# This file was generated by API Evangelist for the qut profile on 2026-09-01. It was NOT published
# by Queensland University of Technology. The `method:` key states how the content was obtained and
# `source:` names the live URLs it was read from.
specification: API Evangelist Lifecycle
specificationVersion: '0.1'
provider: Queensland University of Technology
providerId: qut
generated: '2026-09-01'
method: probed
source: >-
  Live probes 2026-09-01 plus GitHub organization and repository metadata read from
  api.github.com for eresearchqut, qcr, qutas, QUTlib and QUT-Digital-Observatory.
description: >-
  Versioning, change communication and deprecation posture for QUT's public machine surfaces.
  QUT publishes no changelog, no status page, no deprecation policy and no version negotiation for
  any of them. What versioning exists is inherited from the protocol, not declared by QUT.
surfaces:
  - name: QUT ePrints OAI-PMH 2.0
    x-operator: institution
    versioning: protocol
    version: '2.0'
    version_source: 'Identify/protocolVersion, live response'
    changelog: none_found
    deprecation_policy: none_found
    status_page: none_found
    stability_signal:
      earliestDatestamp: '2025-01-25T14:48:30Z'
      note: >-
        The earliest datestamp is 2025-01-25, which for a repository holding decades of QUT
        research output indicates a reindex or platform migration in early 2025 rather than a
        genuine collection start date. Harvesters relying on incremental `from` windows across
        that boundary would have seen a full-corpus rewrite.
    deletedRecord: persistent

  - name: QUT ESOE OpenID Connect Provider
    x-operator: institution
    versioning: protocol
    version: OpenID Connect Discovery 1.0 / RFC 8414
    version_source: discovery document
    changelog: none_found
    deprecation_policy: none_found
    status_page: none_found
    note: >-
      The realm still advertises the `implicit` and `password` grants and `plain` PKCE. Both grants
      are discouraged by OAuth 2.1 and by the OAuth Security BCP; advertising them is a
      configuration the institution has not yet retired.

  - name: QUT ePrints REST
    x-operator: institution
    versioning: none
    changelog: none_found
    deprecation_policy: none_found

  - name: QUT Shibboleth Identity Provider
    x-operator: institution
    versioning: protocol
    version: SAML 2.0 (also advertising SAML 1.1 and Shibboleth 1.0)
    note: >-
      SAML 1.1 and the Shibboleth 1.0 AuthnRequest profile are both still enumerated in
      protocolSupportEnumeration. These are long-obsolete profiles retained for backwards
      compatibility; their continued advertisement is a lifecycle observation, not a finding of
      insecurity.
    federation_registration_hygiene:
      finding: stale_entry
      detail: >-
        https://webwork.qut.edu.au/shibboleth is registered in the AAF production aggregate as a
        QUT-operated service provider, but webwork.qut.edu.au returns NXDOMAIN on public DNS.
        A federation entry outliving its host.

  - name: QUT eResearch agent plugin marketplace
    x-operator: institution
    repository: https://github.com/eresearchqut/eresearch-agent-plugins
    versioning: semver
    version: 0.1.0
    version_source: .claude-plugin/marketplace.json and plugins/docs/plugin.json
    last_commit_observed: '2026-06-18'
    changelog: none_found
    note: >-
      Version 0.1.0 across marketplace and plugin. The MCP server it ships targets
      https://docs.eres.qut.edu.au, which resolves publicly to 172.30.92.51 — an RFC 1918 private
      address. The plugin is published; its target is not publicly reachable.

institution_source_code:
  note: >-
    QUT's public code presence is real and active, but it is research-group code, not API
    infrastructure. Repository counts read live from api.github.com on 2026-09-01.
  organizations:
    - login: eresearchqut
      name: eResearch Queensland University of Technology
      public_repos: 91
      url: https://github.com/eresearchqut
    - login: qcr
      name: QUT Centre for Robotics (QCR)
      public_repos: 83
      url: https://github.com/qcr
    - login: qutas
      name: Queensland University of Technology Aerospace Systems
      public_repos: 39
      url: https://github.com/qutas
    - login: QUT-Digital-Observatory
      name: QUT Digital Observatory
      public_repos: 24
      url: https://github.com/QUT-Digital-Observatory
    - login: QUTlib
      name: QUT Library eServices
      public_repos: 19
      url: https://github.com/QUTlib