{
  "test_case_id": "A11Y-PDFUA-001",
  "title": "PDF/UA-1 Matterhorn 1.1 complete protocol",
  "category": "pdfua_conformance",
  "procedure_version": "2026.08.27-rc.9",
  "rule_type": "external_protocol",
  "wcag_criteria": [
    "1.1.1",
    "1.3.1",
    "1.3.2",
    "2.1.1",
    "4.1.2"
  ],
  "level": "AA",
  "risk": "medium",
  "risk_basis": "Detect PDF/UA-1 failures and functional accessibility barriers in the exact immutable PDF artifact. People most likely affected: people using screen readers, refreshable braille, keyboard access, reflow or magnification with PDF documents. A structurally invalid or functionally unusable PDF can expose the wrong reading order, omit content, prevent navigation or make forms and controls unusable. In the recorded document-pdf environment, use the version-matched PDF/UA protocol on the immutable file and pair machine checks with every required interpretive and functional check; a clean checker result cannot prove reading order, alternatives or interaction.",
  "review_status": "draft",
  "reviewed_at": "",
  "review_note": "Template content is subject to a hash-bound internal consistency review. Formal assessment claims require competent execution, current evidence and the applicable legal, participant and organisational authority.",
  "method_label": "PDF/UA protocol review",
  "tester_level": "PDF/UA specialist",
  "estimated_duration": "Typically 180–261 minutes for the stated single-target assumptions; use the component breakdown when estimating a real sample.",
  "execution_class": "manual_with_automation_support",
  "automation_support": "supporting_evidence_only",
  "simulation_policy": "simulation_may_support_but_not_replace_manual_execution",
  "plain_summary": "Assess one checksum-identified PDF/UA-1 file against Matterhorn Protocol 1.1 and required manual functional checks.",
  "objective": "Detect PDF/UA-1 failures and functional accessibility barriers in the exact immutable PDF artifact.",
  "test_subject": "One immutable PDF file identified by cryptographic checksum and explicitly assessed against PDF/UA-1 (ISO 14289-1:2014).",
  "test_targets": [
    "All 136 Matterhorn Protocol 1.1 failure conditions for the exact file.",
    "The file's manual tag-tree, reading-order, keyboard, reflow and real assistive-technology behaviour."
  ],
  "applicability": "Apply only to PDF/UA-1 assessment. Do not use this procedure or its evidence for a PDF/UA-2 claim.",
  "applicability_questions": [
    "Is the final file immutable and checksum-identified?",
    "Does the assessment target PDF/UA-1 and ISO 14289-1:2014?",
    "Is the PDF version and PDF/UA identifier recorded?",
    "Are qualified checker, manual inspection and real assistive-technology environments available?"
  ],
  "inapplicability_conditions": [
    "The subject is not a PDF file.",
    "The assessment target is PDF/UA-2 rather than PDF/UA-1; use a PDF/UA-2-specific procedure and protocol."
  ],
  "assumptions": [
    "The selected scope identifies the product version, technologies, states and important user journeys being evaluated.",
    "The tester knows how to use this method and any required assistive technology.",
    "Known browser or assistive-technology limitations are recorded instead of being assigned to the product without evidence."
  ],
  "accessibility_support_assumptions": [
    "The result covers only the browsers, platforms, readers and assistive technologies that were actually tested.",
    "Do not apply a result from one technology combination to an untested combination or to every user."
  ],
  "prerequisites": [
    "The product area and test targets are agreed before testing starts.",
    "The operating system, browser, viewport and input method are recorded.",
    "Test data is safe to use and does not expose unnecessary personal information."
  ],
  "required_environment_fields": [
    "operating_system",
    "operating_system_version",
    "pdf_viewer",
    "pdf_viewer_version",
    "pdfua_part",
    "pdf_sha256",
    "accessibility_checker",
    "accessibility_checker_version",
    "authoring_or_remediation_tool",
    "authoring_or_remediation_tool_version",
    "assistive_technology",
    "assistive_technology_version",
    "input_method"
  ],
  "steps": [
    {
      "step_id": "S1",
      "title": "Freeze the PDF and claimed standard",
      "phase": "prepare",
      "scenario_purpose": "Bind every result to one immutable document and one PDF/UA part.",
      "user_impact": "Changed files or ambiguous claims invalidate otherwise useful evidence.",
      "test_target": "One final PDF file.",
      "required_state": "Final candidate before any checker or manual run.",
      "tool_or_command": "SHA-256 utility and PDF properties inspector.",
      "action": "Calculate SHA-256 and record filename, bytes, PDF version, PDF/UA identifier and authoring/export/remediation tool versions. Stop if the checksum changes.",
      "expected": "The artifact and PDF/UA-1 claim are unique and reproducible.",
      "failure_observation": "The checksum is absent, changes during testing or the file declares another/ambiguous PDF/UA part.",
      "evidence_to_record": "File ID, checksum, size, metadata extract and toolchain.",
      "decision_rules": {
        "passed": "The immutable file is identified as the intended PDF/UA-1 candidate.",
        "failed": "No stable artifact or applicable claim can be established.",
        "not_applicable": "The approved plan does not require PDF/UA-1 assessment for this document.",
        "blocked": "The final file or required metadata cannot be accessed."
      },
      "decision_effect": "Passed: The immutable file is identified as the intended PDF/UA-1 candidate. Failed: No stable artifact or applicable claim can be established.",
      "recovery_or_repeat": "Obtain the final file; never overwrite evidence from an earlier checksum.",
      "novice_guidance": "Obtain the final file; never overwrite evidence from an earlier checksum.",
      "limitations_and_claim_boundary": "This scenario identifies the subject and claim only."
    },
    {
      "step_id": "S2",
      "title": "Record the protocol and licensed references",
      "phase": "prepare",
      "scenario_purpose": "Use the correct Matterhorn and ISO references for PDF/UA-1.",
      "user_impact": "Applying the wrong protocol can produce a misleading conformance decision.",
      "test_target": "The assessment method and reviewer reference set.",
      "required_state": "PDF checksum fixed in S1.",
      "tool_or_command": "Matterhorn Protocol 1.1 (April 2021), qualified checker documentation and authorised access to ISO 14289-1:2014.",
      "action": "Record protocol/version, checker/version, applicable ISO part, viewer versions and qualified reviewer role. Confirm none targets PDF/UA-2 only.",
      "expected": "Every method is applicable to PDF/UA-1 and versioned.",
      "failure_observation": "A required reference is missing, unlicensed for the responsible reviewer or applies to a different PDF/UA part.",
      "evidence_to_record": "Protocol IDs/versions, access confirmation, checker/viewer versions and reviewer role.",
      "decision_rules": {
        "passed": "The correct reference set is available.",
        "failed": "The method set is incomplete or mismatched.",
        "not_applicable": "PDF/UA-1 assessment is outside the agreed plan.",
        "blocked": "Required licensed standard access or qualified review authority is unavailable."
      },
      "decision_effect": "Passed: The correct reference set is available. Failed: The method set is incomplete or mismatched.",
      "recovery_or_repeat": "Mark blocked until authorised access exists; do not infer ISO requirements from summaries.",
      "novice_guidance": "Mark blocked until authorised access exists; do not infer ISO requirements from summaries.",
      "limitations_and_claim_boundary": "Repository guidance does not reproduce or replace the licensed ISO standard."
