swagger.yaml

basePath: /api
consumes:
- application/json
definitions:
  api.Error:
    properties:
      errors:
        additionalProperties: {}
        type: object
    type: object
  auth.AuthHandler:
    type: object
  authn.JWK:
    properties:
      alg:
        type: string
      e:
        type: string
      kid:
        type: string
      kty:
        type: string
      "n":
        type: string
      use:
        type: string
    type: object
  datatypes.JSONType-labelfilter_Filter:
    type: object
  datatypes.JSONType-oscalTypes_1_1_3_ObjectiveStatus:
    type: object
  datatypes.JSONType-relational_Address:
    type: object
  datatypes.JSONType-relational_Base64:
    type: object
  datatypes.JSONType-relational_Citation:
    type: object
  datatypes.JSONType-relational_CombinationRule:
    type: object
  datatypes.JSONType-relational_FlatWithoutGrouping:
    type: object
  datatypes.JSONType-relational_ImplementationStatus:
    type: object
  datatypes.JSONType-relational_ImportProfile:
    type: object
  datatypes.JSONType-relational_IncludeAll:
    type: object
  datatypes.JSONType-relational_ParameterSelection:
    type: object
  datatypes.JSONType-relational_SecurityImpactLevel:
    type: object
  datatypes.JSONType-relational_Status:
    type: object
  datatypes.JSONType-relational_SystemComponentStatus:
    type: object
  datatypes.JSONType-relational_SystemInformation:
    type: object
  digest.EvidenceItem:
    properties:
      description:
        type: string
      expiresAt:
        description: Formatted expiration date string (empty if no expiration)
        type: string
      id:
        type: string
      labels:
        items:
          type: string
        type: array
      status:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  digest.EvidenceSummary:
    properties:
      expiredCount:
        format: int64
        type: integer
      notSatisfiedCount:
        format: int64
        type: integer
      otherCount:
        format: int64
        type: integer
      satisfiedCount:
        format: int64
        type: integer
      topExpired:
        description: Top items for the digest email
        items:
          $ref: '#/definitions/digest.EvidenceItem'
        type: array
      topNotSatisfied:
        items:
          $ref: '#/definitions/digest.EvidenceItem'
        type: array
      totalCount:
        format: int64
        type: integer
    type: object
  evidence.StatusCount:
    properties:
      count:
        type: integer
      status:
        type: string
    type: object
  gorm.DeletedAt:
    properties:
      time:
        type: string
      valid:
        description: Valid is true if Time is not NULL
        type: boolean
    type: object
  handler.EvidenceActivity:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      steps:
        items:
          $ref: '#/definitions/handler.EvidenceActivityStep'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  handler.EvidenceActivityStep:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  handler.EvidenceComponent:
    properties:
      description:
        type: string
      identifier:
        description: |-
          components/common/ssh
          components/common/github-repository
          components/common/github-organisation
          components/common/ubuntu-22
          components/internal/auth-policy
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      protocols:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Protocol'
        type: array
      purpose:
        type: string
      remarks:
        type: string
      title:
        type: string
      type:
        description: |-
          Software
          Service
        type: string
    type: object
  handler.EvidenceCreateRequest:
    properties:
      activities:
        description: What steps did we take to create this evidence
        items:
          $ref: '#/definitions/handler.EvidenceActivity'
        type: array
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      components:
        description: Which components of the subject are being observed. A tool, user,
          policy etc.
        items:
          $ref: '#/definitions/handler.EvidenceComponent'
        type: array
      description:
        type: string
      end:
        type: string
      expires:
        type: string
      inventoryItems:
        items:
          $ref: '#/definitions/handler.EvidenceInventoryItem'
        type: array
      labels:
        additionalProperties:
          type: string
        description: Assigning labels to Evidence makes it searchable and easily usable
          in the UI
        type: object
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      origins:
        description: Who or What is generating this evidence
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Origin'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      start:
        description: When did we start collecting the evidence, and when did the process
          end, and how long is it valid for ?
        type: string
      status:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ObjectiveStatus'
        description: Did we satisfy what was being tested for, or did we fail ?
      subjects:
        description: Who or What are we providing evidence for. What's under test.
        items:
          $ref: '#/definitions/handler.EvidenceSubject'
        type: array
      title:
        type: string
      uuid:
        description: |-
          UUID needs to remain consistent for a piece of evidence being collected periodically.
          It represents the "stream" of the same observation being made over time.
          For the same checks, performed on the same machine, the UUID for each check should remain the same.
