Skip to content
OS.00Open standards registry

29 open standards, six interop categories.

Public registry of every open standard the FlyttGo platform implements — API protocols, AI agent surfaces, identity and credentials, cryptography, observability, payments. Updated alongside the changelog when adoption changes.

OS.APAPI + integration

Protocols and schemas every FlyttGo module exposes consistently.

  • OS.AP.01Live

    OpenAPI 3.1

    Full machine-readable API spec generated per release alongside the runtime.

  • OS.AP.02Preview

    AsyncAPI 3.0

    Event surface description for webhooks, streaming events, MCP tool calls.

  • OS.AP.03Live

    GraphQL Federation

    Cross-module GraphQL federation gateway for joins that span planes.

  • OS.AP.04Live

    JSON Schema 2020-12

    Request / response schemas, webhook payloads, configuration files.

  • OS.AP.05Live

    CloudEvents 1.0

    Event envelope format for cross-module event streams.

OS.AGAI + agent

Standards that let AI agents discover and drive FlyttGo safely.

  • OS.AG.01Live

    Model Context Protocol (MCP)

    Discovery manifest at /.well-known/mcp.json. Tools, resources, transport, auth declared per the MCP spec.

  • OS.AG.02Planned

    AIBOM (AI Bill of Materials)

    Per-workspace AI BOM — which models, which weights, which provenance. Coming Q4 2026.

  • OS.AG.03Planned

    C2PA · content provenance

    C2PA-signed provenance manifests for AI-generated artefacts (proposals, summaries).

OS.IDIdentity + trust

How identity, signatures and credentials interoperate.

  • OS.ID.01Live

    OAuth 2.1 + PKCE

    All workspace tokens issued under OAuth 2.1; PKCE mandatory for public clients.

  • OS.ID.02Live

    OIDC 1.0

    OpenID Connect 1.0 for human auth flows.

  • OS.ID.03Live

    SAML 2.0

    Enterprise SSO federation alongside OIDC.

  • OS.ID.04Live

    eIDAS 2.0

    EU eIDAS 2.0 trust framework — qualified signatures, qualified seals, LoA mapping.

  • OS.ID.05Preview

    W3C Verifiable Credentials 2.0

    VC issuance + verification via Identra; SD-JWT proofs supported.

  • OS.ID.06Preview

    OID4VCI / OID4VP

    OpenID for Verifiable Credentials issuance and presentation — EUDI Wallet alignment.

  • OS.ID.07Preview

    W3C Decentralized Identifiers (DIDs)

    did:web and did:key supported across subject and issuer roles.

  • OS.ID.08Live

    FIDO2 / WebAuthn

    Phishing-resistant authentication for human operators and admin surfaces.

OS.CRCryptography

Primitives, certificate ecosystems, supply-chain provenance.

  • OS.CR.01Live

    TLS 1.3

    All inbound and inter-service traffic on TLS 1.3 minimum.

  • OS.CR.02Preview

    NIST FIPS 203/204/205 (PQC)

    ML-KEM, ML-DSA, SLH-DSA migration in flight. See /post-quantum.

  • OS.CR.03Live

    Sigstore · keyless signing

    All container images and release artefacts Cosign-signed at release.

  • OS.CR.04Live

    SLSA Build Level 3

    Supply-chain provenance attestations meet SLSA L3 for hosted-builder integrity.

  • OS.CR.05Live

    CycloneDX SBOM 1.6

    Software Bill of Materials per release in CycloneDX 1.6 format.

OS.OBObservability + ops

How telemetry leaves FlyttGo for tenant dashboards and SOC tools.

  • OS.OB.01Live

    OpenTelemetry

    Traces, metrics, logs all emitted in OTel format. Vendor-neutral export to any OTLP collector.

  • OS.OB.02Live

    Prometheus exposition format

    Per-tenant Prometheus metrics endpoint for scrape-based observability stacks.

  • OS.OB.03Preview

    OCSF (Open Cybersecurity Schema)

    OCSF-formatted security event stream for SOC-side ingestion (Splunk, Sentinel, Chronicle).

  • OS.OB.04Preview

    Software Carbon Intensity (SCI)

    Green Software Foundation SCI metric exposed per workload + deployment.

OS.PYPayments + financial

Payment-rail and financial-data interoperability.

  • OS.PY.01Live

    PSD2 SCA + Open Banking

    Strong customer authentication flows for EU + UK rails via Payvera.

  • OS.PY.02Live

    ISO 20022

    ISO 20022 messaging across SEPA, SEPA Instant and national rails.

  • OS.PY.03Live

    SCT-Inst (SEPA Instant)

    Sub-10-second euro-rail settlement on participating institutions.

  • OS.PY.04Planned

    PSD3 / PSR (in flight)

    Tracking PSD3 + Payment Services Regulation finalisation; ready when published.

OS.NXWhere standards adoption plugs in

Open standards underpin every other surface.

Standards aren't a deliverable — they're the floor. The four pathways below take a procurement team from this registry to a signed engagement under MNDA.