The Specification Layer
One email a week from Kin Lane on the contracts underneath everything else: OpenAPI, Arazzo, Overlay, AsyncAPI, JSON Schema, GraphQL, Protobuf and gRPC, CloudEvents and OTLP, SPIFFE and OpenFeature, SPDX, OCI, in-toto, OSV, SLSA, TUF, Sigstore, FDC3 and CALM. Read straight off the specification repositories themselves — what merged, what shipped, and what did not move.
Subscribe to The Specification Layer Also on Mondays: the API Evangelist newsletter, read across thousands of API providers.
Latest issue · September 6 – September 13, 2026
The Release Went Out, the Fix Stayed Home
OpenAPI 3.2.1 shipped on September 10, twenty days ahead of the prediction I put on the record three weeks ago — and the Bengali-digit defect I reported last week did not ship with it. Not an oversight: the OAI's own written rule says a patch release cannot carry a schema update, so the fix waits...
Read this issue →Every issue
-
The Release Went Out, the Fix Stayed Home
OpenAPI 3.2.1 shipped on September 10, twenty days ahead of the prediction I put on the record three weeks ago — and the Bengali-digit defect I reported last week did not ship with it....
-
Nine Days Without a Bibliography
A maintainer cancelled a credit card he thought was unused. It was the one Heroku had on file for SpecRef — the bibliography database every ReSpec-built specification resolves its normative references against. For nine...
-
The Two Specifications I Was Not Watching Out-Worked the Thirty I Was
Eighty-five merges across thirty specifications, the lowest reading since I started counting — and then two specifications the Linux Foundation adopted this week, and which were not on my list, merged fifty-two pull requests...
-
Eleven Merges, Two Words of Specification, and a Planning Board Marked Internal Use Only
The OpenAPI Initiative merged eleven pull requests this week and changed exactly two words of specification text — and stamped its v3.3.0 milestone INTERNAL USE ONLY and renamed its planning discussion DO NOT CITE...
-
156 Changes Landed Across Thirty Specifications and Exactly One of Them Shipped
156 pull requests merged across the thirty specification repositories this week, and when you subtract the tool releases, exactly one actual specification version shipped — TUF's, off a thirty-two line edit. Nineteen of the...
-
150 Changes Merged Into the Contracts Last Week, and 89 of Them Were Robots
First issue. I pointed a harvester at the thirty specification repositories that describe most of the world's APIs — OpenAPI, Arazzo, Overlay, AsyncAPI, JSON Schema, GraphQL, Protobuf, gRPC, CloudEvents, OTLP, SPIFFE, OpenFeature, SPDX, OCI,...
