generated: '2026-07-18'
method: derived
source: openapi/ava-protocol-avs-openapi-original.yml
standards:
  - id: rfc7807-problem-details
    conforms: true
    evidence: All 4xx/5xx responses use application/problem+json with the Problem schema.
  - id: aip-136-custom-methods
    conforms: true
    evidence: Custom actions use Google AIP-136 colon-suffix routes (/workflows/{id}:pause, /workflows:simulate).
  - id: cursor-pagination
    conforms: true
    evidence: Uniform { data, pageInfo } envelope with opaque before/after cursors.
  - id: oauth2
    conforms: false
    evidence: Auth is a single JWT bearer credential (http bearer), not OAuth2 authorization flows.
  - id: openid-connect
    conforms: false
  - id: json-api
    conforms: false
  - id: fhir-r4
    conforms: false
  - id: scim2
    conforms: false
  - id: odata
    conforms: false
compliance_certifications: []
compliance_note: >-
  No published compliance program (SOC 2 / ISO 27001 / PCI DSS / HIPAA / FedRAMP)
  or trust center was found for Ava Protocol at this pass. No `Compliance` pointer
  is emitted because there is no published certification to point at.