From audit to attestation in 90 days: running accessibility remediation like a software factory

After a Deque audit of four web products, 1Password had one quarter to fix every critical issue before attesting compliance. We built a small “factory”: audit findings flow into Jira, get grouped into batches, and AI agents turn each batch into a pull request. Engineers and designers stay the quality gates, and every fix is re-checked with axe in production before it’s reported back to Deque. We’ll share what agents fixed well, where people had to step in, and how we’re keeping new regressions out of CI.