generated: '2026-06-20'
method: derived
source: openapi/kafka-rest-proxy.yml, openapi/kafka-connect.yml, apis.yml
notes: >-
  Cross-cutting standards conformance derived from this repo's OpenAPI specs, vocabulary,
  and documented behavior. Absence of a claim is recorded as conforms:false with no
  evidence rather than omitted.
standards:
  - id: openapi-3.1
    conforms: true
    evidence: openapi/kafka-rest-proxy.yml and openapi/kafka-connect.yml declare openapi 3.1.0
  - id: asyncapi
    conforms: true
    evidence: asyncapi/kafka-messaging.yml models the native Kafka pub/sub messaging protocol
  - id: oauth2
    conforms: false
    evidence: no oauth2 securityScheme in the OpenAPI (broker-level OAUTHBEARER SASL exists but is not on the REST surface)
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: errors use the Kafka {error_code, message} envelope, not application/problem+json
  - id: rfc9116-security-txt
    conforms: true
    evidence: well-known/apache-kafka-security.txt (confluent.io vendor site)
  - id: pagination
    conforms: false
    evidence: list endpoints return full arrays with no cursor/offset pagination
  - id: idempotency
    conforms: true
    evidence: exactly-once via idempotent/transactional producer protocol (not an HTTP idempotency-key)
  - id: json-schema
    conforms: true
    evidence: json-schema/ contains extracted JSON Schema for request/response objects
  - id: fhir-r4
    conforms: false
  - id: scim
    conforms: false
  - id: fapi
    conforms: false
  - id: odata
    conforms: false
  - id: json-api
    conforms: false