dare.co.uk audit — 2026-05-12 08:53

Editorial note (Dan + Claude, 2026-05-12 08:54): Section 5 (PSI / Lighthouse) 429’d on both mobile and desktop runs because PSI_API_KEY isn’t yet wired to 1Password — the script’s documented fallback is “unauthenticated, may hit rate limits”, and the IP-level limit is currently sticky. Sections 1–4 + 6 contain the day’s substantive findings (response headers, SEO surface, sitemap, 404 handling, next-step prompts). PSI scores will re-attach once a Google API key lives at op://Private/<some-item>/credential.

1. Homepage

SEO surface

2. robots.txt

# As a condition of accessing this website, you agree to abide by the following
# content signals:

# (a)  If a Content-Signal = yes, you may collect content for the corresponding
#      use.
# (b)  If a Content-Signal = no, you may not collect content for the
#      corresponding use.
# (c)  If the website operator does not include a Content-Signal for a
#      corresponding use, the website operator neither grants nor restricts
#      permission via Content-Signal with respect to the correspon

3. sitemap.xml

4. 404 handling

5. PageSpeed Insights (Lighthouse)

⚠️ No PSI_API_KEY env var — running unauthenticated, may hit rate limits.

6. Next-step prompts

Source: dare_audit_2026-05-12.md · Rendered 2026-05-12 08:53