          For the same check, performed on two different machines, the UUID should differ.
        type: string
    type: object
  handler.EvidenceInventoryItem:
    properties:
      description:
        type: string
      identifier:
        description: |-
          user/chris@linguine.tech
          operating-system/ubuntu/22.4
          web-server/ec2/i-12345
        type: string
      implementedComponents:
        items:
          properties:
            identifier:
              type: string
          type: object
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      title:
        type: string
      type:
        description: "\"operating-system\"\tdescription=\"System software that manages
          computer hardware, software resources, and provides common services for
          computer programs.\"\n\"database\"\t\t\tdescription=\"An electronic collection
          of data, or information, that is specially organized for rapid search and
          retrieval.\"\n\"web-server\"\t\t\tdescription=\"A system that delivers content
          or services to end users over the Internet or an intranet.\"\n\"dns-server\"\t\t\tdescription=\"A
          system that resolves domain names to internet protocol (IP) addresses.\"\n\"email-server\"\t\tdescription=\"A
          computer system that sends and receives electronic mail messages.\"\n\"directory-server\"\tdescription=\"A
          system that stores, organizes and provides access to directory information
          in order to unify network resources.\"\n\"pbx\"\t\t\t\tdescription=\"A private
          branch exchange (PBX) provides a a private telephone switchboard.\"\n\"firewall\"\t\t\tdescription=\"A
          network security system that monitors and controls incoming and outgoing
          network traffic based on predetermined security rules.\"\n\"router\"\t\t\t\tdescription=\"A
          physical or virtual networking device that forwards data packets between
          computer networks.\"\n\"switch\"\t\t\t\tdescription=\"A physical or virtual
          networking device that connects devices within a computer network by using
          packet switching to receive and forward data to the destination device.\"\n\"storage-array\"\t\tdescription=\"A
          consolidated, block-level data storage capability.\"\n\"appliance\"\t\t\tdescription=\"A
          physical or virtual machine that centralizes hardware, software, or services
          for a specific purpose.\""
        type: string
    type: object
  handler.EvidenceSubject:
    properties:
      description:
        type: string
      identifier:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      type:
        description: |-
          InventoryItem
          Component
        type: string
    type: object
  handler.FilterImportFileResult:
    properties:
      count:
        type: integer
      filename:
        type: string
      message:
        type: string
      success:
        type: boolean
    type: object
  handler.FilterImportResponse:
    properties:
      failed_count:
        type: integer
      results:
        items:
          $ref: '#/definitions/handler.FilterImportFileResult'
        type: array
      successful_count:
        type: integer
      total_dashboards:
        type: integer
      total_files:
        type: integer
    type: object
  handler.FilterWithAssociations:
    properties:
      components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemComponent'
        type: array
      controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
        type: array
      filter:
        $ref: '#/definitions/datatypes.JSONType-labelfilter_Filter'
      id:
        type: string
      name:
        type: string
    type: object
  handler.ForControl.EvidenceDataListResponse:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/handler.OscalLikeEvidence'
        type: array
      metadata:
        $ref: '#/definitions/handler.ForControl.responseMetadata'
    type: object
  handler.ForControl.responseMetadata:
    properties:
      control:
        $ref: '#/definitions/oscalTypes_1_1_3.Control'
    type: object
  handler.GenericDataListResponse-array_oscalTypes_1_1_3_Control:
    properties:
      data:
        description: Items from the list response
        items:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.Control'
          type: array
        type: array
    type: object
  handler.GenericDataListResponse-evidence_StatusCount:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/evidence.StatusCount'
        type: array
    type: object
  handler.GenericDataListResponse-handler_FilterWithAssociations:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/handler.FilterWithAssociations'
        type: array
    type: object
  handler.GenericDataListResponse-handler_OscalLikeEvidence:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/handler.OscalLikeEvidence'
        type: array
    type: object
  handler.GenericDataListResponse-handler_OverTime_HeartbeatInterval:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/handler.OverTime.HeartbeatInterval'
        type: array
    type: object
  handler.GenericDataListResponse-handler_StatusInterval:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/handler.StatusInterval'
        type: array
    type: object
  handler.GenericDataListResponse-oscal_InventoryItemWithSource:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscal.InventoryItemWithSource'
        type: array
    type: object
  handler.GenericDataListResponse-oscal_ProfileHandler:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscal.ProfileHandler'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_AssessmentPlan:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPlan'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_AssessmentResults:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentResults'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_AssociatedActivity:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssociatedActivity'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_AttestationStatements:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AttestationStatements'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Capability:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Capability'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Catalog:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Catalog'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_ComponentDefinition:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ComponentDefinition'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Control:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_ControlImplementationSet:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementationSet'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_ControlStatementImplementation:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ControlStatementImplementation'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_DefinedComponent:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.DefinedComponent'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Finding:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Finding'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Group:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Group'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_ImplementedRequirement:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ImplementedRequirement'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_ImplementedRequirementControlImplementation:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ImplementedRequirementControlImplementation'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Import:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Import'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_ImportComponentDefinition:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ImportComponentDefinition'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_IncorporatesComponent:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.IncorporatesComponent'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_InventoryItem:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_LeveragedAuthorization:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.LeveragedAuthorization'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Observation:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Observation'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Party:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Party'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_PlanOfActionAndMilestones:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.PlanOfActionAndMilestones'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_PoamItem:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.PoamItem'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Resource:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Resource'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Result:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Result'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Risk:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Risk'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_Role:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Role'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_SystemComponent:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemComponent'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_SystemSecurityPlan:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemSecurityPlan'
        type: array
    type: object
  handler.GenericDataListResponse-oscalTypes_1_1_3_SystemUser:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemUser'
        type: array
    type: object
  handler.GenericDataListResponse-relational_Evidence:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/relational.Evidence'
        type: array
    type: object
  handler.GenericDataListResponse-relational_SystemComponentSuggestion:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/relational.SystemComponentSuggestion'
        type: array
    type: object
  handler.GenericDataListResponse-relational_User:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/relational.User'
        type: array
    type: object
  handler.GenericDataResponse-array_oscalTypes_1_1_3_AssessmentAssets:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentAssets'
        type: array
    type: object
  handler.GenericDataResponse-array_oscalTypes_1_1_3_AssessmentSubject:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
        type: array
    type: object
  handler.GenericDataResponse-array_oscalTypes_1_1_3_Task:
    properties:
      data:
        description: Items from the list response
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Task'
        type: array
    type: object
