{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:5f55a0147eca9a82d821b7cfb73339dd8059c146b9acbb6ed66c9e3d40a8e1b0", "snapshot_id": "sha256:fbf4583b80f8936d9b7b75906adc86f38f5612cd0a7329839daea7b71ad2b9ce", "artifact_sha256": "sha256:ec393385ec4e7be15a393d925f0df78d54a12787f2995a84fad1b570583dac06", "data": { "entity_id": "ent_01kyh8fpe4qj5yt6msnarsc8kz", "entity_slug": "openai", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzf0m4xe2b7nt9w4r6dh1q8c", "entity_id": "ent_01kyh8fpe4qj5yt6msnarsc8kz", "scope": { "product": { "key": "openai-api", "name": "OpenAI API" }, "funnel": { "key": "api-service-lifecycle", "name": "API service lifecycle" } }, "catalog_binding": { "base_release_id": "sha256:8986cb1640fd748dd005e5c94c7b02d3f44a3d39ff6b72573091bd81af84c61e", "entity_revision_digest": "sha256:9dbff8fedbd20ce0405507b4e12de62cdc7f7adbd19a8a02640e8ea00362d85e" }, "declaration_revision_digest": "sha256:d018f9b150c5f0276e00bd477a111d2da2f6a80ae9581f7cecdf77af334e9f57", "declaration": { "declaration_id": "declaration_openai_api_service_lifecycle", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "ca383f7867c18d91567fcb8326be55f7411d9554", "path": "entities/op/openai.yaml", "git_blob_oid": "38d7fad70d602e01ffd078e352229c4ea6413cfc", "blob_digest": "sha256:d5b721c68a8bf8a2a3056378c22b1c2ebade5cf146f5207ac2e4bb7287b3c6ad" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "service-use", "name": "Submit Responses API requests and receive model output", "interface_ids": [ "api-service" ] } ], "participants": [ { "participant_id": "openai", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe4qj5yt6msnarsc8kz" } } ], "resources": [ { "resource_id": "api-errors", "uri": "https://developers.openai.com/api/docs/guides/error-codes", "roles": [ "documentation", "operations", "recovery", "status" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "api-reference", "uri": "https://developers.openai.com/api/reference/overview", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "billing-support", "uri": "https://help.openai.com/en/collections/3675945-understanding-openai-api-billing-usage", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "platform-signup", "uri": "https://platform.openai.com/signup", "roles": [ "access" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "prepaid-billing", "uri": "https://help.openai.com/en/articles/8264644-how-can-i-set-up-prepaid-billing", "roles": [ "checkout", "documentation", "pricing" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://developers.openai.com/api/docs/pricing.md", "roles": [ "pricing" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "quickstart", "uri": "https://developers.openai.com/api/docs/quickstart", "roles": [ "authentication", "descriptor", "documentation", "provisioning" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "rate-limits", "uri": "https://developers.openai.com/api/docs/guides/rate-limits", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c", "uri": "https://help.openai.com/en/articles/4936850-best-practices-for-api-key-safety", "roles": [ "authentication", "documentation" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "responses-guide", "uri": "https://developers.openai.com/api/docs/guides/migrate-to-responses.md", "roles": [ "documentation", "provisioning", "status" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://openai.com/policies/services-agreement/", "roles": [ "terms" ], "operated_by_participant_id": "openai", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "registration", "uri": "https://platform.openai.com/signup", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "endpoint_id": "responses-api", "uri": "https://api.openai.com/v1/responses", "transport": "http", "roles": [ "service" ], "operated_by_participant_id": "openai", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "api-authentication", "modality": "network_api", "functions": [ "authentication" ], "endpoint_ids": [], "resource_ids": [ "api-reference", "quickstart" ], "operated_by_participant_id": "openai", "standard_bindings": [] }, { "interface_id": "api-service", "modality": "network_api", "functions": [ "service_operation" ], "endpoint_ids": [ "responses-api" ], "resource_ids": [ "api-errors", "api-reference", "quickstart", "rate-limits", "responses-guide" ], "operated_by_participant_id": "openai", "standard_bindings": [] } ], "relations": [ { "relation_id": "authentication-authenticates-api", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "api-authentication" }, "to": { "node_kind": "interface", "node_id": "api-service" } }, { "relation_id": "errors-describe-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "api-errors" }, "to": { "node_kind": "interface", "node_id": "api-service" } }, { "relation_id": "reference-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "api-reference" }, "to": { "node_kind": "interface", "node_id": "api-service" } }, { "relation_id": "relation-describes-11bdd29edd85e9d60a95b586c2db646cdf514d60dd5f2c97cbf0b2979b5fa8f6", "kind": "describes", "from": { "node_kind": "resource", "node_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } }, { "relation_id": "responses-guide-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "responses-guide" }, "to": { "node_kind": "interface", "node_id": "api-service" } }, { "relation_id": "signup-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "platform-signup" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-09-06T08:47:58Z", "revision_digest": "sha256:214cf1b1dc3b59b60773c9bf89e4fff9df7e486afe25028cf873e32682b355d2", "policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "policy_version": "service-use-2026-09-07-blocking-barriers-r12", "policy_as_of": "2026-09-07T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "B", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect Blocked stages by lifecycle severity.", "coverage_rule": "Coverage is complete only when every graded signal has supported, fresh, non-conflicting evidence. Barrier and informational signals do not change coverage; only fresh, supported barrier values that passed their admission evidence rule participate in stage outcomes.", "outcome_rule": "Each stage takes its worst graded signal or verified barrier. A fresh, supported mandatory barrier that passed its admission evidence rule can block that stage; incomplete or stale barrier evidence remains context only. The overall grade is derived from the five stage states." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "sign_up", "stage_label": "Sign up", "public_state": "limited", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "OpenAI API keys can be created and deleted via the API key page, but the secret key is displayed only upon creation and requires manual saving and updating in applications." } }, "limitations": [ { "stage": "sign_up", "stage_label": "Sign up", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "OpenAI API keys can be created and deleted via the API key page, but the secret key is displayed only upon creation and requires manual saving and updating in applications." }, "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "stage": "provision", "stage_label": "Provision", "finding": { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "context": "OpenAI requires creating an API key in the dashboard or API key page, where full secret keys are displayed only upon creation and must be saved manually. Because secret delivery relies on manual human dashboard retrieval rather than a programmatic delivery path, access material delivery is partial." }, "remediation": { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "OpenAI documents error codes and retry guidance following Retry-After; the selected quotes do not establish idempotency, cancellation or reconciliation semantics for the Responses operation." }, "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "OpenAI allows creating and deleting API keys via the API key dashboard page, but key management relies on manual UI actions." }, "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "The API Overview reference details stable public evaluation and entrypoints, including HTTP Bearer authentication and base endpoint URLs like https://api.openai.com/v1/models." }, "secondary_context": [ { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence from the API reference and quickstart pages does not contain explicit declarations or rules regarding web crawler/bot access policies (such as robots.txt rules or agent crawling specifications)." }, { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "The applicable OpenAI Services Agreement is retrievable, human-readable, stable, and sets out complete commitment terms, customer obligations, and usage terms for business and API services." }, { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "context": "The OpenAI Services Agreement explicitly states that it applies to business and developer use of OpenAI's APIs and other business services, requiring that the customer organization is lawfully able to enter into the agreement and that the individual accepting it has legal authority to bind the entity." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "OpenAI specifies prepaid billing rules including minimum purchase amounts in USD, alongside explicit per-unit rates and tool usage fees." }, { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Verified structured artifacts accelerate discovery of the evaluation surface.", "context": "The OpenAI API reference explicitly mentions the availability of llms.txt as a structured complete documentation index." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:38.151Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b9cb42ed6abfa2e4f12c58cd574088e8fac7b928475305268508ef729becaeb7", "capture_rung": "http" } ], "artifact_digests": [ "sha256:27c6cf3b3813f9670fad509f95732d6076a9dbeaf85f357a0f77e7e3df172f09", "sha256:2d2c908faaa4dd0e20d0991b38b694507d500b8da613f3826650c79e106a3449", "sha256:5ef9d2f2dece85b163938c058b5db600bdb46e5594cc5459c32cb4593473ecbd", "sha256:eb5461ca59326a7e03215fa3eb7c38f322bee1b29a983d65bb2722572bc619c9" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:eb5461ca59326a7e03215fa3eb7c38f322bee1b29a983d65bb2722572bc619c9", "start_byte": 5540, "end_byte": 6341, "value_digest": "sha256:3154a6a41cdd51f7beb4aba88c7d968536bd0fd532bc7f609c56fdbdb11142ed" }, { "artifact_digest": "sha256:eb5461ca59326a7e03215fa3eb7c38f322bee1b29a983d65bb2722572bc619c9", "start_byte": 6342, "end_byte": 7164, "value_digest": "sha256:3ab9829d5c2226bc1cef78d65ec7ea439bb3dfe2109b253a1e674cf040b3a28f" } ] } ], "note": "The OpenAI Services Agreement explicitly states that it applies to business and developer use of OpenAI's APIs and other business services, requiring that the customer organization is lawfully able to enter into the agreement and that the individual accepting it has legal authority to bind the entity." }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:36.198Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "prepaid-billing" }, { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:40dda724467f102de933cec064d9c79b4296448121f1eb67407f6896b33289a1", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:649259db20cf325c1a4751bb40bf185996eb294d86d7e757ebe0d9c99757238b", "sha256:6a092958b504e5cbb90ab94b9853a55af89fe676ba766f18726455a397af5e80", "sha256:73b5186b30c79881ddc2311d63bc23a736a20d1ba6823a91c99303f8dfed5261" ], "source_surface": { "node_kind": "resource", "node_id": "prepaid-billing" }, "locators": [ { "artifact_digest": "sha256:6a092958b504e5cbb90ab94b9853a55af89fe676ba766f18726455a397af5e80", "start_byte": 2420, "end_byte": 3218, "value_digest": "sha256:cd791f81409e6dc32f8374398353c6dfbcd75653b32e7f176b9e5b2883e6d789" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:348a77267b55b640d69b6e5108e85b5a1d534384470d7f148e5f990e4b89b463", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:90aa796a184f3e344630a11f5ee5e8449e336d9dba61aac1f1f7880d98c9a05b", "sha256:aa44a0578ce3437fac5515c0a789d46d6318a49471b0ff40a11be22d48c24973", "sha256:da3f3634ba4f2465f67b91b4336284adb0ff5cad31b8763334bd58f76a073f0c" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:da3f3634ba4f2465f67b91b4336284adb0ff5cad31b8763334bd58f76a073f0c", "start_byte": 16267, "end_byte": 17062, "value_digest": "sha256:58e933e5cc8880701f71f521d8c105efd5c95679417ddb93ca51a174aba2866c" } ] } ], "note": "OpenAI specifies prepaid billing rules including minimum purchase amounts in USD, alongside explicit per-unit rates and tool usage fees." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:49.534Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c22729f023baff88d6c575fd2fb65a3a62f0cb2bcde2928079c0a96420b17a3b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2543ba95ca7267bd4cc89b5c6c1a6f6712ae600d84fa0a67d2bc6599c774eeb1", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6eacd7f928b7c54265fb16ff8251e2c90fe7d46eae279a22338096ff1eda8c9f", "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08", "start_byte": 40460, "end_byte": 41263, "value_digest": "sha256:47b7e21a0a5dca74ed2ac19186c8fb044e0efacaee2c45775ee998277df13e12" }, { "artifact_digest": "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08", "start_byte": 42056, "end_byte": 42857, "value_digest": "sha256:bd30035b9984896acf80eecdf7d9aabab256d51413ee7f14b65159dc3219909f" } ] } ], "note": "The API Overview reference details stable public evaluation and entrypoints, including HTTP Bearer authentication and base endpoint URLs like https://api.openai.com/v1/models." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are verified structured discovery artifacts available?", "finding": "Verified structured artifacts accelerate discovery of the evaluation surface.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:49.534Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" }, { "node_kind": "resource", "node_id": "quickstart" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c22729f023baff88d6c575fd2fb65a3a62f0cb2bcde2928079c0a96420b17a3b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0fa333e6ebce09a7e68a41498d08f7c1f1f0e2c6003fca2f0da4320ea2ac65a3", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6eacd7f928b7c54265fb16ff8251e2c90fe7d46eae279a22338096ff1eda8c9f", "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08", "start_byte": 32524, "end_byte": 33323, "value_digest": "sha256:67fb7e30a4ec593ccd2e6027bfa1f8b475f2b748bf56590756eec69904c03bc9" } ] } ], "note": "The OpenAI API reference explicitly mentions the availability of llms.txt as a structured complete documentation index." }, { "signal_code": "terms_access", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:38.151Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:b9cb42ed6abfa2e4f12c58cd574088e8fac7b928475305268508ef729becaeb7", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2d2c908faaa4dd0e20d0991b38b694507d500b8da613f3826650c79e106a3449", "sha256:592ac112c465ed22b4dcfe089d0912af332db96541979c518f743b8fbed0576e", "sha256:5ef9d2f2dece85b163938c058b5db600bdb46e5594cc5459c32cb4593473ecbd", "sha256:eb5461ca59326a7e03215fa3eb7c38f322bee1b29a983d65bb2722572bc619c9" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:eb5461ca59326a7e03215fa3eb7c38f322bee1b29a983d65bb2722572bc619c9", "start_byte": 33559, "end_byte": 34352, "value_digest": "sha256:3919891c575c6fa07a6f6c503c99540d1cb0edd66f99aa23123cbef7691aa40f" }, { "artifact_digest": "sha256:eb5461ca59326a7e03215fa3eb7c38f322bee1b29a983d65bb2722572bc619c9", "start_byte": 5540, "end_byte": 6341, "value_digest": "sha256:3154a6a41cdd51f7beb4aba88c7d968536bd0fd532bc7f609c56fdbdb11142ed" } ] } ], "note": "The applicable OpenAI Services Agreement is retrievable, human-readable, stable, and sets out complete commitment terms, customer obligations, and usage terms for business and API services." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:49.534Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" }, { "node_kind": "resource", "node_id": "quickstart" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained evidence from the API reference and quickstart pages does not contain explicit declarations or rules regarding web crawler/bot access policies (such as robots.txt rules or agent crawling specifications)." } ], "blockers": [], "remediations": [] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "OpenAI API keys can be created and deleted via the API key page, but the secret key is displayed only upon creation and requires manual saving and updating in applications." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence for the registration page contains only header title text ('OpenAI Platform') without visible form controls, fields, or handoffs, leaving access control operability unresolved." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The captured evidence for the signup page displays minimal page header metadata and title text ('OpenAI Platform') without revealing whether CAPTCHA challenges are present or omitted." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The captured evidence for the platform signup page contains only generic header metadata and title text ('OpenAI Platform'), leaving phone verification requirements unresolved." }, { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "A stable canonical route to access the platform exists at https://platform.openai.com/signup." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:50.520Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained evidence for the registration page contains only header title text ('OpenAI Platform') without visible form controls, fields, or handoffs, leaving access control operability unresolved." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:50.520Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "platform-signup" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "direct_observation", "captures": [ { "retained_capture_digest": "sha256:c6a15b55cc7ee907f52fb2e7f01ac25891e6c751d83dff168672930c1817dd3a", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:3878570f4a62a0d65f57cf1754e0269e56ec797f4e36e26b44c172eb6e800401", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:78cc00db17d4805d92a71310d80eb8155772ae58b66ce66b42cb4eeeb6de44ec", "sha256:8aa0bc4a0da4f9ba12b51666d322b34b95a11e1c7929118944cbef53f430cac1", "sha256:93eec781c7fc78cbbad864fe0c4a356cf8f277d531346d7fa2f70cd0b22a6efe", "sha256:d74a2f421edca7610dc76861b48b6fec0e6509152c839b833a5a0acab5785b36" ], "locators": [ { "artifact_digest": "sha256:93eec781c7fc78cbbad864fe0c4a356cf8f277d531346d7fa2f70cd0b22a6efe", "start_byte": 0, "end_byte": 437, "value_digest": "sha256:3697a3ae04070f7399a27c1d8a920a8df6ce480949a3ec52273325db63cefa1c" }, { "artifact_digest": "sha256:93eec781c7fc78cbbad864fe0c4a356cf8f277d531346d7fa2f70cd0b22a6efe", "start_byte": 439, "end_byte": 464, "value_digest": "sha256:30aebd478b92c92199ab910559a7b3547ef521a56f0b9b3fafd57e9e2c4df3b6" } ] } ], "note": "A stable canonical route to access the platform exists at https://platform.openai.com/signup." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:50.520Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "platform-signup" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The captured evidence for the signup page displays minimal page header metadata and title text ('OpenAI Platform') without revealing whether CAPTCHA challenges are present or omitted." