<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Risk Register Management — API Reference

## Risk Register Schema

```json
{
  "risk_id": "RR-2026-0001",
  "title": "string",
  "category": "string",
  "owner": "string",
  "inherent_risk": { "likelihood": 1-5, "impact": 1-5, "score": 1-25, "level": "string" },
  "treatment": { "strategy": "avoid|mitigate|transfer|accept", "status": "string", "completion_pct": 0-100 },
  "residual_risk": { "likelihood": 1-5, "impact": 1-5, "score": 1-25, "level": "string" },
  "kri": "string",
  "review_date": "YYYY-MM-DD"
}
```

## Agent Commands

```bash
# Create new risk entry
node agent.js --action create --title "Ransomware Attack" --category "Cybersecurity"

# Update existing risk
node agent.js --action update --input register.json --risk-id RR-2026-0001

# Generate register report
node agent.js --action report --input register.json --output report.json
```
