Native Linux CFF glyph rendering
The native Cairo renderer draws embedded simple Type1 and Type1C fonts using exact FreeType glyph indices resolved from the PDF font Encoding and Differences, or the font program's applicable built-in Adobe encoding
ToUnicode continues to control semantic text extraction; it does not choose displayed glyph outlines, so an intentionally different ToUnicode mapping cannot override a declared display encoding
Font-program buffers and FreeType faces retain their existing bounded lifetime, and missing or malformed encoding mappings fail before publishing a rendered result rather than guessing a glyph from Unicode text
Validated /SA false keeps stroke adjustment disabled, while all four standard PDF rendering intents are consumed by the native color pipeline; active stroke adjustment remains separate work
These defaults make normalized Ghostscript archival pages renderable in HotPDF while retaining font, clipping, glyph-budget and cancellation checks