    },
    {
      "step_id": "S3",
      "title": "Run the checker and preserve raw output",
      "phase": "test",
      "scenario_purpose": "Collect repeatable machine evidence without treating it as the complete decision.",
      "user_impact": "Checker-only conclusions can miss human-judgement and functional failures.",
      "test_target": "The checksum-frozen PDF.",
      "required_state": "Unmodified file; checker reset to default PDF/UA-1 profile.",
      "tool_or_command": "Named qualified PDF/UA checker and exact version.",
      "action": "Run the PDF/UA-1 profile once. Export the unedited report and record profile, timestamp and result counts.",
      "expected": "Machine-testable findings are bound to the file and preserved without reinterpretation.",
      "failure_observation": "The checker cannot parse the file, uses another profile or output is edited/lost.",
      "evidence_to_record": "Raw checker report, log, profile, timestamp, version and checksum.",
      "decision_rules": {
        "passed": "A complete raw report is preserved; individual condition outcomes remain to be reconciled.",
        "failed": "The machine run is invalid or unavailable; do not infer protocol outcomes.",
        "not_applicable": "No machine-testable condition applies only when the official protocol explicitly says so.",
        "blocked": "Checker licence, execution or export is unavailable."
      },
      "decision_effect": "Passed: A complete raw report is preserved; individual condition outcomes remain to be reconciled. Failed: The machine run is invalid or unavailable; do not infer protocol outcomes.",
      "recovery_or_repeat": "Repair the checker environment and rerun against the same checksum.",
      "novice_guidance": "Repair the checker environment and rerun against the same checksum.",
      "limitations_and_claim_boundary": "A checker pass is supporting evidence and never a complete PDF/UA-1 decision."
    },
    {
      "step_id": "S4",
      "title": "Complete the 136-condition manifest",
      "phase": "test",
      "scenario_purpose": "Ensure every Matterhorn 1.1 condition has one traceable outcome and permitted method.",
      "user_impact": "Missing conditions create silent gaps in the conformance record.",
      "test_target": "All 136 unique Matterhorn 1.1 condition IDs.",
      "required_state": "Protocol/version fixed; raw checker output available for machine conditions.",
      "tool_or_command": "Condition manifest, Matterhorn Protocol 1.1 and qualified inspection tools.",
      "action": "Record one passed, failed, inapplicable or cantTell outcome for each unique condition ID. Use the protocol method class; explain every inapplicable and cantTell outcome and preserve both no-specific-test conditions.",
      "expected": "The manifest has 136 unique IDs, valid methods and complete rationales.",
      "failure_observation": "Any ID is missing/duplicated, uses an unsupported method or lacks required rationale.",
      "evidence_to_record": "Completed manifest, method per condition, evidence links and rationales.",
      "decision_rules": {
        "passed": "All 136 conditions are accounted for and no failed/cantTell condition remains for a pass.",
        "failed": "A failed condition prevents pass; a cantTell condition prevents a conclusive pass.",
        "not_applicable": "Only individual conditions explicitly inapplicable under the protocol may be marked so.",
        "blocked": "A required manual judgement or reference cannot be obtained."
      },
      "decision_effect": "Passed: All 136 conditions are accounted for and no failed/cantTell condition remains for a pass. Failed: A failed condition prevents pass; a cantTell condition prevents a conclusive pass.",
      "recovery_or_repeat": "Resolve condition-level blockers individually; do not bulk-mark conditions passed or inapplicable.",
      "novice_guidance": "Resolve condition-level blockers individually; do not bulk-mark conditions passed or inapplicable.",
      "limitations_and_claim_boundary": "Condition completion demonstrates protocol coverage, not functional usability or WCAG conformance."
    },
    {
      "step_id": "S5",
      "title": "Inspect structure and reading order",
      "phase": "test",
      "scenario_purpose": "Reconcile machine results with semantic tags and logical reading sequence.",
      "user_impact": "Incorrect structure or order can make a document incoherent to assistive technology.",
      "test_target": "Each unique heading, list, table, figure and content-order pattern in the sample.",
      "required_state": "PDF open in a tagged-structure inspector at the same checksum.",
      "tool_or_command": "Qualified PDF tag-tree inspector and content/reading-order views.",
      "action": "Inspect one structure type at a time. Compare tags, nesting, content association and logical order with the rendered page; record discrepancies against the relevant condition IDs.",
      "expected": "Structures and reading order convey the intended relationships without untagged meaningful content.",
      "failure_observation": "Tags are missing/misnested, content is associated incorrectly or logical order changes meaning.",
      "evidence_to_record": "Tag-tree extracts, page/content references, order comparison and condition links.",
      "decision_rules": {
        "passed": "Every selected unique structure supports its intended semantics and order.",
        "failed": "Any material structural or order failure is recorded against its condition.",
        "not_applicable": "A structure type is absent from the document.",
        "blocked": "The tag tree cannot be inspected with the authorised tool."
      },
      "decision_effect": "Passed: Every selected unique structure supports its intended semantics and order. Failed: Any material structural or order failure is recorded against its condition.",
      "recovery_or_repeat": "Try a second qualified inspector for display problems; preserve discrepancies rather than choosing the favourable view.",
      "novice_guidance": "Try a second qualified inspector for display problems; preserve discrepancies rather than choosing the favourable view.",
      "limitations_and_claim_boundary": "Sampling unique structures does not waive protocol conditions that require full-file checks."
    },
    {
      "step_id": "S6",
      "title": "Inspect alternate descriptions and metadata",
      "phase": "test",
      "scenario_purpose": "Check non-text alternatives, document language, title and other human-judgement metadata.",
      "user_impact": "Missing or inaccurate descriptions and metadata remove meaning or orientation.",
      "test_target": "Every unique figure type plus document-level metadata.",
      "required_state": "Same immutable PDF; visual content and business purpose available to the reviewer.",
      "tool_or_command": "Qualified PDF inspector plus content-owner context when purpose is ambiguous.",
      "action": "Review each unique figure's alternative or marked-artifact decision, then inspect title, language and relevant metadata. Record purpose-based judgements separately.",
      "expected": "Alternatives and metadata are present, accurate and appropriate to purpose.",
      "failure_observation": "Meaningful content lacks an equivalent, decorative content is exposed unnecessarily, or required metadata is absent/inaccurate.",
      "evidence_to_record": "Figure/page IDs, alternative text, purpose rationale, metadata extract and condition links.",
      "decision_rules": {
        "passed": "Every inspected item meets its relevant condition.",
        "failed": "Any inspected item produces the failure observation.",
        "not_applicable": "A specific content type is absent; document-level metadata checks still apply.",
        "blocked": "Purpose cannot be determined from available product-owner information."
      },
      "decision_effect": "Passed: Every inspected item meets its relevant condition. Failed: Any inspected item produces the failure observation.",
      "recovery_or_repeat": "Use cantTell for the affected item and request content-owner clarification.",
      "novice_guidance": "Use cantTell for the affected item and request content-owner clarification.",
      "limitations_and_claim_boundary": "This scenario does not establish equivalence for uninspected repeated content variants."
