<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing CMMC Assessment

## OpenSCAP — Automated Compliance Scanning
```bash
# Run NIST 800-171 SCAP profile
oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_cui \
  --results cmmc_results.xml --report cmmc_report.html \
  /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml

# Generate fix scripts for failed checks
oscap xccdf generate fix --profile xccdf_org.ssgproject.content_profile_cui \
  --fix-type bash cmmc_results.xml > remediation.sh
```

## nmap — Network Assessment
```bash
# Discover CUI boundary hosts
nmap -sn 10.10.0.0/16 -oX cui_network.xml

# Verify TLS configuration on CUI systems
nmap --script ssl-enum-ciphers -p 443 -iL cui_hosts.txt -oX tls_results.xml
```

## Ansible — Bulk Compliance Checks
```bash
# Run CMMC compliance playbook across inventory
ansible-playbook -i cui_inventory.ini cmmc_audit.yml --check

# Collect audit evidence from CUI systems
ansible all -i cui_inventory.ini -m shell -a "auditctl -l" > audit_rules.txt
```

## SPRS Scoring
```bash
# Calculate SPRS score from findings
node agent.js --level 2 --sprs-input findings.json

# Generate full assessment report
node agent.js --level 2 --check all --output cmmc_report.json
```
