SDK and API Fact Boundary
The docs currently treat @acosmi/sdk-ts as the only verified first-class SDK; Go/Python/Java/OpenAPI are no longer claimed as equally ready.
Current trusted sources
- TypeScript SDK:
@acosmi/sdk-ts@2.0.1, inventoried fromsrc/index.ts,src/compliance/client.ts, andsrc/compliance/scopes.ts. - Compliance scopes: the TS SDK declares 15 scopes.
- Backend OAuth registry: read-only audit found 13 scopes, missing
compliance:contract_template:read/write. This repository records the drift but does not modify the backend.
Compliance scopes
compliance:evidence:read(ScopeComplianceEvidenceRead)compliance:evidence:write(ScopeComplianceEvidenceWrite)compliance:timestamp:issue(ScopeComplianceTimestampIssue)compliance:timestamp:verify(ScopeComplianceTimestampVerify)compliance:contract_signing:read(ScopeComplianceContractSigningRead)compliance:contract_signing:write(ScopeComplianceContractSigningWrite)compliance:seal:manage(ScopeComplianceSealManage)compliance:seal_approval:request(ScopeComplianceSealApprovalRequest)compliance:seal_approval:approve(ScopeComplianceSealApprovalApprove)compliance:seal_use:execute(ScopeComplianceSealUseExecute)compliance:reports:read(ScopeComplianceReportsRead)compliance:reports:write(ScopeComplianceReportsWrite)compliance:reports:publish(ScopeComplianceReportsPublish)compliance:contract_template:read(ScopeComplianceContractTemplateRead)compliance:contract_template:write(ScopeComplianceContractTemplateWrite)
ComplianceClient methods
get, createEvidenceAsset, getEvidenceAsset, listEvidenceAssets, verifyEvidencePublic, issueTimestamp, issueTimestampForAsset, getTimestamp, listTimestamps, verifyTimestamp, listTsaProviders, getTsaStats, buildEvidencePackage, listEvidencePackages, createReport, getReport, listReports, publishReport, downloadReport, createSigningEnvelope, getSigningEnvelope, listSigningEnvelopes, signEnvelope, createH5SigningUrl, syncSigningEnvelopeStatus, listEnvelopeContracts, listEnvelopeProviderRequests, voidEnvelope, submitSealApproval, approveSealApproval, rejectSealApproval, cancelSealApproval, listPendingSealApprovals, getSealApproval, listSealApprovals, listSealUses, getProviderRequest, getCapabilities, listOperations, getOperation, createContractTemplate, updateContractTemplate, deleteContractTemplate, getContractTemplate, listContractTemplates, uploadContractTemplatePdf, publishContractTemplate, archiveContractTemplate, listContractTemplateVersions, classifyError, append, append, append, append
Gated methods
publishReport, signEnvelope, createH5SigningUrl, approveSealApproval
No longer claimed
- Do not claim Python / Java first-class SDKs are published.
- Go has the same coverage as TypeScript.
- A complete public OpenAPI spec is live.