  handler.GenericDataResponse-auth_AuthHandler:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/auth.AuthHandler'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-digest_EvidenceSummary:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/digest.EvidenceSummary'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-handler_FilterImportResponse:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/handler.FilterImportResponse'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-handler_FilterWithAssociations:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/handler.FilterWithAssociations'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-handler_OscalLikeEvidence:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/handler.OscalLikeEvidence'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-handler_SubscriptionsResponse:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/handler.SubscriptionsResponse'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-handler_riskResponse:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/handler.riskResponse'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscal_BuildByPropsResponse:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscal.BuildByPropsResponse'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscal_ImportResponse:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscal.ImportResponse'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscal_InventoryItemWithSource:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscal.InventoryItemWithSource'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscal_ProfileComplianceProgress:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscal.ProfileComplianceProgress'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscal_ProfileHandler:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscal.ProfileHandler'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Activity:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Activity'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentAssets:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.AssessmentAssets'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentPlan:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPlan'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentPlanTermsAndConditions:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPlanTermsAndConditions'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentResults:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.AssessmentResults'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentSubject:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_AttestationStatements:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.AttestationStatements'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_AuthorizationBoundary:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.AuthorizationBoundary'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_ByComponent:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ByComponent'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Capability:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Capability'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Catalog:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Catalog'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_ComponentDefinition:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ComponentDefinition'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Control:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Control'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_ControlImplementation:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementation'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_ControlImplementationSet:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementationSet'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_DataFlow:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.DataFlow'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_DefinedComponent:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.DefinedComponent'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Diagram:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Finding:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Finding'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Group:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Group'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_ImplementedRequirement:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ImplementedRequirement'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Import:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Import'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_ImportAp:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ImportAp'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_ImportProfile:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ImportProfile'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_ImportSsp:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.ImportSsp'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_InventoryItem:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_LeveragedAuthorization:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.LeveragedAuthorization'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_LocalDefinitions:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.LocalDefinitions'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Merge:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Merge'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Metadata:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Modify:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Modify'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_NetworkArchitecture:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.NetworkArchitecture'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Observation:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Observation'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Party:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Party'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_PlanOfActionAndMilestones:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.PlanOfActionAndMilestones'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_PlanOfActionAndMilestonesLocalDefinitions:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.PlanOfActionAndMilestonesLocalDefinitions'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_PoamItem:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.PoamItem'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Profile:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Profile'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Resource:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Resource'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Result:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Result'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Risk:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Risk'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Role:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Role'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Statement:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Statement'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_SystemCharacteristics:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.SystemCharacteristics'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_SystemComponent:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.SystemComponent'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_SystemId:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.SystemId'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_SystemImplementation:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.SystemImplementation'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_SystemSecurityPlan:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.SystemSecurityPlan'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_SystemUser:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.SystemUser'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-oscalTypes_1_1_3_Task:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/oscalTypes_1_1_3.Task'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-relational_Evidence:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/relational.Evidence'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-relational_Filter:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/relational.Filter'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-relational_User:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/relational.User'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-risks_RiskComponentLink:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/risks.RiskComponentLink'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-risks_RiskControlLink:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/risks.RiskControlLink'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-risks_RiskEvidenceLink:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/risks.RiskEvidenceLink'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-risks_RiskSubjectLink:
    properties:
      data:
        allOf:
        - $ref: '#/definitions/risks.RiskSubjectLink'
        description: Items from the list response
    type: object
  handler.GenericDataResponse-string:
    properties:
      data:
        description: Items from the list response
        type: string
    type: object
  handler.HeartbeatCreateRequest:
    properties:
      created_at:
        type: string
      uuid:
        type: string
    required:
    - created_at
    - uuid
    type: object
  handler.OscalLikeEvidence:
    properties:
      activities:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Activity'
        type: array
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemComponent'
        type: array
      description:
        type: string
      end:
        type: string
      expires:
        type: string
      id:
        type: string
      inventory-items:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
        type: array
      labels:
        description: Assigning labels to Evidence makes it searchable and easily usable
          in the UI
        items:
          $ref: '#/definitions/relational.Labels'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      origins:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Origin'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      start:
        description: When did we start collecting the evidence, and when did the process
          end, and how long is it valid for ?
        type: string
      status:
        $ref: '#/definitions/oscalTypes_1_1_3.ObjectiveStatus'
      subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
        type: array
      title:
        type: string
      uuid:
        description: |-
          UUID needs to remain consistent when automation runs again, but unique for each subject.
