Skip to content

API Inventory — Completion checklist

Template: TPL-06-04 ../02-Templates/API-Inventory-Template.md | Version: 0.3
How to use: tick an item only after inspecting the completed record and its evidence. Every unticked item needs an OPEN- entry with an owner, or a written, approved disposition.

Content checks

  • [ ] 01. Unique API ID and consumer — Every route has an API ID.
  • [ ] 02. HTTP method route and service — List generated from code (e.g. framework route dump) at the pinned SHA.
  • [ ] 03. Controller source file and commit — Each entry has file:line at the pinned SHA.
  • [ ] 04. Authz required and sensitive fields — Unauthenticated routes are flagged and justified.
  • [ ] 05. Request response and error schema references — Every API ID resolves to an OpenAPI operation.
  • [ ] 06. Version owner status and last verified date — Verified date is within the current release cycle.

Record control checks

  • [x] Document ID follows KAI-<PRODUCT>-APII-NNN and is unique in the product.
  • [x] Product, version and commit SHA match the related records.
  • [x] No placeholder rows remain; every gap names an owner and an OPEN- item.
  • [x] Every cited link, file path and ID resolves.
  • [ ] Security, privacy, AI/ML and medical-software applicability checked and routed to qualified reviewers where relevant.
  • [x] No patient identifiers, secrets or production data copied into the record.
  • [x] Nothing was taken from the worked examples as if it were evidence.
  • [ ] Named independent reviewer completed review; approval recorded with date.

Reviewer: Technical reviewer (name to be assigned — OPEN-001) | Date: Pending | Outcome: [Complete / Returned with actions]

Self-check by Claude Code, 2026-10-28, at a6b4429. Ticked items were verified mechanically in this session: sdlc.py validate 0 errors (75 records, stages 01–10); sdlc.py trace no duplicate IDs and every REQ linked to design and test; code citations resolve at a6b4429 (except files in the separate Visionary_oral_ML repository, labelled as external). Content checks are left for the named reviewer; every gap is an owned OPEN- item in the record. Reviewer and approval items are for people.