= Crow Tech Website Analyser Beta
:doctype: report
:toc: macro
:sectnums:
:pdf-page-size: A4
:revdate: 2026-07-09T15:15:31.494Z

Crow Tech QA Intelligence

toc::[]

== Report Metadata

[horizontal]
Report:: Deep Public Website QA Loop Check
Target URL:: https://www.berkshirehathaway.com/
Final URL:: https://www.berkshirehathaway.com/
Mode:: Deep audit
Analysis completed:: 2026-07-09T15:15:31.494Z
Artifacts expire:: Recorded with terminal artifact completion
Retention:: 7 days after terminal artifact completion
Scope:: Public web audit with no login or private-session crawling

== Verdict

[horizontal]
Status:: Usable, with fixes recommended
Detail:: The site is reachable, but the report includes concrete improvements for security, reliability, copy, or developer hygiene.

== Executive Summary

The analyser 0 same-origin sitemap URL candidate(s) were observed in fetched sitemap files and 0 were admitted. 0 sitemap URL(s) admitted from fetched sitemap evidence were checked for liveness/status, rendered 1 page(s), 17 of 17 same-origin link destination(s) extracted from fetched HTML pages were checked; no whole-site link total is claimed, checked 1 public asset reference(s), document checks: fetched 1, valid 1, invalid 0, inconclusive 0, 22 attempted; 0 confirmed exposure signal(s); 0 no exposure signal; 22 inconclusive operational probe(s), and produced 2 grouped finding(s).

This bounded run does not log in, submit forms, crawl private URLs, port scan, or fuzz arbitrary paths.

== Methodology: 5-Pass Loop

. Discovery pass: robots.txt, standard sitemap paths, sitemap indexes, and bounded sitemap URL categorisation.
. Breadth status pass: public sitemap/core URLs checked for status, redirect final URL, and content type.
. Browser render pass: prioritized public pages rendered with console, runtime, network, and screenshot evidence.
. Content verification pass: internal anchors, public assets, and PDF/DOCX links validated with source page and link text.
. Targeted report pass: repeated failures grouped into high-signal client-ready findings with impact and fixes.

== What This Run Found

No prior baseline was supplied, so every grouped finding is marked as observed in this run.

== Coverage Metrics

[horizontal]
Sitemap candidates observed:: 0 same-origin sitemap URL candidate(s) were observed in fetched sitemap files and 0 were admitted
Sitemap paths checked:: 0 / 0 known admitted - no sitemap URL was admitted from fetched sitemap evidence
Fetched page/status URLs:: 1 fetched
Rendered pages:: 1 rendered
Internal links checked:: 17 / 17 known extracted - all known extracted destinations were checked; no site-wide link total is claimed
Assets checked:: 1 checked
Document delivery:: 1 attempted; 1 transport-fetched; 1 semantically valid; 0 invalid; 0 inconclusive
Fixed exposure probes:: 22 attempted; 0 confirmed exposure signal(s); 0 no exposure signal; 22 inconclusive operational probe(s)
Copy sample:: Copy checks use a bounded sample of successful, untruncated fetched HTML pages; this historical bundle did not retain the exact copy-selection count.
Browser selection:: 1 priority-ranked browser render(s) were attempted from 1 successful, untruncated fetched HTML page(s); browser selection is not a whole-site claim.
Screenshots:: 1
Screenshot handling:: 1 screenshot(s) were retained as internal evidence. User-run reports reference screenshot metadata only; screenshot bytes are non-downloadable unless an authorized design explicitly exposes them.
Browser runtime:: Browser runtime budget usage was not captured because no browser context completed.
Run accounting:: Whole-run resource accounting was not retained in this historical evidence bundle.
Interaction coverage:: Interaction coverage is a small representative safe probe sample, not workflow testing: across 1 rendered page(s), detected 0, eligible 0, attempted 0, succeeded 0, failed 0, and not run 0; reasons: no\_detected\_controls:1. Forms, selections, navigation links, and destructive actions were not exercised.
Sitemap categories:: none
Grouped findings:: 2

== Coverage Ledger

Counts are phase-local. A known set is only the named retained/admitted set; it is not a claim that the whole site was discovered.