    },
    {
      "step_id": "S7",
      "title": "Test forms, links and keyboard operation",
      "phase": "test",
      "scenario_purpose": "Confirm interactive document elements can be identified and operated without a pointer.",
      "user_impact": "Inoperable fields or links prevent task completion even when tags exist.",
      "test_target": "Every unique form control, annotation and link behaviour.",
      "required_state": "Document open in the declared viewer; focus at document start.",
      "tool_or_command": "Physical keyboard and recorded PDF viewer; screen-reader run is a separate real-platform evidence item.",
      "action": "Tab through interactive elements, activate links safely, enter synthetic values and submit only to an authorised endpoint. Record names, roles, states, focus order and keyboard results.",
      "expected": "Interactive elements are perceivable, ordered and operable by keyboard.",
      "failure_observation": "An element is skipped, unnamed, misleading, out of order or cannot be operated without a pointer.",
      "evidence_to_record": "Key sequence, viewer/version, focus order, element properties and safe activation result.",
      "decision_rules": {
        "passed": "All selected interactive elements meet the observation.",
        "failed": "Any applicable element produces the failure observation.",
        "not_applicable": "The PDF contains no interactive elements.",
        "blocked": "Security policy or endpoint restrictions prevent safe activation."
      },
      "decision_effect": "Passed: All selected interactive elements meet the observation. Failed: Any applicable element produces the failure observation.",
      "recovery_or_repeat": "Use a non-destructive target or authorised staging copy; otherwise mark only activation blocked.",
      "novice_guidance": "Use a non-destructive target or authorised staging copy; otherwise mark only activation blocked.",
      "limitations_and_claim_boundary": "Keyboard results do not replace a required real screen-reader execution."
    },
    {
      "step_id": "S8",
      "title": "Reconcile and issue the bounded decision",
      "phase": "record",
      "scenario_purpose": "Produce a reviewable PDF/UA-1 result without cross-standard inference.",
      "user_impact": "Blended or overstated conclusions mislead clients and procurement reviewers.",
      "test_target": "Condition manifest, raw checker output and manual evidence for the frozen PDF.",
      "required_state": "All planned scenarios complete or explicitly blocked.",
      "tool_or_command": "Evidence register and independent technical review worksheet.",
      "action": "Reconcile conflicts one condition at a time. Record PDF/UA-1, WCAG-related and functional observations separately; state that no PDF/UA-2 evidence or claim is produced.",
      "expected": "Every conclusion traces to checksum, condition or manual observation and unresolved items remain visible.",
      "failure_observation": "Evidence is missing, conclusions conflict silently, or the report converts functional success into an unsupported standards claim.",
      "evidence_to_record": "Final condition counts, conflict log, evidence map, bounded decision and limitations.",
      "decision_rules": {
        "passed": "All conditions pass with complete evidence and no unresolved conflict for a PDF/UA-1 pass.",
        "failed": "Any failed condition produces a non-conforming result; cantTell/blocked prevents a conclusive pass.",
        "not_applicable": "The assessment was legitimately removed from scope before execution; report the scope limitation.",
        "blocked": "Required qualified review or licensed reference is unavailable."
      },
      "decision_effect": "Passed: All conditions pass with complete evidence and no unresolved conflict for a PDF/UA-1 pass. Failed: Any failed condition produces a non-conforming result; cantTell/blocked prevents a conclusive pass.",
      "recovery_or_repeat": "Return unresolved conflicts to the relevant scenario and preserve the current decision state.",
      "novice_guidance": "Return unresolved conflicts to the relevant scenario and preserve the current decision state.",
      "limitations_and_claim_boundary": "This decision applies only to the checksum-frozen file and PDF/UA-1; it is not a legal opinion or proof of universal usability."
    }
  ],
  "expectations": [
    {
      "expectation_id": "E1",
      "statement": "The immutable PDF, PDF/UA-1 identifier, PDF version and toolchain are recorded.",
      "outcome_if_unmet": "untested"
    },
    {
      "expectation_id": "E2",
      "statement": "All 136 Matterhorn 1.1 conditions have unique, method-valid and evidenced outcomes.",
      "outcome_if_unmet": "untested"
    }
  ],
  "exceptions": [
    "Use only an exception stated in the relevant standard, or an agreed out-of-scope decision. Record the reason and evidence.",
    "A tool limitation, lack of time or unavailable assistive technology is a limitation or incomplete result, not a pass."
  ],
  "outcome_definitions": {
    "passed": "The applicable test target meets every expectation in this rule or procedure.",
    "failed": "The applicable test target does not meet at least one expectation in this rule or procedure.",
    "inapplicable": "The test subject contains no target that matches this rule or procedure's applicability.",
    "cantTell": "The tester cannot fully determine applicability or whether every expectation is met.",
    "untested": "The test subject or target was not evaluated using this rule or procedure."
  },
  "examples": [
    {
      "example_id": "A11Y-PDFUA-001-EX-PASSED",
      "outcome": "passed",
      "scenario": "Representative calibration example, not client evidence. Procedure: PDF/UA-1 Matterhorn 1.1 complete protocol. Target: One final PDF file. Action: Calculate SHA-256 and record filename, bytes, PDF version, PDF/UA identifier and authoring/export/remediation tool versions. Stop if the checksum changes. Evidence: File ID, checksum, size, metadata extract and toolchain. Observed result: The artifact and PDF/UA-1 claim are unique and reproducible."
    },
    {
      "example_id": "A11Y-PDFUA-001-EX-FAILED",
      "outcome": "failed",
      "scenario": "Representative calibration example, not client evidence. Procedure: PDF/UA-1 Matterhorn 1.1 complete protocol. Target: One final PDF file. The tester completes the recorded action, but the captured evidence does not demonstrate: The artifact and PDF/UA-1 claim are unique and reproducible. The failed target and state remain separate from unexecuted targets."
    },
    {
      "example_id": "A11Y-PDFUA-001-EX-INAPPLICABLE",
      "outcome": "inapplicable",
      "scenario": "Representative scope example, not client evidence. The subject is not PDF/UA-1; PDF/UA-2 is specifically inapplicable to this procedure and requires a different assessment. The completed inventory is retained as the basis for the inapplicable outcome."
    },
    {
      "example_id": "A11Y-PDFUA-001-EX-CANTTELL",
      "outcome": "cantTell",
      "scenario": "Representative unresolved example, not client evidence. A required interpretive condition, licensed-standard interpretation or checker/manual discrepancy cannot be resolved. The record identifies the conflicting evidence and the expertise or comparison needed to resolve it."
    },
    {
      "example_id": "A11Y-PDFUA-001-EX-UNTESTED",
      "outcome": "untested",
      "scenario": "Representative execution-gap example, not client evidence. The target is applicable, but a required state, environment, action or evidence item was not completed. The missing action, state or environment remains open and is not converted to a pass."
