<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Performing OCTAVE Risk Assessment — API Reference

## agent.js CLI

```bash
# Criteria action
node scripts/agent.js --action criteria

# Assets action
node scripts/agent.js --action assets

# Analyze action
node scripts/agent.js --action analyze

# Treat action
node scripts/agent.js --action treat

# Report action
node scripts/agent.js --action report
```

## Asset Profile Schema

```json
{
  "id": "A-001",
  "name": "Customer Database",
  "owner": "DBA Team",
  "classification": "confidential",
  "containers": {
    "technical": ["PostgreSQL cluster", "Backup servers"],
    "physical": ["Primary data center"],
    "people": ["DBA team", "Backend developers"]
  },
  "criticality": "high"
}
```

## Risk Assessment Output

```json
{
  "id": "R-001",
  "asset": "Customer Database",
  "impact_area": "financial",
  "impact": 3,
  "likelihood": 2,
  "risk_score": 18,
  "risk_level": "High",
  "treatment": "mitigate"
}
```
