generated: '2026-08-09'
method: derived
source: openapi/legal-ge-public-apis-openapi.yml + https://legal.ge/llms.txt + https://legal.ge/apis.json
standards:
  - id: openapi-3.1
    conforms: true
    evidence: 'openapi: 3.1.0 served at https://legal.ge/api/openapi.json (200, application/json), 5 paths / 6 operations, all with operationId, summary and tags'
  - id: json-schema-2020-12
    conforms: true
    evidence: OpenAPI 3.1 dialect; 8 named components.schemas with types, enums, formats and constraints
  - id: llms-txt
    conforms: true
    evidence: https://legal.ge/llms.txt returns 200 text/plain with H1, blockquote summary and structured sections
  - id: apis-json
    conforms: true
    version: '0.19'
    evidence: https://legal.ge/apis.json returns a 200 APIs.json index describing both public APIs
  - id: model-context-protocol
    conforms: true
    evidence: >-
      @legalge/mcp v0.1.1 answers initialize + tools/list over stdio at protocolVersion 2025-06-18;
      server.json validates against the MCP server schema 2025-12-11
  - id: rfc9309-robots
    conforms: true
    evidence: https://legal.ge/robots.txt with explicit AI-crawler user-agent groups and Sitemap directives
  - id: rfc9110-retry-after
    conforms: true
    evidence: 429 responses declare a Retry-After integer header in components.responses.RateLimited
  - id: rfc9457-problem-details
    conforms: false
    evidence: 'Errors use a custom {error:{code,message,field,constraint}} envelope on application/json, not application/problem+json'
  - id: rfc9116-security-txt
    conforms: false
    evidence: /.well-known/security.txt returned 404
  - id: rfc8615-well-known
    conforms: false
    evidence: every probed /.well-known/ path returned 404
  - id: oauth2
    conforms: false
    evidence: no securitySchemes declared; API is keyless
  - id: oidc
    conforms: false
    evidence: /.well-known/openid-configuration returned 404
  - id: a2a
    conforms: false
    evidence: '/.well-known/agent-card.json and /.well-known/agent.json both returned 404'
  - id: asyncapi
    conforms: false
    evidence: no event, streaming or webhook surface published — read-only request/response API only
  - id: rfc8594-sunset
    conforms: false
    evidence: no deprecation policy or Sunset header documented
compliance_program:
  published: false
  certifications: []
  note: >-
    No trust center, no named certifications (SOC 2 / ISO 27001 / PCI / HIPAA / FedRAMP) and no
    published compliance program. https://trust.legal.ge returned 404. Therefore no `Compliance`
    pointer is emitted.