Native Linux CFF glyph rendering
The native Cairo renderer draws embedded simple Type1 and Type1C fonts using exact FreeType glyph indices resolved from the PDF font Encoding and Differences, or from the font program's applicable built-in Adobe encoding
ToUnicode continues to drive semantic text extraction; it does not choose the displayed glyph outlines, so an intentionally different ToUnicode mapping cannot override a declared display encoding
Font-program buffers and FreeType faces keep their existing bounded lifetime, and missing or malformed encoding mappings fail before a rendered result is published rather than guessing a glyph from Unicode text
Validated /SA false keeps stroke adjustment switched off, whilst all four standard PDF rendering intents are consumed by the native colour pipeline; active stroke adjustment remains separate work
These defaults make normalised Ghostscript archival pages renderable in HotPDF whilst retaining font, clipping, glyph-budget and cancellation checks