          It represents the "stream" of the same observation being made over time.
        type: string
    type: object
  handler.OverTime.HeartbeatInterval:
    properties:
      interval:
        type: string
      total:
        type: integer
    type: object
  handler.StatusInterval:
    properties:
      interval:
        type: string
      statuses:
        items:
          $ref: '#/definitions/evidence.StatusCount'
        type: array
    type: object
  handler.SubscriptionsResponse:
    properties:
      riskNotificationsSubscribed:
        type: boolean
      subscribed:
        type: boolean
      taskAvailableEmailSubscribed:
        type: boolean
      taskDailyDigestSubscribed:
        type: boolean
    type: object
  handler.UpdateSubscriptionsRequest:
    properties:
      riskNotificationsSubscribed:
        type: boolean
      subscribed:
        type: boolean
      taskAvailableEmailSubscribed:
        type: boolean
      taskDailyDigestSubscribed:
        type: boolean
    type: object
  handler.UserHandler:
    type: object
  handler.acceptRiskRequest:
    properties:
      justification:
        type: string
      reviewDeadline:
        type: string
    type: object
  handler.addComponentLinkRequest:
    properties:
      componentId:
        type: string
    type: object
  handler.addControlLinkRequest:
    properties:
      catalogId:
        type: string
      controlId:
        type: string
    type: object
  handler.addEvidenceLinkRequest:
    properties:
      evidenceId:
        type: string
    type: object
  handler.addSubjectLinkRequest:
    properties:
      subjectId:
        type: string
    type: object
  handler.createFilterRequest:
    properties:
      components:
        items:
          type: string
        type: array
      controls:
        items:
          type: string
        type: array
      filter:
        $ref: '#/definitions/labelfilter.Filter'
      name:
        type: string
    required:
    - filter
    - name
    type: object
  handler.createRiskRequest:
    properties:
      acceptanceJustification:
        type: string
      description:
        type: string
      impact:
        type: string
      lastReviewedAt:
        type: string
      likelihood:
        type: string
      ownerAssignments:
        items:
          $ref: '#/definitions/handler.riskOwnerAssignmentRequest'
        type: array
      primaryOwnerUserId:
        type: string
      reviewDeadline:
        type: string
      riskTemplateId:
        type: string
      sspId:
        type: string
      status:
        type: string
      title:
        type: string
    type: object
  handler.reviewRiskRequest:
    properties:
      decision:
        type: string
      nextReviewDeadline:
        type: string
      notes:
        type: string
      reviewedAt:
        type: string
    type: object
  handler.riskControlLinkResponse:
    properties:
      catalogId:
        type: string
      controlId:
        type: string
    type: object
  handler.riskOwnerAssignmentRequest:
    properties:
      isPrimary:
        type: boolean
      ownerKind:
        type: string
      ownerRef:
        type: string
    type: object
  handler.riskOwnerAssignmentResponse:
    properties:
      isPrimary:
        type: boolean
      ownerKind:
        type: string
      ownerRef:
        type: string
    type: object
  handler.riskResponse:
    properties:
      acceptanceJustification:
        type: string
      componentIds:
        items:
          type: string
        type: array
      controlLinks:
        items:
          $ref: '#/definitions/handler.riskControlLinkResponse'
        type: array
      createdAt:
        type: string
      dedupeKey:
        type: string
      description:
        type: string
      evidenceIds:
        items:
          type: string
        type: array
      firstSeenAt:
        type: string
      id:
        type: string
      impact:
        type: string
      lastReviewedAt:
        type: string
      lastSeenAt:
        type: string
      likelihood:
        type: string
      ownerAssignments:
        items:
          $ref: '#/definitions/handler.riskOwnerAssignmentResponse'
        type: array
      primaryOwnerUserId:
        type: string
      reviewDeadline:
        type: string
      riskTemplateId:
        type: string
      sourceType:
        type: string
      sspId:
        type: string
      status:
        type: string
      subjectIds:
        items:
          type: string
        type: array
      title:
        type: string
      updatedAt:
        type: string
    type: object
  handler.updateRiskRequest:
    properties:
      acceptanceJustification:
        type: string
      description:
        type: string
      impact:
        type: string
      lastReviewedAt:
        type: string
      likelihood:
        type: string
      ownerAssignments:
        items:
          $ref: '#/definitions/handler.riskOwnerAssignmentRequest'
        type: array
      primaryOwnerUserId:
        type: string
      reviewDeadline:
        type: string
      reviewJustification:
        type: string
      riskTemplateId:
        type: string
      status:
        type: string
      title:
        type: string
    type: object
  labelfilter.Condition:
    properties:
      label:
        description: Label name (e.g., "type", "group", "app").
        type: string
      operator:
        description: Operator (e.g., "=", "!=", etc.).
        type: string
      value:
        description: Value for the condition (e.g., "ssh", "prod").
        type: string
    type: object
  labelfilter.Filter:
    properties:
      scope:
        $ref: '#/definitions/labelfilter.Scope'
    type: object
  labelfilter.Query:
    properties:
      operator:
        description: Logical operator (e.g., "AND", "OR").
