generated: '2026-07-20'
method: derived
source: openapi/nobueno-openapi-original.json
notes: >-
  Cross-cutting standards conformance derived from the Swagger 2.0 spec and observed
  API conventions. No published compliance program (SOC 2 / ISO 27001 / etc.) was found,
  so no Compliance pointer is emitted.
standards:
  - id: openapi-swagger2
    conforms: true
    evidence: Valid Swagger 2.0 document served at api.nobueno.com (drf-yasg).
  - id: oauth2
    conforms: false
    evidence: Auth is bearer apiKey token (Authorization header), not an OAuth2 flow.
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: No application/problem+json responses; DRF default error envelope, undocumented.
  - id: pagination
    conforms: true
    evidence: Consistent page-number pagination envelope (count/next/previous/results) across list endpoints.
  - id: idempotency
    conforms: false
    evidence: No Idempotency-Key contract documented.
  - id: json-api
    conforms: false
  - id: fhir
    conforms: false
  - id: fapi
    conforms: false
  - id: scim
    conforms: false