{"application":"Stack Agent","version":"1.0.0","status":"running","endpoints":["/health","/execute","/tests/run-component-tests","/metadata/","/metadata/summary","/metadata/components","/metadata/components/{name}","/metadata/components/{name}/sub-components","/metadata/components/{name}/links","/metadata/by-type/{type}","/metadata/by-namespace/{namespace}","/metadata/test-data","/metadata/test-data/{name}","/metadata/types","/metadata/namespaces","/metadata/groups","/metadata/links","/metadata/search","/debug/routes","/debug/env","/debug/modules","/network_scan","/network_scan?mode=light","/network_scan?mode=full","/opa_scan","/opa_scan?mode=light","/opa_scan?mode=full","/dast_scan","/dast_scan?mode=light","/dast_scan?mode=full","/pen_test","/pen_test?mode=full","/kubescape_scan","/kubescape_scan?mode=light","/kubescape_scan?mode=full","/kubescape_scan?mode=component&namespace=X","/pci_scan","/pci_scan?mode=light","/pci_scan?mode=full","/pci_scan?mode=full&req=1","/pci_scan?mode=full&req=1,2,7","/pci_scan?mode=full&req=1-6","/pci_scan?mode=report","/rbac_scan","/rbac_scan?mode=light","/rbac_scan?mode=full","/link_scan","/link_scan?component=<name>","/link_scan/links","/link_scan/progress","POST /link_scan/start","POST /link_scan/stop","/secrets_scan","/secrets_scan?mode=light","/secrets_scan?mode=full","/scans/verify","/scans/verify/{scan_type}","/scans/evidence","/scans/deltas","/scans/deltas/{scan_type}?latest=true","/scans/findings/{scan_type}","/scans/schedule","/vllm_scan","/vllm_scan/{model_name}","/config_scan (GET - configuration posture: attribute-surface findings)","/backup_scan (GET - backup & DR posture; ?mode=light|full, full proves data)","/backup/inventory (GET - what the diagram claims, metadata only)","/backup/runs (GET - actual backup runs; ?subject=&mechanism=&limit=)","/backup/runs/{mechanism_id}/{namespace}/{name} (GET - one run + volume proof)","/cve_scan (GET - CVE control plane; ?mode=light|full, coverage-first)","/cve/coverage (GET - is anything actually being scanned)","/cve/decisions (GET - every stored decision)","/cve/journal (GET - append-only decision audit trail; ?limit=)","/cve/decision (POST - record a decision; ai may only propose)","/cve/decision/{finding_id} (DELETE - withdraw, finding returns to open)","/compliance/versions?framework= (GET - every version (always editable) + the selected one)","/compliance/versions (POST - create a version {framework, name, owner, note?, copy_from?}; it becomes selected)","/compliance/versions/select (POST - select the version to work on {framework, name})","/compliance/versions/rename (POST - rename a version {framework, name, new_name, owner})","/compliance/records?framework=&version= (GET - Statement of Applicability entries + ISMS clauses 4-10 of a version)","/compliance/soa (POST - SoA entry of an ISO Annex A control {control_id, applicable, justification, owner, version?})","/compliance/isms (POST - ISMS clause 4-10 item {clause, status, owner, note?, evidence_links?, version?})","/compliance/export?framework=&version= (GET - the auditor workbook of a version, .xlsx)","/compliance/files/status (GET - is an evidence bucket linked (stack_agent-swbucket), which, does it answer)","/compliance/files?framework=&item= (GET - evidence files of a framework / one control or isms:<clause>)","/compliance/files (POST multipart - attach a file to a control: framework, item, owner, version?, note?, file)","/compliance/files/{framework}/{file_id} (GET - the file; DELETE ?owner= - remove it)","/compliance/audit/seal (POST - snapshot: freeze a full run with a version's decisions; the version stays editable)","/compliance/audit/versions?framework= (GET - sealed audit versions, newest first)","/compliance/audit/compare?framework=&a=&b= (GET - decision + status changes between two versions)","/report/{scan_type}?version=NAME (GET - markdown report of a stored run, e.g. a sealed audit version)","/scans/push (POST - run scan and push results to git)","/scans/run (POST - run a scan and save it as a versioned run)","/scans/history (GET - list saved runs; ?scan_type=&limit=)","/scans/history/{scan_type} (GET - runs for one type; ?version=NAME resolves a label)","/scans/history/{scan_type}/{run_id} (GET - full stored run)","/scans/history/{scan_type}/{run_id}/version (POST - label/rename a run)","/scans/versions/{scan_type} (GET - named audit snapshots)","/scans/trend/{scan_type} (GET - score over time: improving/declining)","/scans/compare?scan_type=&a=&b= (GET - diff two runs)","/ui (Dashboard UI)","/ui/history (Audit Trail — all versioned runs)"]}