generated: '2026-07-21'
method: derived
source: openapi/weavix-rest-openapi.yml
notes: >-
  Cross-cutting standards conformance derived from the weavix REST API. SOC 2 is
  a verified compliance claim from the weavix trust center
  (security/weavix-trust-center.yml); the remaining entries are derived from the
  API shape.
standards:
- id: rest
  conforms: true
  evidence: JSON over HTTPS with resource-oriented paths and standard verbs (GET/POST/PUT/DELETE).
- id: api-key-auth
  conforms: true
  evidence: apiKey security scheme in the Authorization header.
- id: oauth2
  conforms: false
  evidence: No OAuth2 flows are documented; authentication is a static account API key.
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors are conveyed via HTTP status codes; no application/problem+json envelope documented.
- id: cursor-pagination
  conforms: true
  evidence: Channel message search uses pageSize + next cursor pagination.
- id: idempotency
  conforms: false
  evidence: No idempotency-key mechanism is documented.
- id: iso-639-localization
  conforms: true
  evidence: locale and messageLanguage use two-digit ISO 639 language codes.
- id: soc2
  conforms: true
  evidence: SOC 2 listed on the weavix trust center (trust.weavix.com).