generated: '2026-07-19'
method: derived
source: openapi/keyframe-labs-sessions-openapi-original.json
description: >-
  Cross-cutting standards conformance derived from the Keyframe Sessions
  OpenAPI. No published compliance program (SOC 2/ISO 27001/etc.) was found, so
  no Compliance pointer is emitted.
standards:
- id: openapi-3.1
  conforms: true
  evidence: openapi 3.1.0 document published at docs.keyframelabs.com/api-reference/v1/openapi.json
- id: oauth2
  conforms: false
  evidence: no oauth2 securityScheme; auth is http bearer (API key)
- id: openid-connect
  conforms: false
- id: http-bearer-auth
  conforms: true
  evidence: components.securitySchemes.bearerAuth (type http, scheme bearer)
- id: rfc9457-problem-details
  conforms: false
  evidence: error responses use a custom {detail} envelope (application/json), not application/problem+json
- id: rest-json
  conforms: true
  evidence: JSON request/response bodies over HTTPS