        type: string
      scopes:
        description: Scopes can be either `Condition` or nested `Query`.
        items:
          $ref: '#/definitions/labelfilter.Scope'
        type: array
    type: object
  labelfilter.Scope:
    properties:
      condition:
        $ref: '#/definitions/labelfilter.Condition'
      query:
        $ref: '#/definitions/labelfilter.Query'
    type: object
  oscal.BuildByPropsRequest:
    properties:
      catalog-id:
        example: 9b0c9c43-2722-4bbb-b132-13d34fb94d45
        type: string
      match-strategy:
        allOf:
        - $ref: '#/definitions/oscal.MatchStrategy'
        example: all
      rules:
        items:
          $ref: '#/definitions/oscal.rule'
        minItems: 1
        type: array
      title:
        example: My Custom Profile
        type: string
      version:
        example: 1.0.0
        type: string
    required:
    - catalog-id
    - match-strategy
    - rules
    - title
    type: object
  oscal.BuildByPropsResponse:
    properties:
      control-ids:
        items:
          type: string
        type: array
      profile:
        $ref: '#/definitions/oscalTypes_1_1_3.Profile'
      profile-id:
        type: string
    type: object
  oscal.CreateInventoryItemRequest:
    properties:
      destination:
        description: '"ssp", "poam", or "unattached"'
        type: string
      destination_id:
        type: string
      inventory_item:
        $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
    type: object
  oscal.ImportFileResult:
    properties:
      filename:
        type: string
      message:
        type: string
      success:
        type: boolean
      title:
        type: string
      type:
        type: string
    type: object
  oscal.ImportResponse:
    properties:
      failed_count:
        type: integer
      results:
        items:
          $ref: '#/definitions/oscal.ImportFileResult'
        type: array
      successful_count:
        type: integer
      total_files:
        type: integer
    type: object
  oscal.InventoryItemWithSource:
    properties:
      description:
        type: string
      implemented-components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ImplementedComponent'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
      source:
        type: string
      source_id:
        type: string
      source_type:
        type: string
      uuid:
        type: string
    type: object
  oscal.MatchStrategy:
    enum:
    - all
    - any
    type: string
    x-enum-varnames:
    - MatchStrategyAll
    - MatchStrategyAny
  oscal.ProfileComplianceControl:
    properties:
      catalogId:
        type: string
      computedStatus:
        type: string
      controlId:
        type: string
      groupId:
        type: string
      groupTitle:
        type: string
      implemented:
        type: boolean
      statusCounts:
        items:
          $ref: '#/definitions/oscal.ProfileComplianceStatusCount'
        type: array
      title:
        type: string
    type: object
  oscal.ProfileComplianceGroup:
    properties:
      compliancePercent:
        type: integer
      id:
        type: string
      notSatisfied:
        type: integer
      satisfied:
        type: integer
      title:
        type: string
      totalControls:
        type: integer
      unknown:
        type: integer
    type: object
  oscal.ProfileComplianceImplementation:
    properties:
      implementationPercent:
        type: integer
      implementedControls:
        type: integer
      unimplementedControls:
        type: integer
    type: object
  oscal.ProfileComplianceProgress:
    properties:
      controls:
        items:
          $ref: '#/definitions/oscal.ProfileComplianceControl'
        type: array
      groups:
        items:
          $ref: '#/definitions/oscal.ProfileComplianceGroup'
        type: array
      implementation:
        $ref: '#/definitions/oscal.ProfileComplianceImplementation'
      scope:
        $ref: '#/definitions/oscal.ProfileComplianceScope'
      summary:
        $ref: '#/definitions/oscal.ProfileComplianceSummary'
    type: object
  oscal.ProfileComplianceScope:
    properties:
      id:
        type: string
      title:
        type: string
      type:
        type: string
    type: object
  oscal.ProfileComplianceStatusCount:
    properties:
      count:
        type: integer
      status:
        type: string
    type: object
  oscal.ProfileComplianceSummary:
    properties:
      assessedPercent:
        type: integer
      compliancePercent:
        type: integer
      implementedControls:
        type: integer
      notSatisfied:
        type: integer
      satisfied:
        type: integer
      totalControls:
        type: integer
      unknown:
        type: integer
    type: object
  oscal.ProfileHandler:
    type: object
  oscal.RuleOperator:
    enum:
    - equals
    - contains
    - regex
    - in
    type: string
    x-enum-varnames:
    - RuleOperatorEquals
    - RuleOperatorContains
    - RuleOperatorRegex
    - RuleOperatorIn
  oscal.SystemComponentRequest:
    properties:
      definedComponentId:
        type: string
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      protocols:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Protocol'
        type: array
      purpose:
        type: string
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      status:
        $ref: '#/definitions/oscalTypes_1_1_3.SystemComponentStatus'
      title:
        type: string
      type:
        type: string
      uuid:
        type: string
    type: object
  oscal.rule:
    properties:
      name:
        example: class
        type: string
      ns:
        example: http://csrc.nist.gov/ns/oscal
        type: string
      operator:
        allOf:
        - $ref: '#/definitions/oscal.RuleOperator'
        example: equals
      value:
        example: technical
        type: string
    required:
    - operator
    - value
    type: object
  oscalTypes_1_1_3.Action:
    properties:
      date:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
      system:
        type: string
      type:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Activity:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      related-controls:
        $ref: '#/definitions/oscalTypes_1_1_3.ReviewedControls'
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      steps:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Step'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Addition:
    properties:
      by-id:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      params:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Parameter'
        type: array
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Part'
        type: array
      position:
        type: string
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      title:
        type: string
    type: object
  oscalTypes_1_1_3.Address:
    properties:
      addr-lines:
        items:
          type: string
        type: array
      city:
        type: string
      country:
        type: string
      postal-code:
        type: string
      state:
        type: string
      type:
        type: string
    type: object
  oscalTypes_1_1_3.Alteration:
    properties:
      adds:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Addition'
        type: array
      control-id:
        type: string
      removes:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Removal'
        type: array
    type: object
  oscalTypes_1_1_3.AssessedControls:
    properties:
      description:
        type: string
      exclude-controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessedControlsSelectControlById'
