Broken Contracts? Towards Automated Conformance Testing for HTTP Semantics
WEBIST 2026

At WEBIST 2026, I presented our research on automatically testing APIs for conformance to the HTTP specifications.

The talk introduced Thymian, a prototype for automated HTTP conformance testing, and showed how APIs can diverge from the semantics defined by the web platform. Together with our research results, it highlighted why an API contract is more than its explicit schema: HTTP methods, status codes, headers, and other protocol semantics form an implicit contract that matters for interoperability and security.