    }
  ],
  "sampling_rule": "Follow the named external protocol and record every required condition. Do not infer full protocol coverage from a partial checker result.",
  "complete_process_requirement": "If this check is part of a user journey, test the selected journey from start to finish, including relevant errors and recovery. Record any path that was not tested.",
  "pass_criteria": "All 136 Matterhorn Protocol 1.1 conditions are accounted for with allowed outcomes and methods, no condition is failed or cantTell, required manual PDF/UA-1 checks support the conclusion, and the result is tied to the exact PDF checksum.",
  "fail_criteria": "At least one applicable PDF/UA-1 condition fails, or manual evidence identifies a PDF/UA-1 failure for the checksum-identified file.",
  "evidence_requirements": [
    "SHA-256 checksum, filename, size, PDF version, PDF/UA identifier and toolchain.",
    "All 136 Matterhorn 1.1 condition IDs, methods, outcomes, rationales and evidence references.",
    "Qualified checker/version, configuration and unedited exported report.",
    "Tag-tree, content/reading order, semantics, forms, annotations and metadata evidence.",
    "Viewer, keyboard, reflow and exact real assistive-technology output for unique structures and processes."
  ],
  "official_source_ids": [
    "ISO-14289-1-2014",
    "PDFASSOC-MATTERHORN-1.1",
    "PDFASSOC-PDFUA",
    "W3C-PDF-TECHNIQUES",
    "W3C-WCAG22",
    "W3C-WCAG22-TECHNIQUES",
    "W3C-WCAG2ICT"
  ],
  "act_rule_mapping": {
    "format_alignment": "This is a project-authored manual procedure, not a W3C Approved ACT Rule.",
    "approved_rule_ids": [],
    "approved_rules": [],
    "mapping_status": "No supporting ACT rule selected",
    "registry_reviewed_at": "2026-08-27",
    "registry_source_id": "W3C-ACT-RULES",
    "mapping_rationale": "An ACT result can support only the part of this procedure covered by that rule. It does not replace the remaining manual or assistive-technology checks."
  },
  "technique_traceability": [
    {
      "wcag_criterion": "1.1.1",
      "understanding_url": "https://www.w3.org/WAI/WCAG22/Understanding/non-text-content.html",
      "techniques_registry_source_id": "W3C-WCAG22-TECHNIQUES",
      "technique_ids_applied": [],
      "failure_ids_applied": [],
      "selection_status": "Select relevant techniques during the test",
      "selection_note": "Techniques are examples, not extra requirements. Record any technique or common failure used, but decide the result against the success criterion."
    },
    {
      "wcag_criterion": "1.3.1",
      "understanding_url": "https://www.w3.org/WAI/WCAG22/Understanding/info-and-relationships.html",
      "techniques_registry_source_id": "W3C-WCAG22-TECHNIQUES",
      "technique_ids_applied": [],
      "failure_ids_applied": [],
      "selection_status": "Select relevant techniques during the test",
      "selection_note": "Techniques are examples, not extra requirements. Record any technique or common failure used, but decide the result against the success criterion."
    },
    {
      "wcag_criterion": "1.3.2",
      "understanding_url": "https://www.w3.org/WAI/WCAG22/Understanding/meaningful-sequence.html",
      "techniques_registry_source_id": "W3C-WCAG22-TECHNIQUES",
      "technique_ids_applied": [],
      "failure_ids_applied": [],
      "selection_status": "Select relevant techniques during the test",
      "selection_note": "Techniques are examples, not extra requirements. Record any technique or common failure used, but decide the result against the success criterion."
    },
    {
      "wcag_criterion": "2.1.1",
      "understanding_url": "https://www.w3.org/WAI/WCAG22/Understanding/keyboard.html",
      "techniques_registry_source_id": "W3C-WCAG22-TECHNIQUES",
      "technique_ids_applied": [],
      "failure_ids_applied": [],
      "selection_status": "Select relevant techniques during the test",
      "selection_note": "Techniques are examples, not extra requirements. Record any technique or common failure used, but decide the result against the success criterion."
    },
    {
      "wcag_criterion": "4.1.2",
      "understanding_url": "https://www.w3.org/WAI/WCAG22/Understanding/name-role-value.html",
      "techniques_registry_source_id": "W3C-WCAG22-TECHNIQUES",
      "technique_ids_applied": [],
      "failure_ids_applied": [],
      "selection_status": "Select relevant techniques during the test",
      "selection_note": "Techniques are examples, not extra requirements. Record any technique or common failure used, but decide the result against the success criterion."
    }
  ],
  "platform_ids": [
    "document-pdf"
  ],
  "review_requirement": "A qualified accessibility reviewer must confirm the scope, evidence and result before it is reported as final.",
  "known_issues": [
    "Check relevant browser, tool or assistive-technology release notes before assigning unexpected behaviour to the product.",
    "If responsibility is unclear, record the reproducible behaviour and use cannot tell until it is resolved."
  ],
  "change_log": [
    {
      "version": "2026.08.27-rc.9",
      "change": "Reworked for plain language, case-focused steps, scoped evidence and transparent draft review status."
    },
    {
      "version": "2026.08.27-rc.9",
      "change": "Case-specific specialist content, evidence and platform boundaries completed for hash-bound agent verification."
    },
    {
      "version": "2026.08.27-rc.9",
      "change": "Individually authored reference-procedure content prepared for competent review and execution."
    },
    {
      "version": "2026.08.27-rc.9",
      "change": "Removed administrative filler steps, added contextual risk and result boundaries, and prepared the concise worksheet flow for internal consistency review."
    }
  ],
  "tags": [
    "external-protocol",
    "matterhorn",
    "pdf",
    "pdf-ua",
    "pdfua_conformance"
  ],
  "external_protocol_requirement": {
    "protocol_id": "PDFASSOC-MATTERHORN-1.1",
    "protocol_version": "1.1",
    "checkpoint_count": 31,
    "expected_condition_count": 136,
    "machine_condition_count": 87,
    "human_judgment_condition_count": 47,
    "no_specific_test_condition_ids": [
      "23-001",
      "27-001"
    ],
    "allowed_condition_methods": [
      "machine",
      "human_judgment",
      "no_specific_test"
    ],
    "allowed_condition_outcomes": [
      "passed",
      "failed",
      "inapplicable",
      "cantTell"
    ],
    "completion_rule": "Attach 136 unique condition results identified by the official Matterhorn index. Inapplicable and cantTell require rationale; any failed or cantTell condition prevents a pass."
  },
  "status": "draft",
  "authoring_readiness": "content_complete",
  "short_title": "Run the PDF/UA-1 Matterhorn 1.1 protocol",
  "catalogue_version": "2026.08.27-rc.9",
  "identity": {
    "stable_case_id": "A11Y-PDFUA-001",
    "procedure_title": "PDF/UA-1 Matterhorn 1.1 complete protocol",
    "short_user_centred_title": "Run the PDF/UA-1 Matterhorn 1.1 protocol",
    "procedure_version": "2026.08.27-rc.9",
    "catalogue_version": "2026.08.27-rc.9",
    "status": "draft",
    "category": "pdfua_conformance",
    "procedure_type": "external_protocol",
    "execution_class": "manual_with_automation_support",
    "intended_tester_expertise": "PDF/UA specialist",
    "effort_model": {
      "model": "component_effort_v2",
      "small_scope_minutes": {
        "minimum": 180,
        "maximum": 261
      },
      "warning": "Add a new per-target execution and evidence allowance for each additional target class or state that could produce a different result. Add setup time for each distinct environment.",
      "calculation_guidance": "Add the recorded setup, per-target execution, evidence and technical-review components; then apply the stated variation rule.",
      "unit": "minutes",
      "setup": {
        "typical": 25,
        "includes": "Confirm scope and target, prepare safe data, establish the required state and record the tool or environment version."
