Skip to content

PointSav Documentation

The engineering library for the PointSav platform — operating systems and services for regulated businesses that own their data, their AI, and their record-keeping outright. Where the monorepo holds the code, this wiki holds the reasoning: architecture, services, security, and the governance commitments that bind future development.

Historical revision — this record as it stood on 6 August 2026, not the current version. View the current record →

Design tokens and accessibility conformance

Most accessibility work is retroactive: build the interface, then audit it. A checker crawls the page, flags a focus ring that vanished or a touch target that shrank, and someone traces the defect back through the CSS to whichever component introduced it. The audit finds the failure after it ships, one page at a time, and finds it again the next time the same mistake is made somewhere else.

The PointSav Design System takes the position that the values accessibility conformance depends on — a minimum touch target, a focus-ring color, the contrast relationship between two colors — are design tokens like any other, and belong in the same versioned token graph as color, spacing, and type. When the requirement is a token, every component that references the token satisfies the requirement structurally. The audit question changes from "does every button on every page happen to be big enough?" to "does the button recipe reference the target-size token?" — a question with one answer, checked in one place.

Accessibility values are tokens

Correction (2026-08-02): several specific claims below don't exist or are wrong. Neither a11y-target-min nor cds-focus/cds-positive-text/cds-positive-bg exist anywhere in the real token files — the cds- string appears only as an unrelated, already-flagged-as-inconsistent prefix in two component style docs. The cited contrast triple (19.2:1/8.2:1/6.7:1) doesn't match the real published figures in dtcg-vault/elements/color/overview.md (ink-primary/surface-base 14.7:1, ink-on-interactive/interactive-primary 7.4:1, ink-secondary/surface-base 8.9:1). Most significant: this article claims the Button's shipped spec shows "text contrast at 7.4:1... passing SC 1.4.6 Contrast Enhanced, AAA" with a component-wide "conformance target of WCAG 2.2 AAA" — the real dtcg-vault/components/button/accessibility.md states plainly that the primary variant is 6.66:1 and does not meet the 7:1 AAA floor (AA only), and the real target is "WCAG 2.2 AA, AAA where achievable," not blanket AAA. That real file already carries its own dated correction (2026-07-15) fixing an earlier false blanket-AAA claim — this wiki article repeats the exact mistake the source has already corrected once. Flagged, not resolved — this is an accessibility-conformance claim and should be synced to the real (already-correct) source, not left standing.

Two tokens anchor the pattern. a11y-target-min is a primitive token whose value is 44 pixels — the minimum target dimension defined by WCAG Success Criterion 2.5.5, Target Size (Enhanced), a Level AAA criterion requiring pointer targets of at least 44 by 44 CSS pixels. cds-focus is a semantic token naming the focus-ring color; it resolves to a primitive from the blue scale rather than carrying a hex value of its own, so a theme change propagates to every focus ring at once.

The external requirements these tokens encode are worth stating precisely, because the levels differ. WCAG 2.2, published as a W3C Recommendation in October 2023, added SC 2.5.8 Target Size (Minimum) at Level AA — 24 by 24 CSS pixels, with exceptions for spacing and inline targets. The pre-existing SC 2.5.5 at Level AAA requires 44 by 44 with no spacing exception. This design system tokenizes the stricter AAA value. Focus indicators are governed by two criteria working together: SC 2.4.7 Focus Visible (Level AA) requires that a visible indicator exist, and SC 1.4.11 Non-text Contrast (Level AA) requires that the indicator — like any visual information identifying a component's state — hold at least 3:1 contrast against adjacent colors.

The tier chain carries the requirement

The system's tokens resolve in three tiers — primitive, semantic, component — and an accessibility requirement travels down the chain the same way a brand color does:

a11y-target-min (primitive, 44px, WCAG 2.5.5 AAA)
  → cds-focus (semantic, focus-ring color)
    → btn-min-height (component: {a11y-target-min}, applied to every button)

The component tier never restates the number. btn-min-height is a reference, {a11y-target-min}, not a second copy of "44px" that could drift when the first copy changes. If the organization ever adopted a different target-size policy, the change would be made once, at the primitive, and every component consuming the chain would follow — exactly the maintenance property that motivates tokens for color, applied to a conformance value instead.

Contrast pairs are computed from the graph

Because color tokens are data, the contrast relationships between them are computable rather than assertable. The system's foundations reference presents accessibility pairs — a foreground token against a background token — with ratios computed directly from the token hex values using the WCAG relative-luminance formula: primary text on the default background at roughly 19.2:1 (AAA), secondary text at roughly 8.2:1 (AAA), the primary link color at roughly 6.7:1 (AA).

The fourth published pair is the honest one: cds-positive-text on cds-positive-bg computes to roughly 4.3:1, below the 4.5:1 AA threshold for normal text at the current values, and it is shown flagged rather than quietly adjusted. A registry that computes conformance from its own data surfaces regressions the same way it surfaces everything else. Two caveats travel with these numbers, stated on the reference page itself and repeated here: the ratios are illustrative of the pattern, not a substitute for a live audit tool, and the flagged pair is an open item, not a resolved one.

