generated: '2026-09-28'
method: derived
generator: derive-conformance.py
source: openapi/ (2 document(s), 80 mutating operations)
standards:
- id: openapi-3.0
  conforms: true
  evidence: the document declares 3.0.3
- id: oauth2
  conforms: false
  evidence: 'securitySchemes: bearerAuth (http)'
- id: rfc9457
  conforms: true
  evidence: application/problem+json on 234 response(s), e.g. POST /renders 402
- id: idempotency
  conforms: true
  evidence: Idempotency-Key declared on 4 of 80 mutating operations (partial)
- id: pagination
  conforms: true
  evidence: list operations take cursor, limit
- id: ratelimit-headers
  conforms: true
  evidence: responses declare RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After
note: 'Derived from the provider''s own OpenAPI only: what the contract declares. Claims the contract cannot carry (PCI DSS, SOC 2, FAPI, ISO
  20022) come from the documentation reader and are merged below when found.'