generated: '2026-07-20'
method: derived
source: openapi/luminary-openapi-original.yml
standards:
- id: oauth2
  conforms: true
  evidence: openapi securitySchemes type oauth2 (authorizationCode + clientCredentials)
- id: oidc
  conforms: true
  evidence: /.well-known/openid-configuration served with issuer, userinfo, jwks
- id: rfc8414-oauth-authorization-server
  conforms: true
  evidence: /.well-known/oauth-authorization-server metadata published
- id: pkce-rfc7636
  conforms: true
  evidence: code_challenge_methods_supported [S256] in authorization-server metadata
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use a custom {code,message,details} envelope, not application/problem+json
- id: cursor-pagination
  conforms: true
  evidence: list responses expose page_info.start_cursor/end_cursor/has_next_page
- id: json-api
  conforms: false
- id: scim2
  conforms: false
- id: fhir-r4
  conforms: false
- id: soc2-type2
  conforms: true
  evidence: SOC 2 Type II audited; report available via trust.withluminary.com