Home
cd ../playbooks
Developer ToolsIntermediate

Accessibility Engineering for Components

Build accessible UI components at the code level, not just the audit level — 14 concrete engineering principles (focus-visible over bare :focus, roving tabindex for composite widgets, inert-based modal focus trapping, WCAG 2.5.8 hit-area minimums), a common-mistakes table with fixes, and a severity-rated review format ending in a hard Block/Needs-changes/Approve verdict.

5 minutes
By jakubkrehel (skills)Source
#accessibility#aria#wcag#frontend#keyboard-navigation#screen-readers

outline: none on a focus ring is still one of the most common accessibility bugs in production interfaces, and the fix isn't 'add accessibility later' — it's styling :focus-visible instead, which is a one-line change that most components never got because nobody wrote down the specific rule at the point where the CSS was written.

Who it's for: frontend engineers building or reviewing UI components, modals, menus, and forms, teams who want accessibility fixes at the point of code review instead of a separate compliance audit pass, developers debugging a specific reported keyboard-navigation or screen-reader issue, anyone who needs a severity-rated accessibility finding format with a concrete file:line Before/After table instead of a vague issue list

Example

"Review this modal component for accessibility" → A keyboard-only walkthrough first (does every flow complete without a mouse), then a screen-reader pass checking each control announces a name/role/state, findings grouped by violated principle in a severity-rated table (HIGH: no focus trap on open, MEDIUM: close button missing an accessible name), and a final Block verdict since a HIGH finding remains — with the exact before/after code needed to fix each one

CLAUDE.md Template

New here? 3-minute setup guide → | Already set up? Copy the template below.

# Accessibility Engineering

Accessibility engineering for product interfaces — from focus states and keyboard support to ARIA, forms, and screen readers. Use when building or reviewing UI components, modals, menus, forms, and custom widgets, or when the user says "make this accessible" or reports keyboard or screen-reader issues.

Accessibility is not a compliance checkbox bolted on at the end; it is the floor for interface craft. Most of it is free if you use the platform: native elements ship with keyboard support, real labels announce themselves, and a visible focus ring is one CSS rule. When reviewing, walk the interface as a keyboard-only user first (every flow must complete without a mouse), then as a screen-reader user — does each control announce a name, a role, and its state? When unsure, prefer the platform default over a custom rebuild, and remove ARIA rather than add it.

## Core Principles

### 1. Native Elements First

The first rule of ARIA: don't use ARIA when a native element exists. `<button>` for actions, `<a href>` for navigation (it must support Cmd/Ctrl/middle-click). Never `<div onClick>`. No ARIA is better than bad ARIA.

### 2. Visible Focus Rings

Style `:focus-visible`, not bare `:focus`, so keyboard users get a ring and mouse users usually don't. Prefer the browser's unmodified focus indicator. If the design needs a custom ring, use a project focus token or an explicit color, and verify the complete indicator against every adjacent color it crosses. Use at least a 2px solid perimeter or an equivalent visible area. Never use `outline: none` without a verified replacement, and preserve system colors in forced-colors mode.

### 3. Full Keyboard Support

Every pointer interaction needs a keyboard path, following the ARIA APG patterns: Escape closes overlays, arrow keys move within composite widgets (tabs, menus, listboxes), Tab moves between widgets, Enter and Space activate. Only `tabindex="0"` (join the natural tab order) and `tabindex="-1"` (programmatic focus) — never positive values, which break the natural order. Composite widgets use roving tabindex: the active item is `0`, all others `-1`.

### 4. Trap and Restore Focus

Modals set `inert` on the background content, move focus inside on open, and return focus to the trigger on close. Add `overscroll-behavior: contain` so background content doesn't scroll.

### 5. Minimum Hit Area

WCAG 2.5.8's Level AA baseline is a 24×24 CSS-pixel target (or a defined exception — spacing, equivalent control, inline, user-agent, or essential). For easier activation, aim for 44×44px in touch contexts and 40×40px on desktop when density permits. Extend with a pseudo-element if the visible element should stay smaller. Never let extended hit areas overlap.

### 6. Label and Type Every Control

Every input gets a `<label for>` or a wrapping `<label>` — a placeholder is never a label, and label and control share one hit target (no dead zone between a checkbox and its text). Add `autocomplete` with a meaningful `name`, and the correct `type`/`inputmode` for the keyboard. Never block paste; users paste passwords and one-time codes.

