Standards & interoperability
Kenya NFMS-FIP shows a tick only where conformance has been tested and documented. Everything else is stated as it is.
✓ TestedImplemented, not yet conformance-testedDesigned forPlanned
| Area | Standard / framework | Status | Evidence |
|---|---|---|---|
| Web APIs | OpenAPI 3.1 | ✓ Tested | Generated by FastAPI at /api/openapi.json; exercised by the API test suite. |
| Authentication | OAuth 2.0 / OpenID Connect | Implemented, not yet conformance-tested | Keycloak realm with RS256 JWT validation in the API. Not yet independently tested. |
| Access control | RBAC + ABAC | ✓ Tested | Role ladder and county scope unit-tested; workflow guards enforced in the database and tested. |
| Data provenance | W3C PROV-aligned lineage | Implemented, not yet conformance-tested | Product → algorithm version → processing job → validation chain; exposed by the Why? panel. |
| Audit trail | Append-only audit log | ✓ Tested | UPDATE/DELETE on audit.log blocked; verified on PostgreSQL 16. |
| Coordinate reference | EPSG:4326 storage, EPSG:21037 / 32737 analysis | Implemented, not yet conformance-tested | Geometries stored in WGS 84; areas via geography; zonal statistics require a projected CRS. |
| Web GIS APIs | OGC API – Features & Tiles | Implemented, not yet conformance-tested | Public tile views served by tipg. Conformance classes not yet run through OGC TEAM Engine. |
| EO catalogue | STAC 1.1 / STAC API 1.0 | Implemented, not yet conformance-tested | pgSTAC + stac-fastapi; pipeline publishes items. STAC validator not yet run in CI. |
| Map services | OGC WMS / WMTS (GeoServer) | Designed for | GeoServer in the compose stack; layer publication scripted but not validated. |
| Metadata | ISO 19115 / 19139 (GeoNetwork) | Planned | Catalogue fields map to ISO 19115 core; GeoNetwork harvest not yet built. |
| Data exchange | GeoJSON, GeoPackage, COG | Implemented, not yet conformance-tested | GeoJSON from the API; COG required for raster products in object storage. |
| National forest monitoring | FAO VGNFM | Designed for | Architecture follows the guidelines; requires institutional assessment, not a software test. |
| Forest carbon / MRV | GFOI MGD, IPCC 2006/2019 | Designed for | Configurable methodologies, IPCC pools and uncertainty fields. No official KFS method loaded yet. |
| Climate reporting | UNFCCC / REDD+ | Planned | Reporting products follow once the carbon engine is approved. |
| Accessibility | WCAG 2.2 AA (target) | Designed for | Semantic markup, keyboard focus and contrast tokens; no audit performed yet. |
| Security | ISO/IEC 27001-aligned controls | Planned | Penetration testing and hardening scheduled for Phase 17. |
Status as of platform v0.8.0. An automated conformance test (spec §96) will generate this page from test results.