* sitemap\_discovery: discovered 2; admitted 2; eligible 2; attempted 2; succeeded 0; failed 2; skipped 0; truncated 0; cap not hit. Scope: 2 sitemap file records retained in the historical evidence. Provenance: standard\_sitemap\_path. Reasons: fetch\_failed:2 (Historical sitemap fetches failed.).
* sitemap\_url\_admission: discovered 0; admitted 0; eligible 0; attempted 0; succeeded 0; failed 0; skipped 0; truncated 0; cap not hit. Scope: 0 sitemap URL candidates recorded in the historical fetched sitemap evidence. Provenance: sitemap\_urlset. Reasons: none.
* sitemap\_status: discovered 0; admitted 0; eligible 0; attempted 0; succeeded 0; failed 0; skipped 0; truncated 0; cap not hit. Scope: 0 sitemap URLs admitted from historical fetched sitemap evidence. Provenance: sitemap\_status\_queue. Reasons: none.
* page\_fetch: discovered 1; admitted 1; eligible 1; attempted 1; succeeded 1; failed 0; skipped 0; truncated 0; cap not hit. Scope: 1 page fetch records retained in the historical evidence. Provenance: initial\_homepage. Reasons: none.
* same\_origin\_link\_fallback: discovered 0; admitted 0; eligible 0; attempted 0; succeeded 0; failed 0; skipped 0; truncated 0; cap not hit. Scope: Historical P0 artifacts did not retain a homepage-link fallback candidate set; no whole-site denominator is known. Provenance: initial\_homepage, robots\_txt. Reasons: sitemap\_absent:1, robots\_unavailable:1 (Historical robots.txt was not a readable policy.).
* internal\_link\_checks: discovered 17; admitted 17; eligible 17; attempted 17; succeeded 17; failed 0; skipped 0; truncated 0; cap not hit. Scope: 17 same-origin link destinations retained from the historical fetched homepage. Provenance: same\_origin\_anchor. Reasons: none.
* asset\_checks: discovered 1; admitted 1; eligible 1; attempted 1; succeeded 1; failed 0; skipped 0; truncated 0; cap not hit. Scope: 1 public asset references retained in the historical evidence. Provenance: public\_asset\_reference. Reasons: none.
* document\_checks: attempted 1; transport-fetched 1; semantically valid 1; invalid 0; inconclusive 0; skipped 0; truncated 0; cap not hit. Scope: 1 PDF/DOCX references retained in the historical evidence. Reasons: none.
* exposure\_checks: discovered 22; admitted 22; eligible 22; attempted 22; succeeded 0; failed 0; skipped 22; truncated 0; cap not hit. Scope: 22 fixed exposure targets retained in the historical evidence. Provenance: fixed\_exposure\_list. Reasons: transport\_inconclusive:22 (Historical fixed exposure probe responses do not prove absence of exposure.).
* browser\_render: discovered 1; admitted 1; eligible 1; attempted 1; succeeded 1; failed 0; skipped 0; truncated 0; cap not hit. Scope: 1 browser render records retained in the historical evidence. Provenance: browser\_render\_queue. Reasons: none.
* browser\_interactions: discovered 0; admitted 0; eligible 0; attempted 0; succeeded 0; failed 0; skipped 0; truncated 0; cap not hit. Scope: Historical P0 artifacts did not retain reconstructible interaction-control coverage; no whole-site denominator is known. Provenance: browser\_interaction\_detection. Reasons: none.

== Run Resource Accounting

Whole-run resource accounting was not retained in this historical evidence bundle.

* Historical evidence did not retain phase resource accounting.

== Business Impact

* Missing strict-transport-security header: https://www.berkshirehathaway.com/ did not send strict-transport-security.
* Site sample lacks contact basics: No mailto/tel link, contact route, or visible contact/email/phone signal was found across 1 crawled HTML page(s).

== Developer Checklist

* Add the header at the edge/web server after validating compatibility.
* Expose a clear contact route or direct public contact detail so users can reach the operator.
* Use one clear H1 per core page unless the template intentionally requires otherwise.
* Add a useful meta description for search/social snippets.
* Publish a simple robots.txt that references your sitemap and intended crawler policy.
* Add a footer/contentinfo landmark with company, contact, legal, and support navigation basics.

== Deterministic Report Basis

Client findings are deterministic. AI-generated summaries, priorities, business observations, and actions are intentionally excluded from client artifacts until evidence mapping is independently validated.

== Grouped Findings

=== 1. MEDIUM - Missing strict-transport-security header

[horizontal]
Category:: Deterministic QA
Status:: Observed in this run
Evidence:: https://www.berkshirehathaway.com/ did not send strict-transport-security.
Affected scope:: Affected retained URL: https://www.berkshirehathaway.com/
Acceptance / retest:: Retest the deterministic check after the recommended change and confirm the retained evidence no longer reproduces.

Recommended fix:

* Add the header at the edge/web server after validating compatibility.

==== Examples

.Example 1
[horizontal]
Source:: Not captured
Link text:: Not captured
Target:: https://www.berkshirehathaway.com/[https://www.berkshirehathaway.com/]
Status:: Observed
Evidence:: See finding evidence.

=== 2. MEDIUM - Site sample lacks contact basics

[horizontal]
Category:: Deterministic QA
Status:: Observed in this run
Evidence:: No mailto/tel link, contact route, or visible contact/email/phone signal was found across 1 crawled HTML page(s).
Affected scope:: Affected retained URL: https://www.berkshirehathaway.com/
Acceptance / retest:: Retest the deterministic check after the recommended change and confirm the retained evidence no longer reproduces.

