instructs Google to index only the intended primary URL, preventing duplicate parameter indexing.
CHECK 33 Robots / Indexation

Robots Meta Directives & Staging Protection

Inspect `` tags and `robots.txt` configuration across staging and production environments.

✓ Deterministic Pass Criteria
Staging environment secured behind `noindex, nofollow` or HTTP basic auth; production environment verified as `index, follow` on public pages.
Operational Context: Prevents search engines from indexing pre-launch staging copies, avoiding duplicate content penalties.
CHECK 34 JSON-LD / Schema.org

JSON-LD Structured Data Entity Graph Validation

Test all structured data blocks using the Schema.org Validator and Google Rich Results Test for syntax compliance and entity graph interconnectivity.

✓ Deterministic Pass Criteria
Valid `@graph` implementation (`Organization`, `WebPage`, `BreadcrumbList`, `FAQPage`); zero syntax errors; zero fabricated review/rating badges.
Operational Context: Core requirement for entity extraction by Google and modern AI answer engines (AEO/GEO).
CHECK 35 Open Graph / Social

Open Graph & Social Card Preview Verification

Validate `og:title`, `og:description`, `og:image`, and `twitter:card` tags across LinkedIn Post Inspector, X Card Validator, and Facebook Sharing Debugger.

✓ Deterministic Pass Criteria
Social images resolve with absolute HTTPS URLs and meet minimum 1200 × 630px dimensions; cards render clean previews without cropped text.
Operational Context: Ensures links shared by client teams and customers display professional, branded preview snippets.
CHECK 36 XML Sitemap / Health

XML Sitemap Architecture & Indexation Hygiene

Audit `sitemap.xml` entries against the live site architecture, confirming that every listed URL returns a clean HTTP 200 OK status.

✓ Deterministic Pass Criteria
100% of sitemap URLs return 200 OK; zero 301 redirects, zero 404s, zero `noindex` pages, zero duplicate URLs, zero retired slugs included.
Operational Context: Clean sitemaps maximize Google crawl budget efficiency on growing corporate and ecommerce domains.
CATEGORY 07 // INFRASTRUCTURE & CUTOVER

Security Hygiene, Secrets & Cutover

Enforcing HTTPS encryption, repository secret isolation, CMS endpoint hardening, custom 404 headers, serialized database safety, and rollback snapshots.

6 CHECKS (37–42)
CHECK 37 SSL / HTTPS Handshake

SSL/TLS Handshake & Universal HTTPS Redirection

Test HTTP and HTTPS endpoints via `curl -I` across root, subdomains, and trailing slash variants to confirm universal encryption.

✓ Deterministic Pass Criteria
All insecure HTTP requests 301 redirect permanently to HTTPS; valid TLS certificate active; zero mixed-content protocol warnings in DevTools.
Operational Context: Required by modern web browsers; mixed-content warnings display terrifying "Not Secure" alerts to buyers.
CHECK 38 Secrets / Git Hygiene

Environment Variables & Secret Key Isolation

Scan Git repository commits, client-side bundles, and environment files for leaked credentials, private tokens, or database passwords.

✓ Deterministic Pass Criteria
Zero API keys, private tokens, or database passwords committed to Git or exposed in compiled JS; all credentials stored in secure `.env` files.
Operational Context: Prevents severe security breaches, cloud resource exploitation, and client data liability under bilateral NDA.
CHECK 39 CMS Hardening / Attack Surface

CMS Hardening & Endpoint Attack Surface Reduction

Audit WordPress or Shopify security headers, default endpoints, and administrative access controls to prevent brute-force attacks.

✓ Deterministic Pass Criteria
XML-RPC disabled on WordPress if unused; generator version tags stripped; login attempts rate-limited; admin authentication secured with 2FA.
Operational Context: Eliminates automated bot scanning vulnerability and protects client infrastructure.
CHECK 40 404 Handling / Server Status

Custom HTTP 404 Status Header Verification

Test nonexistent root and nested URLs using `curl -I` to ensure the web server returns a genuine HTTP 404 response header.