      },
      "per_target_execution": {
        "typical": 90,
        "includes": "Perform the procedure once for one target in its selected states; this excludes remediation and retesting."
      },
      "evidence_capture": {
        "typical": 30,
        "includes": "Capture, name and cross-reference the minimum reproducible evidence while removing unnecessary personal or secret data."
      },
      "technical_review": {
        "typical": 35,
        "includes": "Check applicability, observations, outcome logic, evidence sufficiency and report wording before issue publication."
      },
      "typical_total_range": {
        "minimum": 180,
        "maximum": 261
      },
      "assumptions": "one checksum-frozen PDF with a valid protocol manifest; page count, unique structures and manual Matterhorn conditions dominate effort",
      "variation": "Add a new per-target execution and evidence allowance for each additional target class or state that could produce a different result. Add setup time for each distinct environment.",
      "excludes": "Client coordination, inaccessible-environment recovery, recruitment, legal review, remediation implementation and waiting time unless the procedure states otherwise."
    },
    "related_procedures": [
      "A11Y-WCAG-001",
      "A11Y-WCAG-007",
      "A11Y-WCAG-008",
      "A11Y-WCAG-021",
      "A11Y-WCAG-054"
    ],
    "replaces": [],
    "replaced_by": []
  },
  "purpose_and_user_impact": {
    "barrier_detected": "Detect PDF/UA-1 failures and functional accessibility barriers in the exact immutable PDF artifact.",
    "people_likely_affected": [
      "People using screen readers, refreshable braille, keyboard access, reflow or magnification with PDF documents."
    ],
    "functionality_or_information_at_risk": "A structurally invalid or functionally unusable PDF can expose the wrong reading order, omit content, prevent navigation or make forms and controls unusable.",
    "result_scope": "external_standard_assessment_support",
    "claim_boundary": "This PDF/UA-1 Matterhorn 1.1 complete protocol procedure determines whether the recorded targets meet WCAG 1.1.1, WCAG 1.3.1, WCAG 1.3.2, WCAG 2.1.1, WCAG 4.1.2 on document-pdf in the tested states. A broader conformance decision must also account for every applicable target in the declared scope, complete processes, accessibility-supported use and the other WCAG conformance requirements.",
    "why_it_matters": "A structurally invalid or functionally unusable PDF can expose the wrong reading order, omit content, prevent navigation or make forms and controls unusable. The procedure is necessary because detect PDF/UA-1 failures and functional accessibility barriers in the exact immutable PDF artifact and the result can otherwise conceal a material barrier for the affected people named here."
  },
  "requirement_mappings": [
    {
      "source_id": "W3C-WCAG22",
      "requirement_id": "1.1.1",
      "requirement_level": "AA",
      "requirement_type": "secondary",
      "coverage_type": "partial",
      "canonical_source": "https://www.w3.org/TR/WCAG22/",
      "source_status": "W3C Recommendation",
      "source_version_or_publication_date": "WCAG 2.2; 12 December 2024 Recommendation",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Secondary WCAG relationship: the PDF evidence may support the mapped criterion for the assessed file.",
      "limitations": "This PDF/UA protocol review observes Run the PDF/UA-1 Matterhorn 1.1 protocol in the recorded document-pdf environment. Use the linked WCAG 1.1.1 conformance procedure to evaluate all normative parts of WCAG 1.1.1 across the declared scope.",
      "dependent_fields": [
        "applicability_model",
        "normative_exceptions",
        "steps",
        "decision_logic"
      ]
    },
    {
      "source_id": "W3C-WCAG22",
      "requirement_id": "1.3.1",
      "requirement_level": "AA",
      "requirement_type": "secondary",
      "coverage_type": "partial",
      "canonical_source": "https://www.w3.org/TR/WCAG22/",
      "source_status": "W3C Recommendation",
      "source_version_or_publication_date": "WCAG 2.2; 12 December 2024 Recommendation",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Secondary WCAG relationship: the PDF evidence may support the mapped criterion for the assessed file.",
      "limitations": "This PDF/UA protocol review observes Run the PDF/UA-1 Matterhorn 1.1 protocol in the recorded document-pdf environment. Use the linked WCAG 1.3.1 conformance procedure to evaluate all normative parts of WCAG 1.3.1 across the declared scope.",
      "dependent_fields": [
        "applicability_model",
        "normative_exceptions",
        "steps",
        "decision_logic"
      ]
    },
    {
      "source_id": "W3C-WCAG22",
      "requirement_id": "1.3.2",
      "requirement_level": "AA",
      "requirement_type": "secondary",
      "coverage_type": "partial",
      "canonical_source": "https://www.w3.org/TR/WCAG22/",
      "source_status": "W3C Recommendation",
      "source_version_or_publication_date": "WCAG 2.2; 12 December 2024 Recommendation",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Secondary WCAG relationship: the PDF evidence may support the mapped criterion for the assessed file.",
      "limitations": "This PDF/UA protocol review observes Run the PDF/UA-1 Matterhorn 1.1 protocol in the recorded document-pdf environment. Use the linked WCAG 1.3.2 conformance procedure to evaluate all normative parts of WCAG 1.3.2 across the declared scope.",
      "dependent_fields": [
        "applicability_model",
        "normative_exceptions",
        "steps",
        "decision_logic"
      ]
    },
    {
      "source_id": "W3C-WCAG22",
      "requirement_id": "2.1.1",
      "requirement_level": "AA",
      "requirement_type": "secondary",
      "coverage_type": "partial",
      "canonical_source": "https://www.w3.org/TR/WCAG22/",
      "source_status": "W3C Recommendation",
      "source_version_or_publication_date": "WCAG 2.2; 12 December 2024 Recommendation",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Secondary WCAG relationship: the PDF evidence may support the mapped criterion for the assessed file.",
      "limitations": "This PDF/UA protocol review observes Run the PDF/UA-1 Matterhorn 1.1 protocol in the recorded document-pdf environment. Use the linked WCAG 2.1.1 conformance procedure to evaluate all normative parts of WCAG 2.1.1 across the declared scope.",
      "dependent_fields": [
        "applicability_model",
        "normative_exceptions",
        "steps",
        "decision_logic"
      ]
    },
    {
      "source_id": "W3C-WCAG22",
      "requirement_id": "4.1.2",
      "requirement_level": "AA",
      "requirement_type": "secondary",
      "coverage_type": "partial",
      "canonical_source": "https://www.w3.org/TR/WCAG22/",
      "source_status": "W3C Recommendation",
      "source_version_or_publication_date": "WCAG 2.2; 12 December 2024 Recommendation",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Secondary WCAG relationship: the PDF evidence may support the mapped criterion for the assessed file.",
      "limitations": "This PDF/UA protocol review observes Run the PDF/UA-1 Matterhorn 1.1 protocol in the recorded document-pdf environment. Use the linked WCAG 4.1.2 conformance procedure to evaluate all normative parts of WCAG 4.1.2 across the declared scope.",
      "dependent_fields": [
        "applicability_model",
        "normative_exceptions",
        "steps",
        "decision_logic"
      ]
    },
    {
      "source_id": "W3C-WCAG2ICT",
      "requirement_id": "W3C-WCAG2ICT",
      "requirement_level": "informative",
      "requirement_type": "advisory",
      "coverage_type": "supporting",
      "canonical_source": "https://www.w3.org/TR/wcag2ict-22/",
      "source_status": "living_guidance",
