generated: '2026-07-19'
method: derived
source: openapi/golden-recursion-openapi-original.json
notes: >-
  Derived from the Golden API v2 OpenAPI. No published compliance program
  (SOC 2 / ISO 27001 / PCI / HIPAA / FedRAMP) was found on golden.com, so no
  Compliance pointer is emitted.
standards:
  - id: oauth2
    conforms: false
    evidence: securityScheme is apiKey (header "apikey"), not oauth2
  - id: oidc
    conforms: false
  - id: apikey-auth
    conforms: true
    evidence: components.securitySchemes.ApiKeyAuth type apiKey in header "apikey"
  - id: rfc9457-problem-details
    conforms: false
    evidence: error responses use application/json with a DRF envelope {type, errors[]}, not application/problem+json
  - id: cursor-pagination
    conforms: true
    evidence: list operations expose cursor + pageSize params and next/previous URL fields
  - id: rate-limiting
    conforms: true
    evidence: every operation documents a 429 throttled response
  - id: openapi-3.1
    conforms: true
    evidence: openapi field "3.1.0"
  - id: fhir-r4
    conforms: false
  - id: scim2
    conforms: false
  - id: odata
    conforms: false
  - id: json-api
    conforms: false