generated: '2026-07-18'
method: derived
source: openapi/ardent-openapi-original.json
standards:
- id: openapi-3.1
  conforms: true
  evidence: openapi field is 3.1.0
- id: http-bearer-auth
  conforms: true
  evidence: components.securitySchemes.bearerAuth (type http, scheme bearer)
- id: oauth2
  conforms: false
  evidence: no oauth2 security scheme declared
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: 'error responses use a {"detail": string} envelope, not application/problem+json'
- id: json-api
  conforms: false
- id: rfc8594-sunset-header
  conforms: false
  evidence: no deprecation/sunset header support documented
- id: pagination
  conforms: false
  evidence: list endpoints return full collections; no cursor/offset params
- id: idempotency
  conforms: false
  evidence: no idempotency-key header/parameter documented
- id: async-operation-polling
  conforms: true
  evidence: 202 Accepted + GET /v1/operations/{operation_id} handle-polling pattern
compliance_programs:
  published: false
  notes: >-
    No SOC 2 / ISO 27001 / HIPAA / PCI / GDPR certifications are published. The security page
    (https://docs.tryardent.com/security) documents encryption at rest, logical-replication
    isolation, and BYOC deployment, but names no formal certifications; no Compliance pointer emitted.