      "source_version_or_publication_date": "Current first-party publication; exact version pending source review",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Supporting source. Procedure-level content review remains recorded separately.",
      "limitations": "This source does not override WCAG or create an additional WCAG conformance requirement.",
      "dependent_fields": [
        "prerequisites",
        "environment",
        "steps"
      ]
    },
    {
      "source_id": "W3C-PDF-TECHNIQUES",
      "requirement_id": "W3C-PDF-TECHNIQUES",
      "requirement_level": "informative",
      "requirement_type": "advisory",
      "coverage_type": "supporting",
      "canonical_source": "https://www.w3.org/WAI/WCAG22/Techniques/#pdf",
      "source_status": "living_guidance",
      "source_version_or_publication_date": "Current first-party publication; exact version pending source review",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Supporting source. Procedure-level content review remains recorded separately.",
      "limitations": "This source does not override WCAG or create an additional WCAG conformance requirement.",
      "dependent_fields": [
        "prerequisites",
        "environment",
        "steps"
      ]
    },
    {
      "source_id": "PDFASSOC-MATTERHORN-1.1",
      "requirement_id": "PDFASSOC-MATTERHORN-1.1",
      "requirement_level": "informative",
      "requirement_type": "advisory",
      "coverage_type": "supporting",
      "canonical_source": "https://pdfa.org/resource/the-matterhorn-protocol/",
      "source_status": "industry_guidance",
      "source_version_or_publication_date": "Matterhorn Protocol 1.1; April 2021",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Supporting source. Procedure-level content review remains recorded separately.",
      "limitations": "This source does not override WCAG or create an additional WCAG conformance requirement.",
      "dependent_fields": [
        "prerequisites",
        "environment",
        "steps"
      ]
    },
    {
      "source_id": "PDFASSOC-PDFUA",
      "requirement_id": "PDFASSOC-PDFUA",
      "requirement_level": "informative",
      "requirement_type": "advisory",
      "coverage_type": "supporting",
      "canonical_source": "https://pdfa.org/resource/pdfua-in-a-nutshell/",
      "source_status": "industry_guidance",
      "source_version_or_publication_date": "Current first-party publication; exact version pending source review",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Supporting source. Procedure-level content review remains recorded separately.",
      "limitations": "This source does not override WCAG or create an additional WCAG conformance requirement.",
      "dependent_fields": [
        "prerequisites",
        "environment",
        "steps"
      ]
    },
    {
      "source_id": "W3C-WCAG22-TECHNIQUES",
      "requirement_id": "W3C-WCAG22-TECHNIQUES",
      "requirement_level": "informative",
      "requirement_type": "advisory",
      "coverage_type": "supporting",
      "canonical_source": "https://www.w3.org/WAI/WCAG22/Techniques/",
      "source_status": "living_guidance",
      "source_version_or_publication_date": "Techniques for WCAG 2.2",
      "date_verified": "2026-08-27",
      "reviewer_notes": "Supporting source. Procedure-level content review remains recorded separately.",
      "limitations": "This source does not override WCAG or create an additional WCAG conformance requirement.",
      "dependent_fields": [
        "prerequisites",
        "environment",
        "steps"
      ]
    },
    {
      "source_id": "ISO-14289-1-2014",
      "requirement_id": "ISO 14289-1:2014",
      "requirement_level": "PDF/UA-1",
      "requirement_type": "conformance",
      "coverage_type": "partial",
      "canonical_source": "https://www.iso.org/standard/64599.html",
      "source_status": "international_standard",
      "source_version_or_publication_date": "2014",
      "date_verified": "2026-08-04",
      "reviewer_notes": "Normative PDF/UA-1 basis. Apply only when the checksum-identified file claims or is being assessed against PDF/UA-1.",
      "limitations": "The public catalogue cannot reproduce the licensed ISO text. Matterhorn 1.1 and checker evidence support but do not alone establish complete PDF/UA-1 conformance.",
      "dependent_fields": [
        "pdfua_scope",
        "steps",
        "decision_logic",
        "evidence_specification"
      ]
    }
  ],
  "applicability_model": {
    "test_subject": "One immutable PDF file identified by cryptographic checksum and explicitly assessed against PDF/UA-1 (ISO 14289-1:2014).",
    "test_targets": [
      "All 136 Matterhorn Protocol 1.1 failure conditions for the exact file.",
      "The file's manual tag-tree, reading-order, keyboard, reflow and real assistive-technology behaviour."
    ],
    "objective_questions": [
      "Is the final file immutable and checksum-identified?",
      "Does the assessment target PDF/UA-1 and ISO 14289-1:2014?",
      "Is the PDF version and PDF/UA identifier recorded?",
      "Are qualified checker, manual inspection and real assistive-technology environments available?"
    ],
    "subjective_judgements": [
      "Matterhorn conditions requiring interpretation and functional reading-order decisions require explicit evidence and a distinct competent review; unresolved ambiguity is cantTell."
    ],
    "inapplicability_conditions": [
      "The subject is not a PDF file.",
      "The assessment target is PDF/UA-2 rather than PDF/UA-1; use a PDF/UA-2-specific procedure and protocol."
    ],
    "scope_exclusions": [
      "PDF/UA-2 and ISO 14289-2:2024.",
      "Any revised file with a different checksum.",
      "WCAG criteria not evidenced by the recorded assessment."
    ],
    "required_states_and_variations": [
      "Every page, annotation, form state and unique tagged structure required by the protocol.",
      "Keyboard, reflow and real screen-reader reading for applicable content and complete processes."
    ],
    "complete_process_dependencies": "Complete every PDF form, link, navigation and interactive process represented in the file, including errors and confirmation where applicable.",
    "conforming_alternate_version_considerations": "A conforming alternate version can affect a WCAG report only when all WCAG conformance conditions are verified separately. It does not erase a platform or usability observation."
  },
  "normative_exceptions": [],
  "normative_exceptions_absent_reason": "Exceptions and applicability are decided condition by condition under ISO 14289-1:2014 and Matterhorn Protocol 1.1. This wrapper procedure does not invent an additional global exception.",
  "environment": {
    "required_tester_expertise": "PDF/UA specialist",
    "required_platforms": [
      "document-pdf"
    ],
    "minimum_environment_fields": [
      "operating_system",
      "operating_system_version",
      "pdf_viewer",
      "pdf_viewer_version",
      "pdfua_part",
      "pdf_sha256",
      "accessibility_checker",
      "accessibility_checker_version",
      "authoring_or_remediation_tool",
      "authoring_or_remediation_tool_version",
      "assistive_technology",
      "assistive_technology_version",
      "input_method"
    ],
    "product_and_content_version_required": true,
    "viewport_and_orientation_required": true,
    "input_mode_required": true,
    "relevant_settings": [
      "PDF version",
      "PDF/UA identifier",
      "Checker and version",
      "Authoring/export/remediation tool",
      "Viewer",
      "Assistive technology"
    ],
    "known_platform_limitations": [
      "PDF/UA-1 and PDF/UA-2 are separate standards. Checker success and Matterhorn Protocol 1.1 do not establish PDF/UA-2 conformance.",
      "Check relevant browser, tool or assistive-technology release notes before assigning unexpected behaviour to the product.",
      "If responsibility is unclear, record the reproducible behaviour and use cannot tell until it is resolved."
