My conclusion is that unless you have tight control over both the platform and the API, you basically cannot make any guarantees