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:47.125Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "quickstart" }, { "node_kind": "resource", "node_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:78f98a7384666733067de726b9cfe17f2a969a63fce2976e29ecb33632fe9c28", "capture_rung": "http" } ], "artifact_digests": [ "sha256:067ac44ac76c52b88036c7e11f48cef0df07dc211a07a8b0b94b39215957d4cb", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6e9c2db440896c47c28d2caae564cdad6aa8507afa70aef18b2299f064ef9a2d", "sha256:f8aa647fb7ce1723a400c6b04e0e518655d2e763dd5633f36c7709ab3b62e9e6" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c" }, "locators": [ { "artifact_digest": "sha256:6e9c2db440896c47c28d2caae564cdad6aa8507afa70aef18b2299f064ef9a2d", "start_byte": 1295, "end_byte": 2087, "value_digest": "sha256:d7dd48a488d3001f598b901dce0294c77c9abb2e0436f7412a4662afb8bfe313" } ] } ], "note": "OpenAI API keys can be created and deleted via the API key page, but the secret key is displayed only upon creation and requires manual saving and updating in applications.", "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:50.520Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "platform-signup" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The captured evidence for the platform signup page contains only generic header metadata and title text ('OpenAI Platform'), leaving phone verification requirements unresolved." } ], "blockers": [], "remediations": [ { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } ] }, { "stage": "pay", "stage_label": "Pay", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "context": "OpenAI's prepaid billing page discloses the commitment before purchase: a minimum credit purchase of $5, a default of $10, auto-reload settings reviewed before confirming, and credits that expire after one year and are non-refundable." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence describes setting up prepaid billing and adding payment details in the organization's billing overview, but it does not establish a programmatic or agent-operable deterministic checkout, handoff, and resumption flow." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The evidence notes that an account manager must have permission to manage billing and complete payment details, but it does not document a delegated payment authority rail or scoped agent authorization mechanism." }, { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "context": "Users with billing permission can access their API billing overview, add payment details, select a credit amount, and confirm the purchase directly to reach paid API access without a vendor decision point or sales approval." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:48.628Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "prepaid-billing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained evidence describes setting up prepaid billing and adding payment details in the organization's billing overview, but it does not establish a programmatic or agent-operable deterministic checkout, handoff, and resumption flow." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "Charge or no-charge status, currency, recurrence, and material conditions are disclosed.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:48.628Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "prepaid-billing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:40dda724467f102de933cec064d9c79b4296448121f1eb67407f6896b33289a1", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:649259db20cf325c1a4751bb40bf185996eb294d86d7e757ebe0d9c99757238b", "sha256:6a092958b504e5cbb90ab94b9853a55af89fe676ba766f18726455a397af5e80", "sha256:f9b34af5b57ea174c0bc7b5cdf77ff9cdec6c30a7ef842ed37414c32b4acd2c2" ], "source_surface": { "node_kind": "resource", "node_id": "prepaid-billing" }, "locators": [ { "artifact_digest": "sha256:6a092958b504e5cbb90ab94b9853a55af89fe676ba766f18726455a397af5e80", "start_byte": 2344, "end_byte": 2405, "value_digest": "sha256:3782185c65827d491109ade96d1276a71f234a07b483a7a74e4ea19128e62e02" }, { "artifact_digest": "sha256:6a092958b504e5cbb90ab94b9853a55af89fe676ba766f18726455a397af5e80", "start_byte": 2739, "end_byte": 2841, "value_digest": "sha256:893c949a0ab88a9beb4a29affb897e93cb557f80c09feb9912f60aed8ea70b2a" } ] } ], "note": "OpenAI's prepaid billing page discloses the commitment before purchase: a minimum credit purchase of $5, a default of $10, auto-reload settings reviewed before confirming, and credits that expire after one year and are non-refundable." }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:48.628Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "prepaid-billing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The evidence notes that an account manager must have permission to manage billing and complete payment details, but it does not document a delegated payment authority rail or scoped agent authorization mechanism." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is a direct self-service path to paid access documented?", "finding": "A documented direct purchase path reaches paid access without a vendor decision point.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:48.628Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "prepaid-billing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:40dda724467f102de933cec064d9c79b4296448121f1eb67407f6896b33289a1", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:649259db20cf325c1a4751bb40bf185996eb294d86d7e757ebe0d9c99757238b", "sha256:6a092958b504e5cbb90ab94b9853a55af89fe676ba766f18726455a397af5e80", "sha256:875e2d74dfc79a75a114aee5bcee0170bc8911f93194b19c8827b0bbbd0cd62b" ], "source_surface": { "node_kind": "resource", "node_id": "prepaid-billing" }, "locators": [ { "artifact_digest": "sha256:6a092958b504e5cbb90ab94b9853a55af89fe676ba766f18726455a397af5e80", "start_byte": 2420, "end_byte": 3218, "value_digest": "sha256:cd791f81409e6dc32f8374398353c6dfbcd75653b32e7f176b9e5b2883e6d789" }, { "artifact_digest": "sha256:6a092958b504e5cbb90ab94b9853a55af89fe676ba766f18726455a397af5e80", "start_byte": 4020, "end_byte": 4810, "value_digest": "sha256:23a3cc51ed19d54a243631ece658f29e3a12e59f50d4afaa68a3ffe0d8fbed4c" } ] } ], "note": "Users with billing permission can access their API billing overview, add payment details, select a credit amount, and confirm the purchase directly to reach paid API access without a vendor decision point or sales approval." } ], "blockers": [], "remediations": [] }, { "stage": "provision", "stage_label": "Provision", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "context": "OpenAI requires creating an API key in the dashboard or API key page, where full secret keys are displayed only upon creation and must be saved manually. Because secret delivery relies on manual human dashboard retrieval rather than a programmatic delivery path, access material delivery is partial." }, "secondary_context": [ { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "API requests can be initiated programmatically within supported agent authority by making POST HTTP requests to /v1/responses or using official OpenAI SDK client creation methods." }, { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "context": "A synchronous API call to the Responses API returns a usable created response object containing a terminal status ('completed') and output text payload." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Delivery needs additional human transfer or has weak scope or lifecycle semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:47.125Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "quickstart" }, { "node_kind": "resource", "node_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:28830ab94a5fd92ad649a2d53885ce0c6bda6d8983c737b91472f5901f6a8244", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:61922fecc45f441fb4462a27bbe89340559bd24fffd32bded91c82ec8d659a17", "sha256:a7a25819b4bd72a2e0070fc3a857afcf1afda60ca7b165f2dac431ea7e9702cf", "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58" ], "source_surface": { "node_kind": "resource", "node_id": "quickstart" }, "locators": [ { "artifact_digest": "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58", "start_byte": 36975, "end_byte": 37736, "value_digest": "sha256:73aaf6b17f0d30f87f6dff993d0f8d3d7dc4ea70fa8e5ed81b8b7e2ca8aa22d1" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:78f98a7384666733067de726b9cfe17f2a969a63fce2976e29ecb33632fe9c28", "capture_rung": "http" } ], "artifact_digests": [ "sha256:067ac44ac76c52b88036c7e11f48cef0df07dc211a07a8b0b94b39215957d4cb", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6e9c2db440896c47c28d2caae564cdad6aa8507afa70aef18b2299f064ef9a2d", "sha256:f8aa647fb7ce1723a400c6b04e0e518655d2e763dd5633f36c7709ab3b62e9e6" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c" }, "locators": [ { "artifact_digest": "sha256:6e9c2db440896c47c28d2caae564cdad6aa8507afa70aef18b2299f064ef9a2d", "start_byte": 1295, "end_byte": 2087, "value_digest": "sha256:d7dd48a488d3001f598b901dce0294c77c9abb2e0436f7412a4662afb8bfe313" } ] } ], "note": "OpenAI requires creating an API key in the dashboard or API key page, where full secret keys are displayed only upon creation and must be saved manually. Because secret delivery relies on manual human dashboard retrieval rather than a programmatic delivery path, access material delivery is partial.", "remediation": { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." } }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "A synchronous success response returns a usable created resource or access material; otherwise asynchronous work exposes progress, terminal state, reconciliation, and a documented bound.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:17.643Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "responses-guide" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c06fee4bc7a2b7d6ddcb9d899c595ecccc4def77a7184c48c31113914cb2719a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:088aa240257f424495a4178e4457ae2e66a89135fd269ba804795d5a1e455088", "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:78bb836f29739a91c8a18dea794ed906822125415589d6758a0da631e93bf8eb" ], "source_surface": { "node_kind": "resource", "node_id": "responses-guide" }, "locators": [ { "artifact_digest": "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "start_byte": 4951, "end_byte": 5751, "value_digest": "sha256:c3ae7a957b7ee92daf65a089b94c7a16235ca43b89fbe83f9a3ec6e50846441c" } ] } ], "note": "A synchronous API call to the Responses API returns a usable created response object containing a terminal status ('completed') and output text payload." }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:17.643Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "quickstart" }, { "node_kind": "resource", "node_id": "responses-guide" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c06fee4bc7a2b7d6ddcb9d899c595ecccc4def77a7184c48c31113914cb2719a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:088aa240257f424495a4178e4457ae2e66a89135fd269ba804795d5a1e455088", "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:973be4be9d63747b4ab44ce96ad0888228f1229b7ae6115aeab2c43027700f24" ], "source_surface": { "node_kind": "resource", "node_id": "responses-guide" }, "locators": [ { "artifact_digest": "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "start_byte": 7569, "end_byte": 7670, "value_digest": "sha256:13c9596e1bf43d54735b33dab39b901fab87eb6a22fe9d5b4f23b9a367f858d6" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:28830ab94a5fd92ad649a2d53885ce0c6bda6d8983c737b91472f5901f6a8244", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:897cbb1a8f991d6f851378a4a1c6be296c9858a947ebf2303dd61fe46f734e12", "sha256:a7a25819b4bd72a2e0070fc3a857afcf1afda60ca7b165f2dac431ea7e9702cf", "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58" ], "source_surface": { "node_kind": "resource", "node_id": "quickstart" }, "locators": [ { "artifact_digest": "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58", "start_byte": 37737, "end_byte": 38536, "value_digest": "sha256:5c1b762059e82a5721261a0d19aa3c20be9ed463982ed08f90b5aed76201d407" } ] } ], "note": "API requests can be initiated programmatically within supported agent authority by making POST HTTP requests to /v1/responses or using official OpenAI SDK client creation methods." } ], "blockers": [], "remediations": [ { "signal_code": "access_material_delivery", "code": "improve.provision.access_material_delivery", "instruction": "Deliver scoped access material through a secure documented machine-usable flow." } ] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "OpenAI documents error codes and retry guidance following Retry-After; the selected quotes do not establish idempotency, cancellation or reconciliation semantics for the Responses operation." }, "secondary_context": [ { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "context": "OpenAI allows creating and deleting API keys via the API key dashboard page, but key management relies on manual UI actions." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "Usable interfaces including client libraries, HTTP REST endpoints, and the Responses API are documented across all essential assessment targets." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "Requests can be authenticated using HTTP Bearer authentication passing an API key via the Authorization header." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "The documentation details stable request parameters, response schemas, error structures, and tool call conventions across essential operations." }, { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "A verified agent-native interface covers the declared assessment targets.", "context": "The Responses API provides a unified interface for building agent-like applications with built-in tools such as web search, file search, computer use, code interpreter, and remote MCPs." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "A verified agent-native interface covers the declared assessment targets.