### 7. Errors That Announce

Keep submit enabled until the request starts, then disable with a spinner while keeping the original label. Validate on submit: mark failing fields with `aria-invalid="true"`, point `aria-describedby` at the inline error text, and focus the first invalid field. Use native `disabled` when a native control is genuinely unavailable; use `aria-disabled="true"` only when retaining focusability or discoverability is intentional, and block pointer/keyboard/form behavior explicitly.

### 8. Accessible Names Everywhere

Icon-only buttons need a descriptive `aria-label`. Visible label text must appear in the accessible name. Decorative elements get `aria-hidden="true"` — never on a focusable element.

### 9. Don't Rely on Color Alone

Status needs a redundant cue: icon, text, or underline alongside the color. Determine which WCAG contrast requirement applies from the content and state, then measure the actual rendered foreground/background pair. When contrast fails, report the pair and requirement it misses — don't change the project's colors unless asked.

### 10. Honor prefers-reduced-motion

Wrap motion in `@media (prefers-reduced-motion: no-preference)` so it's opt-in. Under reduced motion, replace slides and scales with opacity crossfades; kill parallax and autoplay entirely. Independent of the preference: autoplaying media needs a visible pause control, and toasts carrying actions or errors stay until dismissed.

### 11. Announce Dynamic Content

Use `aria-describedby` for field-specific validation, a polite live region (`role="status"`) for non-urgent updates not tied to a control (toasts, result counts), and `role="alert"` only for urgent errors not tied to a control. For reliable repeated polite announcements, render a stable empty region before updating its text — dynamically inserted alerts behave differently across screen readers and must be tested against the target ones.

### 12. Alt Text by Purpose

Decorative images get `alt=""`, informative images describe the meaning, functional images describe the action — a search icon button is `alt="Search"`, not `alt="magnifying glass"`.

### 13. Structure Is Navigation

Use headings that describe their sections and form a coherent outline — one page-level `<h1>` and properly nested levels is the recommended default. Expose one visible primary `<main>` landmark. When repeated navigation or chrome precedes it, make "Skip to content" the first focusable element. Anchored headings get `scroll-margin-top`.

### 14. Survive Zoom and Text Resize

The page must work at 200% zoom and reflow at 320px width without horizontal scrolling. Use `min-height` instead of fixed `height` on text containers, prefer `rem` breakpoints where they fit the codebase's conventions, and never use `user-scalable=no` or `maximum-scale=1`.

## Common Mistakes

| Mistake | Fix |
|---|---|
| `outline: none` to remove the focus ring | Style `:focus-visible` instead; mouse clicks won't show it |
| Custom focus color assumed to work everywhere | Verify the full indicator against every adjacent color and in forced-colors mode |
| `<div onClick>` for a button or link | `<button>` for actions, `<a href>` for navigation |
| Placeholder used as the only label | Add a visible `<label for>`; placeholders disappear on input |
| Positive `tabindex` to fix focus order | Fix the DOM order; only use `0` and `-1` |
| Repeated polite update inconsistently announced | Keep a stable empty status region and update its text; test the target screen readers |
| `assertive` live region for a routine toast | Use `polite`; reserve `assertive` for errors |
| `aria-hidden="true"` on a focusable element | Remove it or make the element non-focusable |
| Functional icon alt describes the picture | Describe the action: `alt="Search"`, not `alt="magnifying glass"` |
| `maximum-scale=1` to stop iOS input zoom | Use a 16px input font on mobile instead; never block zoom |
| Submit disabled until the form is valid | Keep it enabled; validate on submit and focus the first error |

## Review Output Format

Present a standalone review in two parts.

### Findings

Group all confirmed findings by principle. Use a markdown table with **Severity**, **Location**, **Before**, **After**, and **Why** columns — never separate "Before:"/"After:" lines.

- **Severity**: `HIGH` prevents a task, hides content from assistive technology, or is a systemic failure; `MEDIUM` makes an interaction meaningfully harder; `LOW` is isolated polish.
- **Location**: `path/to/file:line`. For an artifact with no source files, cite the exact screen and component instead.
- **Before / After**: the current implementation and an actionable replacement.
- **Why**: name the violated principle and its user impact.

