GDS API technical and data standards

First published Feb 2018: produce an OpenAPI document before coding, lint, generate docs, create test stubs, require authentication, prefer OAuth 2.0, and ensure sandboxes contain no real personal data. Directly applicable to agent readiness: a poorly-described estate will be worse for agents than for humans.