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:17.643Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "api-service" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c06fee4bc7a2b7d6ddcb9d899c595ecccc4def77a7184c48c31113914cb2719a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:088aa240257f424495a4178e4457ae2e66a89135fd269ba804795d5a1e455088", "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:af637b45ad859218d68c79881f31cdd2edd5d9cc99ed56fb78112cfc1b372bb2" ], "source_surface": { "node_kind": "resource", "node_id": "responses-guide" }, "locators": [ { "artifact_digest": "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "start_byte": 707, "end_byte": 1310, "value_digest": "sha256:05e0166a7484c807e4d99935dd2457efb82808d2ce224edcd22494a819d2a6ed" }, { "artifact_digest": "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "start_byte": 604, "end_byte": 705, "value_digest": "sha256:cda08162d86cf4e501ad1265718f9fb8c1d0f5ed87645f46f81ed68cc41e7af3" } ] } ], "note": "The Responses API provides a unified interface for building agent-like applications with built-in tools such as web search, file search, computer use, code interpreter, and remote MCPs." }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Only part of the credential lifecycle is agent-operable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:47.125Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "quickstart" }, { "node_kind": "resource", "node_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:78f98a7384666733067de726b9cfe17f2a969a63fce2976e29ecb33632fe9c28", "capture_rung": "http" } ], "artifact_digests": [ "sha256:067ac44ac76c52b88036c7e11f48cef0df07dc211a07a8b0b94b39215957d4cb", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6e9c2db440896c47c28d2caae564cdad6aa8507afa70aef18b2299f064ef9a2d", "sha256:f8aa647fb7ce1723a400c6b04e0e518655d2e763dd5633f36c7709ab3b62e9e6" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c" }, "locators": [ { "artifact_digest": "sha256:6e9c2db440896c47c28d2caae564cdad6aa8507afa70aef18b2299f064ef9a2d", "start_byte": 1295, "end_byte": 2087, "value_digest": "sha256:d7dd48a488d3001f598b901dce0294c77c9abb2e0436f7412a4662afb8bfe313" } ] } ], "note": "OpenAI allows creating and deleting API keys via the API key dashboard page, but key management relies on manual UI actions.", "remediation": { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:27.129Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-errors" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5f4362b40f234d09bb7a08fcbf6c37938974bb73d3f64a52ce8bd671e9f92c95", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:501a3985ea3695283bfb562f91974453fd31d897620748156c7f460a21b5bcb9", "sha256:b39e1e6ece56785b964644b236444ef6689cf545a4fbf51f415a3384df94986a", "sha256:d5f28a0e8bdebc4b23b148344379f7d11976e8420e0c5f2be17713141508ad4b" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:b39e1e6ece56785b964644b236444ef6689cf545a4fbf51f415a3384df94986a", "start_byte": 37535, "end_byte": 38333, "value_digest": "sha256:3cf0ba147c025ae5d76492d0b6c9ad7802caedbff691d6f70848531e4286edbb" }, { "artifact_digest": "sha256:b39e1e6ece56785b964644b236444ef6689cf545a4fbf51f415a3384df94986a", "start_byte": 38334, "end_byte": 39130, "value_digest": "sha256:0785ef6ff4c91c9541f2ff859da6961cfd87c14aab1d1b1b6c929996d1953b0a" } ] } ], "note": "OpenAI documents error codes and retry guidance following Retry-After; the selected quotes do not establish idempotency, cancellation or reconciliation semantics for the Responses operation.", "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:01.124Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "quickstart" }, { "node_kind": "resource", "node_id": "readiness-b40f6dd9ecf10bde91b1d804002877ffaa0484272ccd4856be863bfdab5a5b7c" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:28830ab94a5fd92ad649a2d53885ce0c6bda6d8983c737b91472f5901f6a8244", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a7a25819b4bd72a2e0070fc3a857afcf1afda60ca7b165f2dac431ea7e9702cf", "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58", "sha256:f8b72f62df25252336c60419fb409de527e5bf28d20d4b38a9f55c48906449c7" ], "source_surface": { "node_kind": "resource", "node_id": "quickstart" }, "locators": [ { "artifact_digest": "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58", "start_byte": 47959, "end_byte": 48746, "value_digest": "sha256:a333cd47af3b94ef33fe2f00dfc9f1f7d0ace81df0ced1c907dcb3addb02177c" } ] } ], "note": "Requests can be authenticated using HTTP Bearer authentication passing an API key via the Authorization header." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:49.534Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "api-service" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "direct_observation", "captures": [ { "retained_capture_digest": "sha256:20da3589c4b11896bdbd30b58f38225ef90cc89cfe40c0851f74f6d68dea29e0", "capture_rung": "http" }, { "retained_capture_digest": "sha256:28830ab94a5fd92ad649a2d53885ce0c6bda6d8983c737b91472f5901f6a8244", "capture_rung": "http" }, { "retained_capture_digest": "sha256:5f4362b40f234d09bb7a08fcbf6c37938974bb73d3f64a52ce8bd671e9f92c95", "capture_rung": "http" }, { "retained_capture_digest": "sha256:c06fee4bc7a2b7d6ddcb9d899c595ecccc4def77a7184c48c31113914cb2719a", "capture_rung": "http" }, { "retained_capture_digest": "sha256:c22729f023baff88d6c575fd2fb65a3a62f0cb2bcde2928079c0a96420b17a3b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:088aa240257f424495a4178e4457ae2e66a89135fd269ba804795d5a1e455088", "sha256:19dc729036ef7ad719e5848b279e33699f37dfe7504721e6bf1a0534e5f7054a", "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "sha256:453efbf108a2538d4a929efc05450581afb434dc06c464af294437fbaea9c358", "sha256:4e11c0ae96a1c0d33641b4046ac4dcfc1d6f4e1412f323437f10b2d0a4bb524d", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:54df479eacfda3501ae1bb8915cf0b679a0f728a0ad7bf281b553a660107592d", "sha256:6eacd7f928b7c54265fb16ff8251e2c90fe7d46eae279a22338096ff1eda8c9f", "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08", "sha256:a0632059e88a8ab9337c4bd3cf9e05aa90d7a622d91f33e5e2dfb5f406ed5f89", "sha256:a7a25819b4bd72a2e0070fc3a857afcf1afda60ca7b165f2dac431ea7e9702cf", "sha256:aa83532480c6a509af8966513ce236c9be97b5552bf8535ed30b1887a0330e14", "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58", "sha256:b39e1e6ece56785b964644b236444ef6689cf545a4fbf51f415a3384df94986a", "sha256:cddaa96db308f8722fb09024be82a3a4e7bb5268c68fff19fb195befc5a1f5f0", "sha256:d5f28a0e8bdebc4b23b148344379f7d11976e8420e0c5f2be17713141508ad4b" ], "locators": [ { "artifact_digest": "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "start_byte": 19985, "end_byte": 20434, "value_digest": "sha256:2d2311510acabdc7ed7f1ff8f2b7f4a15a12205fb2535b73cd0dccf4da88b260" }, { "artifact_digest": "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08", "start_byte": 40460, "end_byte": 41263, "value_digest": "sha256:47b7e21a0a5dca74ed2ac19186c8fb044e0efacaee2c45775ee998277df13e12" }, { "artifact_digest": "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58", "start_byte": 38537, "end_byte": 39339, "value_digest": "sha256:e02f34457594ff1c747d221bd752d6df66909903a7299405ed7e996cb04e6ef0" }, { "artifact_digest": "sha256:b39e1e6ece56785b964644b236444ef6689cf545a4fbf51f415a3384df94986a", "start_byte": 39131, "end_byte": 39933, "value_digest": "sha256:1365cb4cdd15a638cde2daebf4239b2f92a5358b73c835ebdb5321848d4f4943" }, { "artifact_digest": "sha256:cddaa96db308f8722fb09024be82a3a4e7bb5268c68fff19fb195befc5a1f5f0", "start_byte": 42110, "end_byte": 42908, "value_digest": "sha256:f9c96b6aae48bbce8abe8506de62e50a923d48bc530d5a525540bab8e1c32831" } ] } ], "note": "The documentation details stable request parameters, response schemas, error structures, and tool call conventions across essential operations." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:49.534Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "api-service" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:28830ab94a5fd92ad649a2d53885ce0c6bda6d8983c737b91472f5901f6a8244", "capture_rung": "http" } ], "artifact_digests": [ "sha256:2a8ad554cbdb88aa119aee5e0edc46f8188c429e6ee5433e4e5c0dd68c0961ad", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:a7a25819b4bd72a2e0070fc3a857afcf1afda60ca7b165f2dac431ea7e9702cf", "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58" ], "source_surface": { "node_kind": "resource", "node_id": "quickstart" }, "locators": [ { "artifact_digest": "sha256:aa9a62cad5ccb1421e2e7ed0681bb4aa9e1897c35833d442b8de8ac01ae8ed58", "start_byte": 29063, "end_byte": 29845, "value_digest": "sha256:545edec80dd7f464aeb2fcc1fe90fe7fe56bb102949dc3605f79c32da581cffe" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:20da3589c4b11896bdbd30b58f38225ef90cc89cfe40c0851f74f6d68dea29e0", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:54df479eacfda3501ae1bb8915cf0b679a0f728a0ad7bf281b553a660107592d", "sha256:59d7d82b6745c82d917b01b84ad9e377715a5acfe7d56b0f61efcfcfddafa915", "sha256:cddaa96db308f8722fb09024be82a3a4e7bb5268c68fff19fb195befc5a1f5f0" ], "source_surface": { "node_kind": "resource", "node_id": "rate-limits" }, "locators": [ { "artifact_digest": "sha256:cddaa96db308f8722fb09024be82a3a4e7bb5268c68fff19fb195befc5a1f5f0", "start_byte": 35729, "end_byte": 36528, "value_digest": "sha256:03a7eac299f91e7535208473620a2fbd93082d01cfad989386ee0e01462847fe" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c22729f023baff88d6c575fd2fb65a3a62f0cb2bcde2928079c0a96420b17a3b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:19dc729036ef7ad719e5848b279e33699f37dfe7504721e6bf1a0534e5f7054a", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:6eacd7f928b7c54265fb16ff8251e2c90fe7d46eae279a22338096ff1eda8c9f", "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:7be6970762e5335b77dc14db61b418d946b18d19623aa4a3f8342e0f2a3b6e08", "start_byte": 40460, "end_byte": 41263, "value_digest": "sha256:47b7e21a0a5dca74ed2ac19186c8fb044e0efacaee2c45775ee998277df13e12" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5f4362b40f234d09bb7a08fcbf6c37938974bb73d3f64a52ce8bd671e9f92c95", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0dd6c086b92ef01b0b62690239bcb5bf8a7620d7f0e6e0e037da00e247f1989c", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:b39e1e6ece56785b964644b236444ef6689cf545a4fbf51f415a3384df94986a", "sha256:d5f28a0e8bdebc4b23b148344379f7d11976e8420e0c5f2be17713141508ad4b" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:b39e1e6ece56785b964644b236444ef6689cf545a4fbf51f415a3384df94986a", "start_byte": 36748, "end_byte": 37534, "value_digest": "sha256:bd732a947448849ded2f33c6163b37fe19e60ac5eedd315fe98dc9a4e3816ae0" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:c06fee4bc7a2b7d6ddcb9d899c595ecccc4def77a7184c48c31113914cb2719a", "capture_rung": "http" } ], "artifact_digests": [ "sha256:088aa240257f424495a4178e4457ae2e66a89135fd269ba804795d5a1e455088", "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "sha256:4e1c18e65b8ee0c4f87caa21ce3cddc92016d3003139b8c7cc2278f50759860e", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "source_surface": { "node_kind": "resource", "node_id": "responses-guide" }, "locators": [ { "artifact_digest": "sha256:2cc5056eed3d9a2e30a3b25c4f9ab852b72959ca0677cee320fb036706ca35cf", "start_byte": 604, "end_byte": 705, "value_digest": "sha256:cda08162d86cf4e501ad1265718f9fb8c1d0f5ed87645f46f81ed68cc41e7af3" } ] } ], "note": "Usable interfaces including client libraries, HTTP REST endpoints, and the Responses API are documented across all essential assessment targets." } ], "blockers": [], "remediations": [ { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." }, { "signal_code": "credential_lifecycle", "code": "improve.operate.credential_lifecycle", "instruction": "Provide scoped expiry, rotation, revocation, compromise, and recovery operations." } ] } ], "coverage": { "status": "complete", "required_signals": 14, "covered_signals": 14, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-09-06T08:51:49.534Z", "freshness": "fresh", "provenance": { "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "freshness_policy_digest": "sha256:b71bacf415fdbef01024355fb3d080df7a9dca05d2cce9a2a1f691fe8a60f579", "basis_event_ids": [ "sha256:0b931447bd718895618e655c5b409b1a1bf7dee38d0412c8251e78307136122a", "sha256:0e2cae035f030728806f208ae97a25b5612c344d44318a9554b290d4ca408ad4", "sha256:1616e8424a3221393698a6bc6e2efdddec87d78a7c9ddf993019c24a32dbb3e7", "sha256:183c89b5806ea359128b7e6f0ec8008fa20f173897c60f59e9c5200832331f69", "sha256:1d7dfcd42b392f8378c7dde58cd2103d56a06eb02cabd84a7bbfd8c774b65143", "sha256:1e78ea9e87722470b2a8a32133acaffeb590b765f2b745a06c5961d8595a6bf7", "sha256:303fdedc17f932f268a5935e7ee70d4f8a54ba7f3929c59b1daccd8be7e5a0ce", "sha256:37c196c872642785bbb011620469bc70ef2754bc4c5bfdd8f5119849b26759c1", "sha256:4da73a9ceba645f4a6802433ce1476d4b2e98d76fb783557569f4bffb25f10a6", "sha256:4e9557440b950d01fe7faf1e43eaeb0782775a55699899e5fc313ad267507e04", "sha256:5435344eb5d3f690be8e3b7da93a62cce6ae1ef3d26d2e1c66572e142048d7ed", "sha256:59cc1012b860b1d5119835530371883692a4a76b9f7304afef10b79b749712fa", "sha256:59fa98335a278eee8deb2d3932e6f9c9ccf3b2237b38761c5d72f15dacb46bcf", "sha256:605775d91c05ed23b84347e029d41e5446d4f07da675429e76081eb54cefdb85", "sha256:62f4087b405b1357daa685d2afdef0f97f912758db7c7b6af22ce2b5a192b0e5", "sha256:63d69607520c6f27a2b0084bfc8cc05d78cca25d58556a2810f8d39bba60b968", "sha256:82efadb1b8d93841025355ee41bff468a69fc737d5a2aad6a10dccf35f6f8cd7", "sha256:8b49346ef257492ce7a19b9668461c83f4e7b9c8305123890f022f65c8705f48", "sha256:95fe2d06c264a35832d9f0d7948b2d1d0acfdb1b48826e442d796f004023781e", "sha256:980adcbe07c31855806885e8a8f6571ca4ec84393d99d7177f9a