Consolidate a repeated systemic issue into one row listing every affected location. Omit principles with no findings.

**Example:**

| Severity | Location | Before | After | Why |
|---|---|---|---|---|
| HIGH | `src/Dialog.tsx:42` | `<button><XIcon /></button>` | Add `aria-label="Close"`; mark the icon `aria-hidden="true"` | The icon-only control has no accessible name |
| HIGH | `src/button.css:12` | `button:focus { outline: none; }` | `button:focus-visible { outline: 2px solid; outline-offset: 2px; }` | Keyboard users cannot see focus |
| MEDIUM | `src/SignupForm.tsx:64` | Submit disabled until the form is valid | Keep submit enabled; on failure, focus the first invalid field | A disabled action hides what must be fixed |
| MEDIUM | `src/Toolbar.tsx:22` | Icon-only button with a 16px hit area | Extend the hit area to 44×44px with an absolutely-positioned pseudo-element | The target is too small for reliable touch input |

### Verification and Verdict

After the findings: **Verification** — list the exact checks run and their observed results (keyboard traversal, accessible-name inspection, screen-reader or automated checks). State explicitly what still needs verification if a check wasn't run.

**Verdict**: `Block` if any HIGH finding remains, `Needs changes` if only MEDIUM/LOW findings remain, `Approve` only when no actionable findings remain. When there are no findings, omit the tables, state "No actionable accessibility findings," report verification, and end with `Approve`.

Get new playbooks like this one

One email a week with new Claude Code workflows. Free, like everything here.

No spam. Unsubscribe anytime.

README.md

What This Does

An engineering-first accessibility guide, distinct from a compliance-checklist audit — it treats accessibility as free craft that mostly requires using the platform correctly rather than bolting features on afterward: native <button> and <a href> elements ship with keyboard support and accessible names for free, and a visible focus ring is one CSS rule (:focus-visible, never bare :focus, so keyboard users get the ring and mouse users usually don't). Fourteen concrete principles cover the ground that actually shows up in code review — roving tabindex for composite widgets like tabs and menus (active item gets 0, everything else -1, and positive tabindex values are never used), inert-based focus trapping for modals that moves focus in on open and restores it to the trigger on close, WCAG 2.5.8's real 24×24px hit-area minimum with the 44×44px touch-friendly target as the practical goal, and the specific ARIA live-region discipline (polite for routine updates, assertive reserved for genuine errors, a stable empty region for reliable repeated announcements) that most components get wrong.

A common-mistakes table pairs each frequent error directly with its fix — outline: none removed without a verified replacement, a placeholder used as the only label, maximum-scale=1 used to fight iOS input zoom instead of the actual 16px-font fix — and the review format enforces real rigor: every finding gets a severity (HIGH blocks a task or hides content from assistive tech; MEDIUM meaningfully harder; LOW is polish), a file:line location, and a Before/After code pair in one markdown table row, with repeated systemic issues consolidated into a single row listing every location rather than repeated line by line. The review ends in a hard verdict — Block if any HIGH finding remains, Needs Changes for MEDIUM/LOW only, Approve only when nothing actionable remains — so a review can't quietly hedge its way to "looks fine."


Quick Start

Step 1: Create a Project Folder

mkdir accessibility-review && cd accessibility-review

Step 2: Download the Template

Click Download above, then:

mv ~/Downloads/CLAUDE.md ./

Step 3: Review or Build a Component

claude

Ask Claude to build an accessible component (a modal, a menu, a form) or to review an existing one for accessibility issues. For a review, it will walk the interface as a keyboard user first, then a screen-reader user, and produce a severity-rated findings table with a final Block/Needs-Changes/Approve verdict.


Tips & Best Practices

  • Always do the keyboard-only walkthrough before the screen-reader pass — a flow that can't be completed without a mouse is usually the more severe, more common failure, and it's faster to catch first.
  • Prefer removing ARIA over adding it whenever a native element could do the job — "no ARIA is better than bad ARIA" catches a real, common failure mode of adding role/aria-* attributes to fix a problem that choosing <button> instead of <div onClick> would have avoided entirely.
  • Treat the Block/Needs-Changes/Approve verdict as binding, not advisory — a review that lists HIGH findings but still says "looks good overall" undermines the entire point of having a severity-rated format.

