generated: '2026-09-28' method: derived generator: derive-conformance.py source: openapi/ (1 document(s), 1 mutating operations) standards: - id: openapi-3.1 conforms: true evidence: the document declares 3.1.0 - id: oauth2 conforms: false evidence: 'securitySchemes: ApiKey (apiKey)' - id: rfc9457 conforms: true evidence: application/problem+json on 69 response(s), e.g. GET /v1/foods 422 - id: idempotency conforms: false evidence: no idempotency key parameter on mutating operations - id: pagination conforms: true evidence: list operations take cursor, page_size - id: ratelimit-headers conforms: true evidence: responses declare RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset, Retry-After, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset note: 'Derived from the provider''s own OpenAPI only: what the contract declares. Claims the contract cannot carry (PCI DSS, SOC 2, FAPI, ISO 20022) come from the documentation reader and are merged below when found.'