<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->

# API Reference — Stakeholder Notification

## Endpoints

| Endpoint | Method | Purpose |
|---|---|---|
| `POST /api/notifications/send` | POST | Send notification |
| `GET /api/notifications/{incident_id}` | GET | List for incident |
| `PUT /api/notifications/{id}/ack` | PUT | Record acknowledgment |
| `GET /api/notifications/compliance` | GET | Regulatory status |

## Agent Script

```bash
node agent.js routing --severity S1
node agent.js notify --incident-id INC-2026-0142 --severity S1 --recipient ciso --channel phone --message "Active ransomware"
node agent.js compliance --incident-id INC-2026-0142 --breach-type personal_data --declared-at 2026-01-15T10:00:00+00:00
```
