---
task: Полный аудит iqon.com и план изменений
slug: 20260519-224203_full-iqon-audit-plan
effort: extended
phase: complete
progress: 20/20
mode: interactive
started: 2026-05-19T22:42:03+03:00
updated: 2026-05-19T22:47:52+03:00
---

# Полный аудит iqon.com и план изменений

Purpose: зафиксировать проверяемый аудит live-сайта `iqon.com` и план изменений с опорой на Open Design.

## Context

Сергей попросил сделать полный аудит `iqon.com`, использовать skill `opendesign` и подготовить план необходимых изменений. В доступном списке нет skill с точным именем `opendesign`; использованы Open Design skill entries `design-review` и `frontend-design`. В рамках задачи не запрошены live-изменения, деплой, доступ к админке или перенос секретов.

### Risks

- Live WordPress core version is not directly confirmed; avoid stale exact-version claims.
- Visual audit is based on HTML/CSS evidence, not browser screenshots.
- Security recommendations must not imply remote changes were performed.

## Criteria

- [x] ISC-1: OpenDesign design-review skill entry inspected
- [x] ISC-2: OpenDesign frontend-design skill entry inspected
- [x] ISC-3: Codex iqon project memory inspected
- [x] ISC-4: Local prior design audit inspected
- [x] ISC-5: Live homepage headers inspected
- [x] ISC-6: Live homepage HTML inspected
- [x] ISC-7: Live stylesheet inspected for layout signals
- [x] ISC-8: Live sitemap index inspected
- [x] ISC-9: Live page sitemap inspected
- [x] ISC-10: Sitemap duplicate counts computed
- [x] ISC-11: Live REST users endpoint inspected
- [x] ISC-12: Live contact page inspected
- [x] ISC-13: Live readme exposure inspected
- [x] ISC-14: Local redesign prototype inspected
- [x] ISC-15: Audit document created in project root
- [x] ISC-16: Audit document lists prioritized findings
- [x] ISC-17: Audit document includes implementation plan
- [x] ISC-18: Audit separates current facts from stale memory
- [x] ISC-19: Audit avoids credential values
- [x] ISC-20: Verification evidence recorded in PRD

## Decisions

- Create a new current audit document rather than overwrite prior `iqon-design-audit.md`.
- Treat prior WP 4.9.13 claim as historical until core version is separately confirmed.
- Recommend static/light redesign path unless WordPress editing must remain a hard requirement.

### Plan

1. Create a current audit markdown document in the project root.
2. Separate verified live findings from stale/historical memory.
3. Prioritize quick hardening, SEO/accessibility cleanup, and full redesign work.
4. Include verification commands and expected signals for each phase.

### Capability Tracking

- [INVOKED] OpenDesign design-review — read `/Users/svmac/development/open-design/skills/design-review/SKILL.md`.
- [INVOKED] OpenDesign frontend-design — read `/Users/svmac/development/open-design/skills/frontend-design/SKILL.md`.
- [INVOKED] Live HTTP inspection — checked homepage, headers, sitemap, REST, contact.
- [INVOKED] Local repository inspection — checked memory, old audit, root and new redesign.
- [INVOKED] Targeted audit document editing — create current audit artifact.

## Verification

- `test -f iqon-full-audit-2026-05-19.md` exited 0.
- `rg -n "P0|P1|Phase 1|Phase 3|Open Design|WordPress 4\\.9\\.13|66 URLs|29 sitemap|3 duplicated|admin|iqnadm01" iqon-full-audit-2026-05-19.md` returned expected audit sections and evidence lines.
- `rg -n "password|парол|token|secret|Ds7|Dih|TTSQ|credential" iqon-full-audit-2026-05-19.md` exited 1, confirming credential terms/substrings are absent.
- `python3 -c` document check returned `has_purpose True`, `has_toc True`, `has_plan True`, `has_dates True`.