✓ Deterministic Pass Criteria
Server terminates missing URLs in true `HTTP/1.1 404 Not Found` (never HTTP 200 soft-404); custom 404 page provides navigation recovery links.
Operational Context: Soft 404s pollute search engine indexes with duplicate empty pages, diluting domain authority.
CHECK 41 Database / Serialization

Serialized Database Migration & Media URL Safety

For WordPress staging-to-production cutovers, verify domain replacement using serialized-data-aware search-and-replace tools (`wp search-replace`).

✓ Deterministic Pass Criteria
Domain search-replace maintains serialized array length offsets; zero broken widget options; zero missing media uploads pointing to staging subdomains.
Operational Context: Standard SQL text replacements corrupt serialized PHP arrays, breaking theme options and widget configurations.
CHECK 42 Deployment / Contingency

Production Cutover Runbook & Rollback Snapshot

Review DNS Time-to-Live (TTL) lowering, verify pre-deployment filesystem/database backups, and establish documented rollback procedures.

✓ Deterministic Pass Criteria
DNS TTL lowered to 300s 48h prior to launch; full verified backup snapshot stored offsite; rollback runbook executable in < 15 minutes.
Operational Context: The ultimate agency safeguard against unexpected launch-day infrastructure emergencies.
SUMMARY MATRIX // SCANNABLE AUDIT INDEX

Master 42-Point Protocol Index

A scannable reference matrix summarizing all 42 verification gates, designated evaluation criteria, and target execution environments.

ID Category Verification Gate Scope Acceptance Threshold
01ArchitectureGit Branch Isolation & FlowGit / AllClean rebase; bilateral NDA author alias
02ArchitectureW3C HTML5 Semantic MarkupHTML50 fatal W3C syntax errors; semantic landmarks
03ArchitectureModular CSS SpecificityCSS0 uncontrolled !important; scoped component rules
04ArchitectureZero Console Runtime ErrorsJS0 uncaught exceptions or console errors
05ArchitectureCode Linting CompliancePHPCS/Liquid0 fatal linter errors; WPCS / Theme Check pass
06ArchitectureTemplate ModularityTemplates0 hardcoded staging URLs; DRY partials
07ViewportsMobile Layout Fidelity (320px)Mobile0 horizontal overflow; touch targets ≥ 48px
08ViewportsTablet Breakpoint BehaviorTabletClean drawer switch; zero overlapping elements
09ViewportsHigh-Res Desktop & Ultra-WideDesktopMax-width constraints intact; crisp retina media
10ViewportsChromium Engine ParityChrome/EdgePixel-accurate layout fidelity; 60fps transitions
11ViewportsWebKit Safari Engine ParitySafari/iOSInput font ≥ 16px; zero flexbox child collapse
12ViewportsGecko Firefox Engine ParityFirefoxCrisp SVG rendering; custom scrollbar fallback
13Web VitalsLargest Contentful Paint (LCP)SpeedLCP ≤ 2.5s; WebP/AVIF preloaded fetchpriority
14Web VitalsCumulative Layout Shift (CLS)StabilityCLS ≤ 0.05; explicit dimensions on 100% media
15Web VitalsInteraction to Next Paint (INP)InteractivityINP ≤ 200ms; zero long tasks > 50ms
16Web VitalsJavaScript Asset DeferralScriptsNon-critical JS deferred; code-splitting active
17Web VitalsWeb Font Delivery & FOUTTypographyfont-display: swap on all fonts; WOFF2 preloaded
18Web VitalsBrowser Caching & CDNCachingCache-Control ≥ 1 yr; Gzip/Brotli verified
19AccessibilityColor Contrast ComplianceWCAG AAContrast ≥ 4.5:1 normal text; ≥ 3:1 large text
20AccessibilityKeyboard Traversal & FocusKeyboard100% elements focusable; visible focus ring
21AccessibilitySkip-to-Content MechanismNavigationFunctional skip anchor to #main-content
22AccessibilityAccessible Form Control LabelsFormsExplicit label bindings; aria-describedby errors
23AccessibilityImage Alternative TextImagesContextual alt text on media; empty alt on icons
24AccessibilityHeading Hierarchy & ARIAStructureSingle H1; zero skipped heading depths; ARIA states
25IntegrationsForm Submission & FeedbackFormsAJAX success feedback; zero full-page reload crash
26IntegrationsNotification Routing & WebhooksCRM/EmailInbox delivery verified; honeypot anti-spam active
27IntegrationsCart Drawer State PersistenceEcommerceAJAX subtotal updates; persistent session state
28IntegrationsEnd-to-End Checkout FunnelPaymentsSandbox orders verified; tax & shipping accuracy
29IntegrationsMulti-Currency Routingi18nCurrency persists through checkout; clean strings
30IntegrationsThird-Party Tag ContainmentGTMConsent mode compliance; zero unconsented cookies
31SEOTitle & Meta DescriptionMetadata100% unique titles (≤ 60ch) and metas (≤ 160ch)
32SEOSelf-Referential CanonicalsCanonicalsAbsolute self-referential canonical on all pages
33SEORobots Meta DirectivesIndexingStaging protected; production verified index, follow
34SEOJSON-LD Schema Entity GraphSchemaValid @graph; zero errors; zero fake reviews
35SEOOpen Graph & Social CardsSocial1200 × 630px images; clean preview rendering
36SEOXML Sitemap ArchitectureSitemaps100% 200 OK URLs; 0 redirects; 0 404s; 0 retired
37SecuritySSL/TLS & HTTPS RedirectionSecurityUniversal 301 to HTTPS; zero mixed-content warnings
38SecurityEnvironment Variables & SecretsSecrets0 API keys or passwords committed to Git repositories
39SecurityCMS Hardening & Endpoint CloakHardeningXML-RPC disabled; generator meta tags stripped
40SecurityCustom HTTP 404 HeaderServerTrue HTTP 404 status returned (no soft 404)
41SecuritySerialized Database MigrationDatabaseSerialized search-and-replace; zero broken media paths
42SecurityCutover Runbook & RollbackDeploymentDNS TTL ≤ 300s; full verified backup snapshot
FREQUENTLY ASKED QUESTIONS // PROTOCOL GOVERNANCE

