generated: '2026-07-19'
method: derived
source: >-
  Derived from openapi/gauntlet-openapi-original.json and the Gauntlet developer
  docs. Asserts cross-cutting standards conformance; no formal corporate compliance
  certifications (SOC 2 / ISO 27001) are published, so no Compliance pointer is
  emitted.
standards:
  - id: openapi-3.1
    conforms: true
    evidence: Published OpenAPI 3.1.0 document at api.gauntlet.xyz/docs/openapi.json
  - id: oauth2
    conforms: false
    evidence: No oauth2 securitySchemes; auth is a Bearer API key (http bearer)
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use a custom {"error":{code,message,details}} envelope, not application/problem+json
  - id: cursor-pagination
    conforms: true
    evidence: Timeseries/activity endpoints use meta.next_cursor / ?next= cursor pagination
  - id: json:api
    conforms: false
  - id: caip-10
    conforms: true
    evidence: Vault ids are CAIP-10 "{chainId}:{address}"
  - id: erc-8021
    conforms: true
    evidence: SDK applies ERC-8021 builder-code attribution suffixes to on-chain transactions
  - id: rate-limit-headers
    conforms: true
    evidence: X-RateLimit-Limit / X-RateLimit-Remaining / X-RateLimit-Reset returned on responses