Limitations

  • Explicitly scoped to focus, keyboard, ARIA, forms, and screen-reader engineering — color-contrast measurement, text sizing/zoom mechanics, and RTL/logical-layout concerns are treated as separate, complementary skills rather than covered here.
  • The review format assumes a codebase with inspectable source (for file:line citations); a no-code or low-code tool without accessible source locations needs the "cite the exact screen and component" fallback instead.
  • Principles reflect current WCAG 2.x guidance and common ARIA Authoring Practices patterns — always double-check against the latest WCAG version and platform-specific screen reader behavior for anything genuinely novel or safety-critical.

$Related Playbooks

Developer Tools

Adversary Emulation: MuddyWater

An intelligence-grounded, authorized purple-team emulation profile for MuddyWater (MITRE ATT&CK G0069), Iran's MOIS-linked cyber-espionage group — attribution, targeting, representative TTPs by ATT&CK tactic, emulation guidance mapped to generic red-team tooling, and paired detection/defense recommendations for every offensive technique, all under an explicit authorized-use caveat.

15 minutes
Advanced
Developer Tools

Adversary Emulation: Turla

An intelligence-grounded, authorized purple-team emulation profile for Turla (MITRE ATT&CK G0010), Russia's FSB-linked espionage group — attribution, distinctive TTPs (satellite C2 hijacking, steganographic email backdoors, parasitizing rival APT infrastructure), emulation guidance mapped to generic red-team tooling, and paired detection recommendations, under an explicit authorized-use and lab-only caveat for rootkit techniques.

15 minutes
Advanced
Developer Tools

AI Agent Red Team Methodology

A first-principles methodology for authorized red-team exercises against AI products, agents, MCP servers, skills, and repositories — capability and trust-boundary modeling, AI-specific attack hypothesis families (prompt injection, tool misuse, data leakage, SSRF), harmless-proof testing with canaries, one-variable-at-a-time adaptive iteration, and business-language evidence-based reporting.

10 minutes
Advanced
Developer Tools

Agent DX CLI Scale

A 7-axis, 0-21 scoring scale for evaluating how well a CLI is designed for AI agents rather than humans — machine-readable output, raw payload input, schema introspection, context-window discipline, input hardening, safety rails, and agent knowledge packaging.

5 minutes
Intermediate
Developer Tools

Agent Design Philosophy

A mental model for designing AI agents in any domain — the model already knows how to be an agent, so design is about capabilities, knowledge, and context, added only as far as a Progressive Complexity ladder (basic → planning → subagents → skills) that real usage actually demands.

10 minutes
Intermediate
Developer Tools

Agent Prompt Architect

A compact seven-field skeleton (Role, Goal, Inputs, Constraints, Process, Output, Verification, Fallback) and a fast refinement loop for turning vague intent into a prompt an agent can execute reliably every time.

5 minutes
Beginner
Developer Tools

CEO-Mode Plan Review

Review a technical or product plan the way a great CEO would — pick a mode (expand scope, cherry-pick expansions, hold scope, or cut ruthlessly), then apply nine prime directives and eleven cognitive patterns to catch every silent failure, missing edge case, and unnamed error before it ships.

10 minutes
Advanced
Developer Tools

Agent SDK App Builder

Scaffold new Claude Agent SDK applications in TypeScript or Python, and verify existing ones against official SDK patterns before you ship.

10 minutes
Intermediate
Developer Tools

Brandkit Generator: Premium Identity Board Creator

An image-direction rule set that produces a complete brand-guidelines board in one image: logo concept, color system, typography, and applications, grounded in brand strategy instead of random logo generation

5 minutes
Beginner
Developer Tools

Brutalist UI Skill: Industrial & Tactical Interface Design

A design language that forces Claude to build raw, mechanical interfaces — Swiss industrial print or CRT terminal telemetry, with rigid grids and zero rounded corners

5 minutes
Intermediate
Developer Tools

Programmatic Screen Capture

Capture screenshots programmatically on macOS — find window IDs, control application windows via AppleScript, and capture specific windows for documentation and visual workflows.

10 minutes
Intermediate
Developer Tools

AI Agent Builder

Build AI agents with tools, memory, and multi-step reasoning - ChatGPT, Claude, Gemini integration patterns

10 minutes
Advanced

Browse all Developer Tools playbooks →