Questions & Operational Governance

Common questions regarding how digital agency delivery teams implement the 42-point pre-flight checklist across active development pipelines.

When should an agency execute the 42-Point Pre-Flight QA Protocol?

The 42-Point QA Protocol should be executed at two mandatory operational milestones: first, upon feature branch completion before merging into the staging environment; and second, as a comprehensive pre-flight gate 48 to 72 hours prior to final production DNS cutover.

How does this QA protocol apply across both WordPress and Shopify builds?

While core architectural foundations (responsive viewports, Core Web Vitals, accessibility, and SEO) apply uniformly across all web builds, specific checks adapt to platform runtimes: WordPress utilizes PHPCS coding standards and serialized database migration tools, whereas Shopify utilizes Theme Check, Liquid scoping, and Checkout Extensibility sandbox transactions.

Who is responsible for executing each verification check in an agency pod?

Quality assurance is strictly bifurcated from raw feature coding. In an institutional pod model, developers conduct self-linting and local unit checks, while an independent QA engineer or technical lead conducts viewport testing, cross-browser regression, accessibility audits, and staging verification to eliminate confirmation bias.

What constitutes an immediate pre-flight deployment blocker?

Any fatal JavaScript console error on critical user paths, checkout gateway failures, non-responsive viewport horizontal scrolling, missing canonical tags, unhandled environment secrets, or Core Web Vitals LCP exceeding 3.5s on mobile constitutes an immediate deployment blocker that halts production cutover until resolved.

Scale Your Agency Delivery With Built-In 42-Point QA

Eliminate launch-day panics, client-reported staging bugs, and unbillable developer rework. Partner with dedicated white-label engineering pods backed by automated quality gates, SLA response commitments, and bilateral NDA protection.

DISCUSS A PARTNERSHIP EXPLORE OUR FRAMEWORK →