        type: array
      include-all:
        $ref: '#/definitions/oscalTypes_1_1_3.IncludeAll'
      include-controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessedControlsSelectControlById'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.AssessedControlsSelectControlById:
    properties:
      control-id:
        type: string
      statement-ids:
        items:
          type: string
        type: array
    type: object
  oscalTypes_1_1_3.AssessmentAssets:
    properties:
      assessment-platforms:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPlatform'
        type: array
      components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemComponent'
        type: array
    type: object
  oscalTypes_1_1_3.AssessmentLog:
    properties:
      entries:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentLogEntry'
        type: array
    type: object
  oscalTypes_1_1_3.AssessmentLogEntry:
    properties:
      description:
        type: string
      end:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      logged-by:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.LoggedBy'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      related-tasks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelatedTask'
        type: array
      remarks:
        type: string
      start:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.AssessmentPart:
    properties:
      class:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      name:
        type: string
      ns:
        type: string
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPart'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      prose:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.AssessmentPlan:
    properties:
      assessment-assets:
        $ref: '#/definitions/oscalTypes_1_1_3.AssessmentAssets'
      assessment-subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
        type: array
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      import-ssp:
        $ref: '#/definitions/oscalTypes_1_1_3.ImportSsp'
      local-definitions:
        $ref: '#/definitions/oscalTypes_1_1_3.LocalDefinitions'
      metadata:
        $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      reviewed-controls:
        $ref: '#/definitions/oscalTypes_1_1_3.ReviewedControls'
      tasks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Task'
        type: array
      terms-and-conditions:
        $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPlanTermsAndConditions'
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.AssessmentPlanTermsAndConditions:
    properties:
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPart'
        type: array
    type: object
  oscalTypes_1_1_3.AssessmentPlatform:
    properties:
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      title:
        type: string
      uses-components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.UsesComponent'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.AssessmentResults:
    properties:
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      import-ap:
        $ref: '#/definitions/oscalTypes_1_1_3.ImportAp'
      local-definitions:
        $ref: '#/definitions/oscalTypes_1_1_3.LocalDefinitions'
      metadata:
        $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      results:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Result'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.AssessmentSubject:
    properties:
      description:
        type: string
      exclude-subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SelectSubjectById'
        type: array
      include-all:
        $ref: '#/definitions/oscalTypes_1_1_3.IncludeAll'
      include-subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SelectSubjectById'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      type:
        type: string
    type: object
  oscalTypes_1_1_3.AssociatedActivity:
    properties:
      activity-uuid:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
        type: array
    type: object
  oscalTypes_1_1_3.AssociatedRisk:
    properties:
      risk-uuid:
        type: string
    type: object
  oscalTypes_1_1_3.AttestationStatements:
    properties:
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPart'
        type: array
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
    type: object
  oscalTypes_1_1_3.AuthorizationBoundary:
    properties:
      description:
        type: string
      diagrams:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.AuthorizedPrivilege:
    properties:
      description:
        type: string
      functions-performed:
        items:
          type: string
        type: array
      title:
        type: string
    type: object
  oscalTypes_1_1_3.BackMatter:
    properties:
      resources:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Resource'
        type: array
    type: object
  oscalTypes_1_1_3.Base64:
    properties:
      filename:
        type: string
      media-type:
        type: string
      value:
        type: string
    type: object
  oscalTypes_1_1_3.ByComponent:
    properties:
      component-uuid:
        type: string
      description:
        type: string
      export:
        $ref: '#/definitions/oscalTypes_1_1_3.Export'
      implementation-status:
        $ref: '#/definitions/oscalTypes_1_1_3.ImplementationStatus'
      inherited:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InheritedControlImplementation'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      satisfied:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SatisfiedControlImplementationResponsibility'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SetParameter'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Capability:
    properties:
      control-implementations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementationSet'
        type: array
      description:
        type: string
      incorporates-components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.IncorporatesComponent'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      name:
        type: string
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Catalog:
    properties:
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
        type: array
      groups:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Group'
        type: array
      metadata:
        $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      params:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Parameter'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Characterization:
    properties:
      facets:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Facet'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      origin:
        $ref: '#/definitions/oscalTypes_1_1_3.Origin'
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
    type: object
  oscalTypes_1_1_3.Citation:
    properties:
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      text:
        type: string
    type: object
  oscalTypes_1_1_3.CombinationRule:
    properties:
      method:
        type: string
    type: object
  oscalTypes_1_1_3.ComponentDefinition:
    properties:
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      capabilities:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Capability'
        type: array
      components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.DefinedComponent'
        type: array
      import-component-definitions:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ImportComponentDefinition'
        type: array
      metadata:
        $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ConstraintTest:
    properties:
      expression:
        type: string
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.Control:
    properties:
      class:
        type: string
      controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
        type: array
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      params:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Parameter'
        type: array
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Part'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      title:
        type: string
    type: object
  oscalTypes_1_1_3.ControlImplementation:
    properties:
      description:
        type: string
      implemented-requirements:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ImplementedRequirement'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SetParameter'
        type: array
    type: object
  oscalTypes_1_1_3.ControlImplementationResponsibility:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      provided-uuid:
        type: string
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ControlImplementationSet:
    properties:
      description:
        type: string
      implemented-requirements:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ImplementedRequirementControlImplementation'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SetParameter'
        type: array
      source:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ControlStatementImplementation:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      statement-id:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.CustomGrouping:
    properties:
      groups:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.CustomGroupingGroup'
        type: array
      insert-controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InsertControls'
        type: array
    type: object
  oscalTypes_1_1_3.CustomGroupingGroup:
    properties:
      class:
        type: string
      groups:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.CustomGroupingGroup'
        type: array
      id:
        type: string
      insert-controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InsertControls'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      params:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Parameter'
        type: array
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Part'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      title:
        type: string
    type: object
  oscalTypes_1_1_3.DataFlow:
    properties:
      description:
        type: string
      diagrams:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.DefinedComponent:
    properties:
      control-implementations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementationSet'
        type: array
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      protocols:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Protocol'
        type: array
      purpose:
        type: string
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      title:
        type: string
      type:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Diagram:
    properties:
      caption:
        type: string
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.DocumentId:
    properties:
      identifier:
        type: string
      scheme:
        type: string
    type: object
  oscalTypes_1_1_3.EventTiming:
    properties:
      at-frequency:
        $ref: '#/definitions/oscalTypes_1_1_3.FrequencyCondition'
      on-date:
        $ref: '#/definitions/oscalTypes_1_1_3.OnDateCondition'
      within-date-range:
        $ref: '#/definitions/oscalTypes_1_1_3.OnDateRangeCondition'
    type: object
  oscalTypes_1_1_3.Export:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      provided:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ProvidedControlImplementation'
        type: array
      remarks:
        type: string
      responsibilities:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementationResponsibility'
        type: array
    type: object
  oscalTypes_1_1_3.Facet:
    properties:
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      name:
        type: string
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      system:
        type: string
      value:
        type: string
    type: object
  oscalTypes_1_1_3.Finding:
    properties:
      description:
        type: string
      implementation-statement-uuid:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      origins:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Origin'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      related-observations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelatedObservation'
        type: array
      related-risks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssociatedRisk'
        type: array
      remarks:
        type: string
      target:
        $ref: '#/definitions/oscalTypes_1_1_3.FindingTarget'
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.FindingTarget:
    properties:
      description:
        type: string
      implementation-status:
        $ref: '#/definitions/oscalTypes_1_1_3.ImplementationStatus'
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      status:
        $ref: '#/definitions/oscalTypes_1_1_3.ObjectiveStatus'
      target-id:
        type: string
      title:
        type: string
      type:
        type: string
    type: object
  oscalTypes_1_1_3.FlatWithoutGrouping:
    additionalProperties: true
    type: object
  oscalTypes_1_1_3.FrequencyCondition:
    properties:
      period:
        type: integer
      unit:
        type: string
    type: object
  oscalTypes_1_1_3.Group:
    properties:
      class:
        type: string
      controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
        type: array
      groups:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Group'
        type: array
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      params:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Parameter'
        type: array
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Part'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      title:
        type: string
    type: object
  oscalTypes_1_1_3.Hash:
    properties:
      algorithm:
        type: string
      value:
        type: string
    type: object
  oscalTypes_1_1_3.IdentifiedSubject:
    properties:
      subject-placeholder-uuid:
        type: string
      subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
        type: array
    type: object
  oscalTypes_1_1_3.Impact:
    properties:
      adjustment-justification:
        type: string
      base:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      selected:
        type: string
    type: object
  oscalTypes_1_1_3.ImplementationStatus:
    properties:
      remarks:
        type: string
      state:
        type: string
    type: object
  oscalTypes_1_1_3.ImplementedComponent:
    properties:
      component-uuid:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
    type: object
  oscalTypes_1_1_3.ImplementedRequirement:
    properties:
      by-components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ByComponent'
        type: array
      control-id:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SetParameter'
        type: array
      statements:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Statement'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ImplementedRequirementControlImplementation:
    properties:
      control-id:
        type: string
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SetParameter'
        type: array
