Self-use operational dry run. Not an industrial B2B client validation. This case demonstrates the complete audit workflow on a self-owned professional content and portfolio site.
eigentime.org is a bilingual (Chinese/English) professional content site covering B2B export SEO, AI coding, web development, and public case reviews. It is not an industrial B2B manufacturer or product catalog site.
This execution validated the complete Operational v0.2 workflow — crawling, evidence registration, question matrices, human review queues, URL actions, and time tracking — on real public content where the site owner had full authority to review findings.
Strongest evidence: public downloadable resources with versions, dates, licenses, filenames, and SHA-256 integrity patterns. Weakest evidence: business-results loop closure, independent client/employer authorization, collaboration terms, and customer project data terms.
Chinese and English online resumes exist but are not in the sitemap. Missing mutual hreflang annotations and valid lastmod timestamps reduce discoverability and indexing confidence.
hreflang and lastmod tags.The site presents professional work and capabilities but does not specify pricing, scope, capacity, timelines, SLAs, legal entity, or payment terms. Visitors may infer availability without actual service readiness.
Visitor privacy and client project data handling are not clearly separated. Missing minimum-privilege, storage, retention/deletion, subprocessor, incident notification, and access-revocation boundaries.
Giscus/GitHub comment integration creates third-party connections that may not be obvious to visitors before interaction.
Affects: /en/resume/, /zh/resume/, sitemap.xml
Clarify that pricing, capacity, and terms require explicit negotiation; site is capability demonstration only.
Define storage, retention, deletion, subprocessors, and access revocation for each category.
Desktop uBlock Origin option was removed in v1.38 per official project documentation; update or remove outdated steps.
Add version, threat model, tests, limits, and license or remove the broken link.
Projects claiming "50+ sites", "UAV 0→243 Top10", and "5794/254 cases" need dates, definitions, anonymized manifests/hashes, personal contribution boundaries, and authorization levels.
The audit explicitly preserved Unknown status for five questions where public evidence was insufficient:
This dry run validated that the 21-sheet Operational v0.2 workflow functions correctly for structured evidence collection, human-review queuing, and URL-level action prioritization. Key insights:
Scorecard result: STOP
This is the correct result. Twenty high-risk items still require real human approval; the owner has not accepted any actions with target dates; no retest evidence exists; no client payment exists; no existing backlog comparison is available; actual human labor time was not reliably measured.
This execution demonstrates operational completeness but does not count toward Stage 0 commercial validation gates.