COVERAGE AND LIMITATIONS

Machine findings.
Human decisions.

Limited browser precheck

The browser worker reads page count, document title, language and tag-tree presence. Selected bytes are not uploaded. It does not inspect all protected-file features or run veraPDF. A parser error produces unsupported, never a pass.

Private full checking

The private Python worker inspects source restrictions and retains an immutable source hash. Pinned veraPDF 1.30.2 runs PDF/UA-1 machine checks in an isolated worker. Positive and negative controls verify validator execution. Unavailable, partial and failed execution states stay visible; they never become a successful check.

Reviewed repair

Source-bound plans support reviewed headings, paragraphs, direct image figures, decorative artifacts, flat lists and multiple pages within the supported scope. Repair adds tags while preserving source content. Candidates require independent validation and exact text, font/image/link/annotation and 144 dpi raster fidelity checks, followed by explicit user acceptance of unresolved human checks. Existing tag-tree preservation is limited to metadata-only edits. Uncertain mappings and unsupported layouts block repair.

What people must check

Reading order, headings, meaningful descriptions, links, lists, tables and navigation with supported readers and assistive technology. Neither model success nor machine-rule pass proves usable semantics or statutory compliance.

Models and privacy

Pinned Docling 2.133.0/Heron runs offline on our worker and offers unapproved source-bound role hints. It does not approve reading order or semantics. TableFormer stays evaluation-only. Dated GPT-4.1 Mini through OpenRouter/Microsoft Azure provides optional selected-figure drafts after crop/context consent. Our synthetic comparison found factual errors, so every draft needs review, editing or rejection. No description is inserted automatically; the source-bound repair plan requires separate approval.