generated: '2026-10-03' method: derived generator: derive-conformance.py source: openapi/ (52 document(s), 506 mutating operations) standards: - id: openapi-3.0 conforms: true evidence: the document declares 3.0.1 - id: openapi-3.2 conforms: true evidence: the document declares 3.2.0 - id: oauth2 conforms: true evidence: 'securitySchemes: DigestAuth (http), ServiceAccounts (oauth2)' - id: rfc9457 conforms: false evidence: no response declares application/problem+json - id: idempotency conforms: false evidence: no idempotency key parameter on mutating operations - id: ratelimit-headers conforms: true evidence: responses declare RateLimit-Limit, RateLimit-Remaining, Retry-After note: 'Derived from the provider''s own OpenAPI only: what the contract declares. Claims the contract cannot carry (PCI DSS, SOC 2, FAPI, ISO 20022) come from the documentation reader and are merged below when found.'