generated: '2026-07-19'
method: derived
source: openapi/helika-events-openapi.json
note: >-
  Derived from the published OpenAPI and documented auth. No published
  compliance program (SOC 2 / ISO 27001 / etc.) was found, so no Compliance
  pointer is emitted.
standards:
- id: openapi-3.1
  conforms: true
  evidence: openapi field is "3.1.0"
- id: apikey-auth
  conforms: true
  evidence: x-api-key header documented in API reference
- id: oauth2
  conforms: false
  evidence: no oauth2 securityScheme declared or documented
- id: openid-connect
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use FastAPI HTTPValidationError, not application/problem+json
- id: rfc9116-security-txt
  conforms: false
  evidence: probed hosts returned no /.well-known/security.txt
- id: json-api
  conforms: false
- id: pagination
  conforms: false
  evidence: single write-only ingestion endpoint, no collection reads