overlay: 1.0.0
info:
  title: API Evangelist enrichment overlay — Tieto OpenBanking XS2A apis - Account information service
  version: 1.0.0
extends: ../openapi/tietoevry-tieto-xs2a-accounts.v1_3.yaml
x-generated: '2026-09-02'
x-method: generated
x-source: Generated by the API Evangelist enrichment pipeline from artifacts in this repository. It records our
  measurements ON TOP OF the provider contract and never mutates it.
actions:
- target: $.info
  description: Record API Evangelist provenance for this harvested contract.
  update:
    x-apievangelist-source: https://openbanking.api.tietoevry.com/documentation/tieto-xs2a-accounts.v1_3.yaml
    x-apievangelist-harvested: '2026-09-02'
    x-apievangelist-provider: tietoevry
    x-apievangelist-http-status: 200
- target: $.info
  description: State the runtime semantics the contract itself leaves unsaid, as measured by the enrichment pipeline.
  update:
    x-authentication: API key in the X-API-Key header, issued per application registered at https://openbanking.api.tietoevry.com.
      Live access additionally requires eIDAS QWAC/QSealC client certificates. See authentication/tietoevry-authentication.yml.
    x-idempotency: NOT SUPPORTED. X-Request-ID is a correlation identifier only; the provider documents no replay
      guarantee, no retention window and no Idempotency-Key header. Do not retry a write on timeout.
    x-error-format: 'Berlin Group envelope: { transactionStatus, tppMessages[{category,code,text}], psuMessage }.
      Not RFC 9457. See errors/tietoevry-problem-types.yml.'
    x-rate-limits: No platform rate limit is published. 429 fires when the consent frequencyPerDay quota set by
      the client is exhausted; no Retry-After or RateLimit-* header is returned. See rate-limits/tietoevry-rate-limits.yml.
    x-reversibility: Reversal operations exist (cancel / refund / reject / chargeback / recall / delete-consent)
      but NO time window is published for any of them. See conventions/tietoevry-conventions.yml.
    x-lifecycle: No deprecation or sunset policy, no status page, no dated changelog. See lifecycle/tietoevry-lifecycle.yml.
- target: $.info
  description: Record the measured operation count for this document.
  update:
    x-operation-count: 12
- target: $.info
  description: Record the domain standard this contract implements, as evidenced by its own resource model and vocabularies.
  update:
    x-domain-standard: Berlin Group NextGenPSD2 XS2A Framework
    x-domain-standard-evidence: conformance/tietoevry-conformance.yml
- target: $.info
  description: Preserve the Swagger 2.0 host/schemes as an explicit note; this document is not OpenAPI 3 and carries
    no servers[].
  update:
    x-declared-host: openbanking.api.tieto.com
    x-declared-schemes:
    - http
    - https