generated: '2026-08-27'
method: derived
source: json-schema/free-exercise-db-exercise.json + https://github.com/yuhonas/free-exercise-db#readme
name: Free Exercise DB Conformance
summary: >-
  What this project actually declares conformance to. One real hit — JSON Schema draft-04,
  declared in the schema's own $schema keyword and enforced in CI — and a set of honest
  negatives. No compliance certifications, no regulatory regime, no domain standard.
standards:
- id: json-schema-draft-04
  name: JSON Schema draft-04
  conforms: true
  evidence:
    location: schema.json line 2
    declaration: '"$schema": "http://json-schema.org/draft-04/schema#"'
    enforcement: >-
      `make lint` runs check-jsonschema over every exercises/*.json against schema.json, and
      the .github/workflows/ci.yaml job runs on every push and pull request to main.
    url: https://github.com/yuhonas/free-exercise-db/blob/main/schema.json
- id: openapi
  name: OpenAPI
  conforms: false
  evidence:
    note: >-
      No OpenAPI or Swagger document exists. Probed /openapi.json, /openapi.yaml,
      /swagger.json, /api-docs, /docs, /redoc on yuhonas.github.io and on
      yuhonas.github.io/free-exercise-db — all 404. There is no REST API to describe.
- id: asyncapi
  name: AsyncAPI
  conforms: false
  evidence:
    note: No event, streaming or webhook surface exists. /asyncapi.yaml 404.
- id: rfc9457
  name: RFC 9457 Problem Details
  conforms: false
  evidence:
    note: >-
      No provider-authored error bodies at all — 404s come from GitHub's CDN as plain text.
- id: oauth2
  name: OAuth 2.0
  conforms: false
  evidence:
    note: No authentication layer. /.well-known/oauth-authorization-server 404 on both hosts.
- id: oidc
  name: OpenID Connect
  conforms: false
  evidence:
    note: /.well-known/openid-configuration 404 on both hosts.
- id: rfc9116
  name: RFC 9116 security.txt
  conforms: false
  evidence:
    note: /.well-known/security.txt 404 on yuhonas.github.io and raw.githubusercontent.com.
- id: rfc9727
  name: RFC 9727 api-catalog
  conforms: false
  evidence:
    note: /.well-known/api-catalog 404 on both hosts.
- id: rfc8594
  name: RFC 8594 Sunset header
  conforms: false
  evidence:
    note: No deprecation or sunset policy published.
- id: pagination
  name: Pagination
  conforms: false
  evidence:
    note: Single-document distribution; no pagination to conform to.
- id: idempotency
  name: Idempotency keys
  conforms: false
  evidence:
    note: Not applicable — read-only surface, no write operations.
domain_standard:
  found: false
  market: fitness / exercise reference data
  note: >-
    No published interchange standard was found that this contract declares. The project
    defines its own enum vocabulary for muscles, equipment, force, mechanic, level and
    category rather than adopting an external one, and it makes no reference to FHIR,
    Open mHealth, IEEE 11073, or any other health-data schema. Recorded as an honest
    absence — this rubric slot is reward-only and is not being filled with an invented
    conformance.
compliance:
  certifications: []
  note: >-
    No SOC 2, ISO 27001, HIPAA, GDPR or other compliance program is claimed. This is an
    individual's public-domain open-data project with no organisation behind it, no trust
    center, and no security disclosure program (probe-security-programs.py: vdp=none,
    trust=none). No Compliance or TrustCenter pointer is emitted.
licensing:
  spdx: Unlicense
  url: https://github.com/yuhonas/free-exercise-db/blob/main/LICENSE.md
  note: The dataset and code are dedicated to the public domain.