Recommended fix:

* Expose a clear contact route or direct public contact detail so users can reach the operator.

==== Examples

.Example 1
[horizontal]
Source:: Not captured
Link text:: Not captured
Target:: https://www.berkshirehathaway.com/[https://www.berkshirehathaway.com/]
Status:: Observed
Evidence:: See finding evidence.

== Document Validation

.Document 1
[horizontal]
Transport:: HTTP 200
Semantic outcome:: valid
Expected:: pdf
Magic:: pdf
Content type:: application/pdf
Source:: https://www.berkshirehathaway.com/[https://www.berkshirehathaway.com/]
Link text:: Fraudulent Claims Regarding Mr. Buffett's Endorsements of Investment Products and Political Candidates
Target:: https://www.berkshirehathaway.com/webfraud.pdf[https://www.berkshirehathaway.com/webfraud.pdf]

== Operational / Inconclusive Evidence

These bounded observations are analyser limits, transport uncertainty, or policy controls. They are not client site findings.

.Operational evidence 1
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/.env[https://www.berkshirehathaway.com/.env]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.

.Operational evidence 2
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/.env.local[https://www.berkshirehathaway.com/.env.local]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 3
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/.env.production[https://www.berkshirehathaway.com/.env.production]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 4
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/.git/HEAD[https://www.berkshirehathaway.com/.git/HEAD]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.

.Operational evidence 5
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/.git/config[https://www.berkshirehathaway.com/.git/config]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.

.Operational evidence 6
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/.git/index[https://www.berkshirehathaway.com/.git/index]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.

.Operational evidence 7
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/main.js.map[https://www.berkshirehathaway.com/main.js.map]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 8
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/app.js.map[https://www.berkshirehathaway.com/app.js.map]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 9
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/bundle.js.map[https://www.berkshirehathaway.com/bundle.js.map]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 10
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/static/js/main.js.map[https://www.berkshirehathaway.com/static/js/main.js.map]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 11
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/assets/app.js.map[https://www.berkshirehathaway.com/assets/app.js.map]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 12
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/backup.zip[https://www.berkshirehathaway.com/backup.zip]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 13
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/backup.tar.gz[https://www.berkshirehathaway.com/backup.tar.gz]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 14
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/site.zip[https://www.berkshirehathaway.com/site.zip]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 15
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/www.zip[https://www.berkshirehathaway.com/www.zip]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 16
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/database.sql[https://www.berkshirehathaway.com/database.sql]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 17
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/db.sql[https://www.berkshirehathaway.com/db.sql]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 18
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/dump.sql[https://www.berkshirehathaway.com/dump.sql]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 404; absence of exposure was not inferred.

.Operational evidence 19
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/config.php.bak[https://www.berkshirehathaway.com/config.php.bak]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.

.Operational evidence 20
[horizontal]
Classification:: Inconclusive operational evidence — not a client site finding
Type:: Fixed exposure probe inconclusive
URL:: https://www.berkshirehathaway.com/wp-config.php.bak[https://www.berkshirehathaway.com/wp-config.php.bak]
Provenance:: fixed\_exposure\_list
Detail:: Historical fixed exposure probe returned HTTP 403; absence of exposure was not inferred.

== Developer Evidence

No failed link, asset, or browser request rows were captured within the bounded run.

== Browser Render Checks

.Render 1
[horizontal]
Status:: 200
Final URL:: https://www.berkshirehathaway.com/[https://www.berkshirehathaway.com/]
Console:: 1
Runtime:: 0
Failed:: 1
Blocked:: 1 analyser-policy block(s); see operational evidence
Browser budget:: not captured
Interactions:: detected 0; eligible 0; attempted 0; succeeded 0; failed 0; not run 0; reasons no\_detected\_controls:1
Screenshot:: screenshot-page-01.png
Operational status:: Bounded analyser/transport constraints are recorded in Operational / inconclusive evidence; they are not client site findings.

== Fixed Exposure Checks

No fixed-list exposure checks produced high-confidence public file evidence.

== Security Headers Observed

[horizontal]
strict-transport-security:: missing
content-security-policy:: upgrade-insecure-requests;
x-frame-options:: SAMEORIGIN
referrer-policy:: missing
permissions-policy:: missing

== Pages Fetched

* 200 https://www.berkshirehathaway.com/ - BERKSHIRE HATHAWAY INC.

== Artifact Retention

Artifacts are downloadable for 7 days after terminal artifact completion; the exact expiry is recorded atomically when the terminal artifact batch completes. Use the PDF, Markdown, AsciiDoc, JSON evidence, crawl manifest, reproduction notes, and internal screenshot metadata for developer follow-up; screenshot bytes are non-downloadable unless an authorized design explicitly exposes them.