/kb-cognitive-accessibility

name: kb-cognitive-accessibility
description: Reference data, not a reviewer. Review UI for cognitive load, plain language clarity, and WCAG 2.2 cognitive SC (3.3.7, 3.3.8, 3.3.9). Includes COGA guidance, reading level, auth patterns, and timeout warnings.
license: MIT
disable-model-invocation: true
user-invocable: false
metadata:
  tier: reference
  domain: cross-cutting
  output: none
  effort: low
  title: Cognitive Accessibility

Skill: Cognitive Accessibility

**Domain:** Cognitive, learning, and neurological accessibility **WCAG scope:** WCAG 2.2 AA + key AAA, COGA W3C guidance **Agents that use this skill:** `cognitive-accessibility`, `web-accessibility-wizard`, `accessibility-lead`, `forms-specialist`

---

Purpose

This skill provides reference tables, scoring formulas, and evaluation patterns for cognitive accessibility review. It covers:

• WCAG 2.2 success criteria with cognitive accessibility relevance
• COGA (Cognitive Accessibility) W3C guidance mapping
• Plain language analysis techniques
• Reading level computation
• Authentication pattern analysis (3.3.8 / 3.3.9)
• Redundant entry detection (3.3.7)
• Timeout and session management analysis

---

WCAG 2.2 Cognitive Accessibility Criteria Reference

Level A

Each SC, with name, what to check and common failures.

| SC | Name | What to Check | Common Failures | |----|------|--------------|-----------------| | 2.2.1 | Timing Adjustable | Session timeouts warn >=20s before expiry; user can extend >=10x or disable | Redirect without warning; extension UI exists but does nothing | | 2.2.2 | Pause, Stop, Hide | Auto-moving/blinking content >5s has pause/stop control | Blinking backgrounds, marquee text, auto-scrolling feeds | | 2.3.1 | Three Flashes | No content flashes >3 Hz (absolute) | Transition animations that strobe | | 3.3.1 | Error Identification | Error identified in text, not just color | Red border with no error message | | 3.3.2 | Labels or Instructions | Format requirements shown *before* error, required fields identified upfront | Format hint only in error state; asterisks with no legend | | 3.3.7 | Redundant Entry *(2.2 new)* | Previously-entered info not re-requested in same session unless security-essential or stale | Email re-entered on step 3; billing address not pre-filled from shipping |

Level AA

Each SC, with name, what to check and common failures.

| SC | Name | What to Check | Common Failures | |----|------|--------------|-----------------| | 2.4.6 | Headings and Labels | Headings describe content; labels describe input purpose | "Section 1", "Info", "Details" as heading text | | 3.2.3 | Consistent Navigation | Nav appears in same relative order across pages | Footer nav changes order on mobile vs desktop | | 3.2.4 | Consistent Identification | Same-function components have same accessible name across pages | "Search" button on one page, "Find" on another | | 3.3.3 | Error Suggestion | For detected errors, suggest correction when possible/safe | "Invalid email" with no example or format hint | | 3.3.4 | Error Prevention (Legal, Financial) | Review step before irreversible submission; allow reversal or confirmation | One-click purchase with no review screen; no undo for account deletion | | 3.3.8 | Accessible Authentication Min. *(2.2 new)* | Authentication must not require cognitive function test unless an alternative exists | `autocomplete="off"` on login forms; paste disabled in password fields; transcription-only CAPTCHA |

Level AAA (Advisory - Review and Report)

Each SC, with name and what to check.

| SC | Name | What to Check | |----|------|--------------| | 2.2.6 | Timeouts | Warn about data loss from inactivity at start of session | | 3.1.3 | Unusual Words | Jargon/idiom defined on first use | | 3.1.4 | Abbreviations | Abbreviations expanded on first use | | 3.1.5 | Reading Level | General content <= Grade 8; see formula below | | 3.3.9 | Accessible Authentication Enhanced *(2.2 new)* | No cognitive function test *at all* (removes the object-recognition exception) |

---

Authentication Pattern Analysis (3.3.8 / 3.3.9)

Failing Patterns

Each pattern, with its failure and SC.

| Pattern | Failure | SC | |---------|---------|-----| | `autocomplete="off"` on `type="password"` | Blocks password manager paste | 3.3.8 | | JavaScript `onpaste="return false"` on password input | Blocks manual paste | 3.3.8 | | CAPTCHA with only distorted text option | No cognitive-free alternative | 3.3.8 | | Security question requiring exact recall | Pure memory test | 3.3.8 | | Re-entering full card number on the same session order flow | Redundant cognitive work | 3.3.7 |

Passing Patterns

Each pattern, with why it passes.

| Pattern | Why It Passes | |---------|--------------| | `<input type="password" autocomplete="current-password">` | Allows password manager autofill | | Passkey/biometric as login alternative | No cognitive function test | | "Same as shipping address" checkbox on billing form | Eliminates redundant entry | | CAPTCHA with audio alternative | Provides non-visual option | | Email magic link with no password required | Removes cognitive test entirely |

---

Redundant Entry Patterns (3.3.7)

Detection Checklist

In multi-step forms or wizards:

1. Map all input fields across all steps 2. Flag any field that requests information already collected in an earlier step 3. Exception: security confirmation (password confirm) and data that can become stale (current vs. new address)

Common Violations

Each step 1 collect, with its step 3 also asks and violation.

| Step 1 Collects | Step 3 Also Asks | Violation? | |----------------|-----------------|-----------| | Email address | Email for confirmation | Yes - unless security-essential | | Full name | Billing name | Yes - should pre-fill | | Shipping address | Billing address | Yes - should offer "same as shipping" | | Date of birth | DOB for age verification | Yes - same session, same data | | Pa