4bf1d0521330", "sha256:9e7d29b92bee347856bac8b2af3d7ead9cefbb00acb9e8626808efb362eab59b", "sha256:a4c6f1cc01d253be8c46dd1254a38ac55b909b824e886624da501428dfab9f55", "sha256:a79c1e77459de569aea35287342e25af440700a75b171f39116574fb435b630a", "sha256:a8dea03c082aa2f5a821211845a8859f381a00f4f44ece721aff63d10915d701", "sha256:b256b9c392353c16df5d62e20a6f0845b510a98807abd846c4d2f522c3a5c992", "sha256:b69a98047f6c4eee3eb4ba32bccc31adca9532f1423dd76a9adbac5f362188b9", "sha256:ba40652f78ade25736fc54572007e83714f6727722cf2a39b2e76c54fdb84848", "sha256:ba6914515d191e9c00e688099c2415b41aaf755ccdd534064e13f31af01770e1", "sha256:c19b064f2f178653e4979decf92d0d710028ef0d2dea7132215373e87c2e79aa", "sha256:c2373848ea904069da789aa004924ce84c2b351c0c6376879329dbc8131e2a84", "sha256:cff69995a470266b0be6547f5920cdd47bd883732bf02a21227d20666f9e31c9", "sha256:d2d90e842ca5b854cc5d85f293c02dd7ef2aa5e61b528b0c4400a818643f5d7e", "sha256:dca38db614b18d2a17959ec21b2cf23e2a0cd1f733e803e7d74300866c7e9913", "sha256:df5f458c53c3e3ba527e72d85f75d71a08639c04b4d5e2a97d590997eadde96d", "sha256:f1b52c55f8c6f9e638a3b3cbfa5ffe7c4b84846721d3d80130f4be481be75a07", "sha256:f67f1fbe036a69b4c79fe8e8c22962337de9227edbfe194c593e9a67c09e0dbe" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:a8dea03c082aa2f5a821211845a8859f381a00f4f44ece721aff63d10915d701" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:38.151Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:9e7d29b92bee347856bac8b2af3d7ead9cefbb00acb9e8626808efb362eab59b", "sha256:f67f1fbe036a69b4c79fe8e8c22962337de9227edbfe194c593e9a67c09e0dbe" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:36.198Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:8b49346ef257492ce7a19b9668461c83f4e7b9c8305123890f022f65c8705f48" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:49.534Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:62f4087b405b1357daa685d2afdef0f97f912758db7c7b6af22ce2b5a192b0e5" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:49.534Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:59cc1012b860b1d5119835530371883692a4a76b9f7304afef10b79b749712fa" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:38.151Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:ba6914515d191e9c00e688099c2415b41aaf755ccdd534064e13f31af01770e1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:49.534Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:0e2cae035f030728806f208ae97a25b5612c344d44318a9554b290d4ca408ad4" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:50.520Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:ba40652f78ade25736fc54572007e83714f6727722cf2a39b2e76c54fdb84848" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:50.520Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:605775d91c05ed23b84347e029d41e5446d4f07da675429e76081eb54cefdb85", "sha256:c2373848ea904069da789aa004924ce84c2b351c0c6376879329dbc8131e2a84" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:50.520Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:980adcbe07c31855806885e8a8f6571ca4ec84393d99d7177f9a4bf1d0521330" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:47.125Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:59fa98335a278eee8deb2d3932e6f9c9ccf3b2237b38761c5d72f15dacb46bcf" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:50.520Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:4da73a9ceba645f4a6802433ce1476d4b2e98d76fb783557569f4bffb25f10a6" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:48.628Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:df5f458c53c3e3ba527e72d85f75d71a08639c04b4d5e2a97d590997eadde96d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:48.628Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:37c196c872642785bbb011620469bc70ef2754bc4c5bfdd8f5119849b26759c1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:48.628Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:1616e8424a3221393698a6bc6e2efdddec87d78a7c9ddf993019c24a32dbb3e7" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:48.628Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:1e78ea9e87722470b2a8a32133acaffeb590b765f2b745a06c5961d8595a6bf7", "sha256:303fdedc17f932f268a5935e7ee70d4f8a54ba7f3929c59b1daccd8be7e5a0ce" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:47.125Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:95fe2d06c264a35832d9f0d7948b2d1d0acfdb1b48826e442d796f004023781e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:17.643Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:183c89b5806ea359128b7e6f0ec8008fa20f173897c60f59e9c5200832331f69", "sha256:b69a98047f6c4eee3eb4ba32bccc31adca9532f1423dd76a9adbac5f362188b9" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:17.643Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:dca38db614b18d2a17959ec21b2cf23e2a0cd1f733e803e7d74300866c7e9913" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:17.643Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:82efadb1b8d93841025355ee41bff468a69fc737d5a2aad6a10dccf35f6f8cd7" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:47.125Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:b256b9c392353c16df5d62e20a6f0845b510a98807abd846c4d2f522c3a5c992" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:27.129Z", "freshness": "fresh" }, { "path": "/signals/21", "supporting_event_ids": [ "sha256:4e9557440b950d01fe7faf1e43eaeb0782775a55699899e5fc313ad267507e04" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:01.124Z", "freshness": "fresh" }, { "path": "/signals/22", "supporting_event_ids": [ "sha256:1d7dfcd42b392f8378c7dde58cd2103d56a06eb02cabd84a7bbfd8c774b65143", "sha256:5435344eb5d3f690be8e3b7da93a62cce6ae1ef3d26d2e1c66572e142048d7ed", "sha256:a79c1e77459de569aea35287342e25af440700a75b171f39116574fb435b630a", "sha256:c19b064f2f178653e4979decf92d0d710028ef0d2dea7132215373e87c2e79aa", "sha256:cff69995a470266b0be6547f5920cdd47bd883732bf02a21227d20666f9e31c9" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:49.534Z", "freshness": "fresh" }, { "path": "/signals/23", "supporting_event_ids": [ "sha256:0b931447bd718895618e655c5b409b1a1bf7dee38d0412c8251e78307136122a", "sha256:63d69607520c6f27a2b0084bfc8cc05d78cca25d58556a2810f8d39bba60b968", "sha256:a4c6f1cc01d253be8c46dd1254a38ac55b909b824e886624da501428dfab9f55", "sha256:d2d90e842ca5b854cc5d85f293c02dd7ef2aa5e61b528b0c4400a818643f5d7e", "sha256:f1b52c55f8c6f9e638a3b3cbfa5ffe7c4b84846721d3d80130f4be481be75a07" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:49.534Z", "freshness": "fresh" } ], "vendor_attestation": { "status": "none" } }, "canonical_url": "https://sourcey.com/log/openai/agent-readiness/openai-api/api-service-lifecycle", "projection_digest": "sha256:90b24fcbda2b2d323316d400b496ebabdfbd7052ea1c47177063a6565b16baf7" } } }