<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Implementing Security Champion Programs

## Agent Script

### Commands

| Command | Description |
|---|---|
| `node agent.js design-program --business-units 8 --champions-per-unit 2` | Design champion program structure |
| `node agent.js recruit --criteria criteria.json --departments all` | Generate recruitment plan |
| `node agent.js train --cohort 2026-Q1 --modules advanced` | Build champion training curriculum |
| `node agent.js measure-impact --period 6m --champions active` | Measure champion program impact |

### Examples

```bash
# Primary workflow
node agent.js design-program --business-units 8 --champions-per-unit 2

# Secondary analysis
node agent.js recruit --criteria criteria.json --departments all

# Generate deliverable
node agent.js train --cohort 2026-Q1 --modules advanced

# Measure and report
node agent.js measure-impact --period 6m --champions active
```

## External Tools

| Tool | Command | Purpose |
|---|---|---|
| Slack | `slack-api --channel security-champions` | Champion communication channel |
| Confluence | `confluence --create-space security-champions` | Knowledge base for champions |
| Jira | `jira --board security-champion-tasks` | Task tracking for champion activities |

## Champion Program Maturity Levels

| Level | Description | Indicators |
|---|---|---|
| 1 - Ad Hoc | Informal security contacts exist | No structure or training |
| 2 - Defined | Program chartered, champions identified | Roles documented |
| 3 - Active | Regular meetings, training delivered | Champions actively engaged |
| 4 - Measured | Impact metrics tracked and reported | Data-driven improvements |
| 5 - Optimized | Champions drive security culture autonomously | Self-sustaining program |
