<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->

# API Reference — War Room Procedures

## Endpoints

| Endpoint | Method | Purpose |
|---|---|---|
| `POST /api/warroom/activate` | POST | Activate war room |
| `GET /api/warroom/{incident_id}` | GET | Get status board |
| `POST /api/warroom/{id}/decisions` | POST | Log decision |
| `POST /api/warroom/{id}/deescalate` | POST | Close war room |

## Agent Script

```bash
node agent.js roles
node agent.js status-board --incident-id INC-2026-0142 --severity S1 --ic "Jane" --tech-lead "Bob" --scribe "Alice"
node agent.js log-decision --incident-id INC-2026-0142 --decision "Isolate subnet 10.1.2.0/24" --made-by "IC Jane" --rationale "Active lateral movement detected"
```