    ],
    "clean_state_requirements": [
      "Complete a known-good calibration in the same environment before product testing.",
      "Start from a recorded clean or known state and preserve any prior preferences, extensions, cache or profile settings that can affect output."
    ],
    "test_data_and_privacy_constraints": [
      "Use authorised synthetic or controlled data.",
      "Do not record credentials, secrets or unnecessary personal data."
    ],
    "coverage_boundary": "PDF/UA-1 and PDF/UA-2 are separate standards. Checker success and Matterhorn Protocol 1.1 do not establish PDF/UA-2 conformance."
  },
  "decision_logic": {
    "target_passed": "All 136 Matterhorn Protocol 1.1 conditions are accounted for with allowed outcomes and methods, no condition is failed or cantTell, required manual PDF/UA-1 checks support the conclusion, and the result is tied to the exact PDF checksum.",
    "target_failed": "At least one applicable PDF/UA-1 condition fails, or manual evidence identifies a PDF/UA-1 failure for the checksum-identified file.",
    "target_inapplicable": "The subject is not PDF/UA-1; PDF/UA-2 is specifically inapplicable to this procedure and requires a different assessment.",
    "target_cant_tell": "A required interpretive condition, licensed-standard interpretation or checker/manual discrepancy cannot be resolved.",
    "target_untested": "The target is applicable, but a required state, environment, action or evidence item was not completed.",
    "aggregation": "All 136 condition outcomes and manual findings remain visible. Any failed or cantTell condition prevents a passed aggregate; untested conditions make the execution incomplete.",
    "wcag_requirement_decision": "PDF/UA-1, WCAG and functional-accessibility decisions remain separate. No PDF/UA-2 decision may be inferred from this procedure.",
    "conforming_alternate_version_effect": "Apply a conforming alternate version only after its WCAG definition and every conformance condition have been verified and recorded; otherwise it does not change the decision.",
    "passed_automation_follow_up": "A passed checker report does not prove that all interpretive conditions, functional behaviour or WCAG requirements pass.",
    "platform_responsibility": "When responsibility is unclear, preserve the reproducible behaviour and environment evidence and use cantTell until a qualified reviewer resolves it.",
    "claim_readiness": "A complete result may become ready_for_review. Schema validity, a passed target or a tool result cannot make it ready_for_scoped_claim without the independent evidence and governance gates."
  },
  "evidence_specification": [
    {
      "evidence_id": "EV1",
      "method": "immutable_file_identity",
      "record": "SHA-256 checksum, filename, size, PDF version, PDF/UA identifier and toolchain.",
      "review_purpose": "Bind all evidence to the exact artifact and ISO part.",
      "privacy_and_security": "Use a redacted extract or evidence reference. Do not include credentials, secrets or unnecessary personal data.",
      "required_for_formal_result": true
    },
    {
      "evidence_id": "EV2",
      "method": "protocol_manifest",
      "record": "All 136 Matterhorn 1.1 condition IDs, methods, outcomes, rationales and evidence references.",
      "review_purpose": "Verify complete protocol accounting.",
      "privacy_and_security": "Use a redacted extract or evidence reference. Do not include credentials, secrets or unnecessary personal data.",
      "required_for_formal_result": true
    },
    {
      "evidence_id": "EV3",
      "method": "checker_export",
      "record": "Qualified checker/version, configuration and unedited exported report.",
      "review_purpose": "Review machine-testable conclusions without treating them as complete proof.",
      "privacy_and_security": "Use a redacted extract or evidence reference. Do not include credentials, secrets or unnecessary personal data.",
      "required_for_formal_result": true
    },
    {
      "evidence_id": "EV4",
      "method": "manual_pdf_review",
      "record": "Tag-tree, content/reading order, semantics, forms, annotations and metadata evidence.",
      "review_purpose": "Verify interpretive and structural findings.",
      "privacy_and_security": "Use a redacted extract or evidence reference. Do not include credentials, secrets or unnecessary personal data.",
      "required_for_formal_result": true
    },
    {
      "evidence_id": "EV5",
      "method": "functional_pdf_review",
      "record": "Viewer, keyboard, reflow and exact real assistive-technology output for unique structures and processes.",
      "review_purpose": "Review practical interoperability and unresolved platform responsibility.",
      "privacy_and_security": "Use a redacted extract or evidence reference. Do not include credentials, secrets or unnecessary personal data.",
      "required_for_formal_result": true
    }
  ],
  "calibration_examples": [
    {
      "example_id": "A11Y-PDFUA-001-EX-PASSED",
      "outcome": "passed",
      "scenario": "The immutable PDF has 136 reconciled Matterhorn 1.1 condition results with no failed or cantTell outcome, and required manual checks support the PDF/UA-1 conclusion.",
      "explanation": "This supports a competently reviewed PDF/UA-1 procedure result for the recorded file and environment only; organisational approval and any WCAG claim remain separate.",
      "fixture_id": "pdfua1-protocol-pass",
      "fixture_version": "1.0.0",
      "machine_testable": true
    },
    {
      "example_id": "A11Y-PDFUA-001-EX-FAILED",
      "outcome": "failed",
      "scenario": "The checker passes its covered conditions, but manual tag-tree inspection finds an applicable heading condition is violated.",
      "explanation": "Manual evidence identifies a failure; the checker does not override it.",
      "fixture_id": "pdfua1-manual-fail",
      "fixture_version": "1.0.0",
      "machine_testable": true
    },
    {
      "example_id": "A11Y-PDFUA-001-EX-INAPPLICABLE",
      "outcome": "inapplicable",
      "scenario": "The file identifies PDF/UA-2 and PDF 2.0, not PDF/UA-1.",
      "explanation": "This PDF/UA-1 procedure is inapplicable; its evidence cannot be reused for PDF/UA-2.",
      "fixture_id": "",
      "fixture_version": "",
      "machine_testable": false
    },
    {
      "example_id": "A11Y-PDFUA-001-EX-CANTTELL",
      "outcome": "cantTell",
      "scenario": "An interpretive condition conflicts with the checker output and a competent review cannot resolve it from the licensed-standard evidence.",
      "explanation": "The unresolved material dispute prevents a passed result.",
      "fixture_id": "",
      "fixture_version": "",
      "machine_testable": false
    },
    {
      "example_id": "A11Y-PDFUA-001-EX-UNTESTED",
      "outcome": "untested",
      "scenario": "Only machine-testable checker conditions were run; interpretive and functional checks are incomplete.",
      "explanation": "A partial checker run is untested for the complete procedure.",
      "fixture_id": "",
      "fixture_version": "",
      "machine_testable": false
    }
  ],
  "review_record": {
    "author": "",
    "method_reviewer": "",
    "independent_standards_reviewer": "",
    "accessibility_ui_reviewer": "",
    "author_date": "",
    "method_review_date": "",
    "standards_review_date": "",
    "ui_review_date": "",
    "source_versions_reviewed": [],
    "exceptions_reviewed": false,
    "known_limitations": [
      "This is a source-checked reference implementation subject to independent method and standards agent verification; formal approval remains separate."
