generated: '2026-07-21'
method: derived
source: openapi/verdigris-technologies-data-v4-openapi.json + provider docs
standards:
- id: oauth2
  conforms: true
  evidence: securitySchemes declares oauth2 with a clientCredentials flow (RFC 6749 sec 4.4)
- id: oidc-discovery
  conforms: true
  evidence: auth.verdigris.co publishes /.well-known/openid-configuration
- id: rfc8414-oauth-authorization-server
  conforms: true
  evidence: auth.verdigris.co publishes /.well-known/oauth-authorization-server
- id: rfc9457-problem-details
  conforms: false
  evidence: 4xx responses use application/json with a custom error envelope, not application/problem+json
- id: rfc9116-security-txt
  conforms: false
  evidence: no /.well-known/security.txt served on api or root host
- id: soc2
  conforms: true
  evidence: SOC 2 certification published at trust.verdigris.co
- id: json-content
  conforms: true
  evidence: all operations return application/json (energy/power/etc endpoints also offer text/csv)