Hello,
In the past (2013), QGIS developer David Saeger filled one out (https://web.archive.org/web/20130509053144/http://www.qgis.org/en/about-qgis/vpatm.html). To update it, you can visit: https://acreditor.section508.gov/ and then click on “start a new report.”
If the information from the Saeger’s original VPAT is still valid, you could probably copy-and-paste much if not all of that information to the new form.
Would it be helpful if I drafted a new VPAT, and then presented it to you or another developer for inspection to verify that it’s correct? You could then post it for everyone. The caveat is that I would have to check with my institution first to make sure that I would be allowed to do that. But could this potentially help break the logjam?
Best wishes,
Josh