    ],
    "open_issues": [
      "Execution requires authorised access to ISO 14289-1:2014, a qualified PDF/UA checker, the declared PDF applications and real assistive technology where required. A distinct competent review must retain unresolved interpretation as cantTell.",
      "No checker report, PDF checksum or real PDF execution is claimed by this catalogue entry."
    ],
    "decision": "pending",
    "next_review_date": "",
    "status_transition_reason": "",
    "release_gate_id": "",
    "release_gate_completed_at": "",
    "approval_authority": "",
    "approval_date": ""
  },
  "privacy_and_security": {
    "browser_storage": "Worksheet data is stored only in this browser's local storage until the user exports or clears it.",
    "network_transmission": "The static library does not upload worksheet data.",
    "data_minimisation": "Record only evidence necessary to reproduce and review the decision.",
    "redaction": "Remove credentials, secrets and unnecessary personal or participant data before export or sharing.",
    "retention_and_deletion": "Apply the engagement retention schedule and clear local browser data when it is no longer required."
  },
  "version_history": [
    {
      "version": "2026.08.27-rc.9",
      "change": "Reworked for plain language, case-focused steps, scoped evidence and transparent draft review status."
    },
    {
      "version": "2026.08.27-rc.9",
      "change": "Migrated to professional catalogue schema v3 with separated outcomes, structured authority, applicability, evidence, decision and review records."
    },
    {
      "version": "2026.08.27-rc.9",
      "change": "Specialist procedure mapped to its task family and current first-party platform guidance and checked for internal consistency; competent review and real execution remain separate."
    },
    {
      "version": "2026.08.27-rc.9",
      "change": "Replaced migrated boilerplate with a case-specific reference implementation and completed independent agent content verification."
    },
    {
      "version": "2026.08.27-rc.9",
      "change": "Rewritten as an atomic professional-delivery flagship with component effort guidance and a complete representative worked example."
    },
    {
      "version": "2026.08.27-rc.9",
      "change": "Procedure guidance and presentation simplified without changing draft governance status."
    }
  ],
  "migration": {
    "from_schema": "accessibility-test-catalog.v2",
    "from_procedure_version": "2026.08.04.1",
    "migrated_at": "2026-08-27",
    "content_review_state": "flagship_operational_rewrite_agent_verified",
    "stable_identifier_preserved": true,
    "legacy_url_preserved": true,
    "delivery_model": "professional_delivery_v2",
    "agent_content_validation": {
      "status": "complete",
      "method": "case_specific_semantic_and_operational_checks_v1",
      "checked_fields": [
        "target",
        "state",
        "tool",
        "action",
        "expected_observation",
        "failure_observation",
        "evidence",
        "outcome_rules",
        "claim_boundary",
        "compact_examples"
      ],
      "human_approval_effect": "none"
    }
  },
  "test_type": "conformance",
  "related_procedures": [
    "A11Y-WCAG-001",
    "A11Y-WCAG-007",
    "A11Y-WCAG-008",
    "A11Y-WCAG-021",
    "A11Y-WCAG-054"
  ],
  "platform_validation": {
    "required": true,
    "evidence_status": "not_executed",
    "real_device_or_at_claimed": false,
    "required_environment_ids": [
      "document-pdf"
    ],
    "calibration_required": true,
    "evidence_refs": [],
    "limitations": "PDF/UA-1 and PDF/UA-2 are separate standards. Checker success and Matterhorn Protocol 1.1 do not establish PDF/UA-2 conformance."
  },
  "pdfua_scope": {
    "iso_part": "PDF/UA-1",
    "iso_standard": "ISO 14289-1:2014",
    "protocol": "Matterhorn Protocol 1.1",
    "claim_scope": "Complete PDF/UA-1 protocol evidence support; never PDF/UA-2 evidence.",
    "execution_evidence_status": "not_executed"
  },
  "library_layer": "composite",
  "effort_guidance": {
    "unit": "minutes",
    "setup": {
      "typical": 25,
      "includes": "Confirm scope and target, prepare safe data, establish the required state and record the tool or environment version."
    },
    "per_target_execution": {
      "typical": 90,
      "includes": "Perform the procedure once for one target in its selected states; this excludes remediation and retesting."
    },
    "evidence_capture": {
      "typical": 30,
      "includes": "Capture, name and cross-reference the minimum reproducible evidence while removing unnecessary personal or secret data."
    },
    "technical_review": {
      "typical": 35,
      "includes": "Check applicability, observations, outcome logic, evidence sufficiency and report wording before issue publication."
    },
    "typical_total_range": {
      "minimum": 180,
      "maximum": 261
    },
    "assumptions": "one checksum-frozen PDF with a valid protocol manifest; page count, unique structures and manual Matterhorn conditions dominate effort",
    "variation": "Add a new per-target execution and evidence allowance for each additional target class or state that could produce a different result. Add setup time for each distinct environment.",
    "excludes": "Client coordination, inaccessible-environment recovery, recruitment, legal review, remediation implementation and waiting time unless the procedure states otherwise."
  },
  "worked_examples": [
    {
      "example_id": "A11Y-PDFUA-001-WORKED-001",
      "example_kind": "representative_synthetic_example",
      "context": "Synthetic two-page procurement decision PDF, checksum `example-sha256-4b83…`, represented as a training fixture rather than a certified document.",
      "inspected": "PDF/UA-1 identification, checker report, 136-condition manifest, heading/list/table tags, reading order, figure alternative and keyboard link operation.",
      "observed_output": "The example checker passed machine conditions, but manual inspection found table header cells tagged as data cells and one meaningful chart marked as an artifact.",
      "evidence_captured": [
        "EVD-REF-013 fixture checksum and metadata",
        "EVD-REF-014 representative checker report",
        "EVD-REF-015 condition manifest",
        "EVD-REF-016 tag-tree extracts"
      ],
      "tester_reasoning": "Machine success cannot override human-judgement failures. The two structural failures prevent a PDF/UA-1 pass for the represented checksum.",
      "decision": "failed",
      "completed_finding": {
        "finding_id": "FND-REF-004",
        "title": "Procurement table headers and chart semantics are incorrect",
        "severity": "high",
        "user_impact": "Screen-reader users may lose table relationships and the chart's decision context.",
        "evidence_refs": [
          "EVD-REF-013",
          "EVD-REF-014",
          "EVD-REF-015",
          "EVD-REF-016"
        ]
      },
      "remediation_advice": "Retag column/row headers with correct scope/associations, expose the chart as a Figure with an equivalent concise description, regenerate the PDF and create a new checksum-bound execution.",
      "reviewer_feedback": "Reviewer separated the table and figure condition references, retained one combined remediation release because both arise from the export template, and removed a WCAG conformance claim.",
      "final_client_report_wording": "The represented PDF does not meet the sampled PDF/UA-1 conditions: table headers are not identified programmatically and a meaningful chart is marked as an artifact. Correct the source template, regenerate the PDF and repeat the complete checksum-bound protocol.",
      "retest_outcome": "RT-REF-005: representative remediated fixture received a new checksum; the affected manual conditions pass, but no certified PDF/UA claim is made.",
      "claim_boundary": "This is a representative, synthetic worked example for training and calibration. It is not evidence from a client product, participant or real assistive-technology execution."
    }
  ]
}