A component inherits its conformance

The Button component's shipped accessibility specification shows what the token approach produces at the component tier. Its conformance target is WCAG 2.2 AAA, and its conformance table resolves criterion by criterion to token-derived facts: text contrast at 7.4:1 against the primary variant's background (passing SC 1.4.6 Contrast Enhanced, AAA); a 2-pixel focus ring with a 2-pixel offset holding the 3:1 minimum of SC 1.4.11; and target size met by arithmetic — the button renders at 40 pixels of height, and the focus ring plus offset add 2 pixels per side, bringing the activatable area to the 44 pixels SC 2.5.5 requires.

The same specification shows requirements that are behavioral rather than numeric being carried by tokens where a token can carry them: the CSS transition-duration value resolves to zero when prefers-reduced-motion: reduce matches, so consumers get reduced-motion support without writing any code. And it records the rules no token can enforce — no state communicated by color alone, native <button> elements rather than role="button" on a <div>, no focus ring ever removed without a replacement — as named anti-patterns in the specification, adjacent to the token references rather than in a separate document that drifts.

The specification's own closing line is the right note of candor: a per-component WCAG audit endpoint is future work, and until it exists, the written specification is the canonical conformance statement.

What structural enforcement does not replace

Stated plainly. The conformance claims above are self-declared by the design system's maintainers against the cited criteria; no third-party accessibility audit of the system has been performed. Tokens enforce the values a criterion depends on, not the criterion itself — a component can reference a11y-target-min and still fail keyboard users through broken markup, and no token expresses the judgment-dependent criteria around content, labels, and context. Assistive-technology testing with real screen readers remains manual. The structural claim is narrower and, for that reason, defensible: values that used to be re-decided per component are now decided once, in data, where checking them is cheap.

Prior art and licensing

The three-tier token architecture this pattern rides on is well established, not a PointSav invention: IBM's Carbon documents global, alias, and component token tiers, and Google's Material Design 3 documents reference, system, and component token classes. Both systems publish accessibility guidance alongside their tokens. What this article describes is the application of that shared tier structure to conformance values specifically — target size and focus color as first-class tokens with the WCAG criterion recorded in the token's own description field.

On licensing, precision matters because two different licenses are in play. The token data itself — a11y-target-min, cds-focus, the DTCG token files and component recipes that reference them — ships in the pointsav-design-system repository under the Apache-2.0 license. The text of this article is published in the documentation wiki under CC BY 4.0. Reusing the tokens means complying with Apache-2.0; reusing this article's prose means complying with CC BY 4.0. Neither license governs the other artifact.


This article is background for readers of the PointSav Design System documentation, ahead of the per-component accessibility specifications and the foundations token reference. See also: the primitive vocabulary article for the full token naming scheme, and the design philosophy article for the research-rationale layer that records why each accessibility decision was made.

Important Information

Corporate structure. PointSav Digital Systems ("PointSav") is currently a trade name of Woodfine Capital Projects Inc. ("Woodfine"), planned to become a wholly-owned Woodfine subsidiary upon incorporation. PointSav does not itself offer, sell, or solicit any security. Any securities offering associated with Woodfine's real-property direct-hold solutions is made exclusively by Woodfine, and only by means of the applicable Private Placement Memorandum.

No investment advice. This wiki's content is provided for engineering, operational, research, and development purposes. Nothing on this wiki constitutes investment advice or a solicitation to invest in any Woodfine partnership or direct-hold solution.

Intellectual property. The PointSav name, trade name, wordmark, and marks, together with all current and future PointSav- and Totebox-branded products, services, and offerings — and the software, source code, documentation, design system, and all related materials — are proprietary to Woodfine and its affiliates, except for components identified as open source. No rights are granted except as expressly set out in a written license or agreement. The full trademark notice appears in the footer of every page on this site.

Open source components. Portions of the platform are made available under permissive open-source licenses identified in the accompanying repository. Use of those components is governed by their respective license terms.

No warranty; informational use. Content on this wiki is provided for general informational purposes only and does not constitute a representation, warranty, or commitment with respect to product functionality, availability, pricing, or roadmap. Some articles describe planned or intended features, capabilities, and milestones — language such as "planned," "intended," "targeted," "may," and "expected" marks this forward-looking content, which is subject to change and does not constitute a commitment regarding future performance.

Confidentiality. Where an article describes an operational or deployment detail that is not intended for public disclosure, that article is not published on this wiki. Content here is general-purpose engineering documentation, not customer-specific configuration.

Jurisdiction. Woodfine Capital Projects Inc. is organized in British Columbia, Canada. References to the Sovereign Data Foundation on this wiki describe a planned or intended initiative only, not a current equity holder or active governance body.

Changes to this notice. PointSav may update this notice from time to time; the version posted on this page governs.

Not a filing system. This wiki is not a securities filing system, an electronic disclosure repository, or a substitute for SEDAR+ or any other regulatory filing system. Formal securities filings are made through the applicable regulatory filing system, not through this wiki.

Full disclaimer. This notice supplements, and does not replace, the full Disclaimers article. In the event of any conflict, the full Disclaimers article governs.

Read the full disclaimer →