=== e-iT Accessibility Remediation ===
Requires at least: 6.0
Requires PHP: 7.4
Stable tag: 0.3.2
License: GPLv2 or later

Development add-on, distributed separately from the free WordPress.org plugin.
Requires PHP OpenSSL. Integrates with e-iT Accessibility Tools when active;
otherwise shows its own accessible-view switch only on pages covered by a
verified profile.

Only an intact, perpetual, site-bound RS256 profile signed by the e-iT service
can display the accessible-view switch. This package contains no PRIVATE signing key,
payment key or OpenAI key. No remote API calls run on installation.

The service verification PUBLIC key is bundled. The corresponding private key
is stored separately and must be provisioned securely before profile delivery.
Test payments cannot issue production profiles. No private key is distributed.
Profile import is admin-only and nonce protected; this is an operator development
workflow, not a completed customer purchase/activation integration.

Rules only support exact observed targets, text attributes, opaque hexadecimal
foreground/background colors, and same-site PDF links. They never execute AI
code, replace uploaded PDFs, bypass CAPTCHA or submit forms. Each operation
checks its original value and text fingerprint. Changed or missing targets
are skipped and flagged for review; unaffected purchased corrections remain
available. New content is not automatically covered by an earlier purchase. User on/off restores original attributes and inline styles.

A new PDF must be prepared and checked separately. This add-on only switches
an approved original PDF link to a prepared same-site alternative.

Not released for sale. Server-side purchase verification, production key
provisioning, CDN behavior and real WordPress integration
tests are required before release. Automated results do not certify WCAG.

Schema 2 profiles have explicit perpetual access and no expiry date. Older
development schema 1 profiles require reissuance, not another purchase.
The temporary purchase verification gate is checked only when issuing a profile;
it does not expire installed corrections. New paid work requires customer approval.
The five-day included recheck window does not limit installed corrections.

Later profile imports retain earlier signed coverage. Conflicting exact targets
use the newer profile; unchanged targets remain available. A bounded local
archive requires support consolidation when full, without deleting coverage.
Image fingerprints include src/srcset to avoid reusing descriptions after
an image source changes. Replacing bytes at an unchanged URL requires a new
content inspection; local DOM checks are not a continuous full-site audit.

Optional paid add-on updates require administrator opt-in and an authenticated
site connection. Each download requires independent purchase verification and
a signed manifest with a matching package SHA-256. Update checks transmit the
site identifier, add-on slug and installed version to the e-iT service.
No payment is made by an update check. WordPress controls auto-installation.
TEST releases require separate explicit opt-in; installed corrections do not expire.
Service/privacy information: Settings > e-iT Accessibility > Help & terms (Audit add-on).
Contact: info@it-e.gr.

Version 0.3.2 accepts earlier schema-2 perpetual profiles and new schema-3 profiles.
Author-provided names/descriptions in new profiles are bound to their observed
source text; changing that text requires re-verification instead of applying
an obsolete correction. Unknown image meanings and arbitrary PDF reconstruction
are not automatically approved.
