What the standard says
For web pages that cause legal commitments or financial transactions for the user to occur, that modify or delete user-controllable data in data storage systems, or that submit user test responses, at least one of the following is true:
Why it matters
A mis-click that spends money or deletes an account should not be final.
What a failure looks like
- failsA one-click irreversible purchase with no review step.
- failsAccount deletion with no confirmation.
How to fix it
- doAdd a review step, an undo window, or an explicit confirmation. Any one of the three satisfies it.
How A11ySignal checks it
manual
No automated rule can judge this criterion, and we will not pretend otherwise. A clean scan does not mean 3.3.4 passes — it means nothing we can measure fails. This one needs a person.