generated: '2026-07-20'
method: derived
source: openapi/quantemplate-fabric-openapi.yml
notes: >-
  Cross-cutting standards conformance derived from the harvested FabricAPI
  OpenAPI. No published third-party certification program (SOC 2 / ISO 27001)
  was found on the public site, so no Compliance pointer is emitted.
standards:
- id: oauth2
  conforms: false
  evidence: securityScheme is http bearer (JWT), not oauth2 flows
- id: http-bearer-jwt
  conforms: true
  evidence: securitySchemes.bearerAuth type http scheme bearer bearerFormat JWT
- id: rfc9457-problem-details
  conforms: false
  evidence: 4xx responses use text/plain or a bespoke JSON object, not application/problem+json
- id: openapi-3.0
  conforms: true
  evidence: spec declares openapi 3.0.1
- id: rfc8594-deprecation-headers
  conforms: false
  evidence: no Sunset/Deprecation header support documented
- id: pagination
  conforms: false
  evidence: no paginated collection operations documented
- id: idempotency
  conforms: false
  evidence: no idempotency-key contract documented