This relates to a recent case I tested (the Co-op online banking interface, fwiw) in which copy-and-paste is blocked by scripting, but browser autocomplete still works. I considered this a pass, but I'm not entirely sure that was right.

So is autocomplete alone sufficient for "a mechanism is available to assist the user in completing the cognitive function test" (as it relates to username/password authentication) or would the lack of copy-paste support constitute a failure nonetheless?

Either way, can (should) this be clarified in understanding docs?