      statements:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ControlStatementImplementation'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Import:
    properties:
      exclude-controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SelectControlById'
        type: array
      href:
        type: string
      include-all:
        $ref: '#/definitions/oscalTypes_1_1_3.IncludeAll'
      include-controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SelectControlById'
        type: array
    type: object
  oscalTypes_1_1_3.ImportAp:
    properties:
      href:
        type: string
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.ImportComponentDefinition:
    properties:
      href:
        type: string
    type: object
  oscalTypes_1_1_3.ImportProfile:
    properties:
      href:
        type: string
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.ImportSsp:
    properties:
      href:
        type: string
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.IncludeAll:
    additionalProperties: true
    type: object
  oscalTypes_1_1_3.IncorporatesComponent:
    properties:
      component-uuid:
        type: string
      description:
        type: string
    type: object
  oscalTypes_1_1_3.InformationType:
    properties:
      availability-impact:
        $ref: '#/definitions/oscalTypes_1_1_3.Impact'
      categorizations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InformationTypeCategorization'
        type: array
      confidentiality-impact:
        $ref: '#/definitions/oscalTypes_1_1_3.Impact'
      description:
        type: string
      integrity-impact:
        $ref: '#/definitions/oscalTypes_1_1_3.Impact'
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.InformationTypeCategorization:
    properties:
      information-type-ids:
        items:
          type: string
        type: array
      system:
        type: string
    type: object
  oscalTypes_1_1_3.InheritedControlImplementation:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      provided-uuid:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.InsertControls:
    properties:
      exclude-controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SelectControlById'
        type: array
      include-all:
        $ref: '#/definitions/oscalTypes_1_1_3.IncludeAll'
      include-controls:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SelectControlById'
        type: array
      order:
        type: string
    type: object
  oscalTypes_1_1_3.InventoryItem:
    properties:
      description:
        type: string
      implemented-components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ImplementedComponent'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.LeveragedAuthorization:
    properties:
      date-authorized:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      party-uuid:
        type: string
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Link:
    properties:
      href:
        type: string
      media-type:
        type: string
      rel:
        type: string
      resource-fragment:
        type: string
      text:
        type: string
    type: object
  oscalTypes_1_1_3.LocalDefinitions:
    properties:
      activities:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Activity'
        type: array
      components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemComponent'
        type: array
      inventory-items:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
        type: array
      objectives-and-methods:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.LocalObjective'
        type: array
      remarks:
        type: string
      users:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemUser'
        type: array
    type: object
  oscalTypes_1_1_3.LocalObjective:
    properties:
      control-id:
        type: string
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Part'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.Location:
    properties:
      address:
        $ref: '#/definitions/oscalTypes_1_1_3.Address'
      email-addresses:
        items:
          type: string
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      telephone-numbers:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.TelephoneNumber'
        type: array
      title:
        type: string
      urls:
        items:
          type: string
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.LoggedBy:
    properties:
      party-uuid:
        type: string
      role-id:
        type: string
    type: object
  oscalTypes_1_1_3.Matching:
    properties:
      pattern:
        type: string
    type: object
  oscalTypes_1_1_3.Merge:
    properties:
      as-is:
        type: boolean
      combine:
        $ref: '#/definitions/oscalTypes_1_1_3.CombinationRule'
      custom:
        $ref: '#/definitions/oscalTypes_1_1_3.CustomGrouping'
      flat:
        $ref: '#/definitions/oscalTypes_1_1_3.FlatWithoutGrouping'
    type: object
  oscalTypes_1_1_3.Metadata:
    properties:
      actions:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Action'
        type: array
      document-ids:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.DocumentId'
        type: array
      last-modified:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      locations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Location'
        type: array
      oscal-version:
        type: string
      parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Party'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      published:
        type: string
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
      revisions:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RevisionHistoryEntry'
        type: array
      roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Role'
        type: array
      title:
        type: string
      version:
        type: string
    type: object
  oscalTypes_1_1_3.MitigatingFactor:
    properties:
      description:
        type: string
      implementation-uuid:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SubjectReference'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Modify:
    properties:
      alters:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Alteration'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ParameterSetting'
        type: array
    type: object
  oscalTypes_1_1_3.NetworkArchitecture:
    properties:
      description:
        type: string
      diagrams:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.ObjectiveStatus:
    properties:
      reason:
        type: string
      remarks:
        type: string
      state:
        type: string
    type: object
  oscalTypes_1_1_3.Observation:
    properties:
      collected:
        type: string
      description:
        type: string
      expires:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      methods:
        items:
          type: string
        type: array
      origins:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Origin'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      relevant-evidence:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelevantEvidence'
        type: array
      remarks:
        type: string
      subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SubjectReference'
        type: array
      title:
        type: string
      types:
        items:
          type: string
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.OnDateCondition:
    properties:
      date:
        type: string
    type: object
  oscalTypes_1_1_3.OnDateRangeCondition:
    properties:
      end:
        type: string
      start:
        type: string
    type: object
  oscalTypes_1_1_3.Origin:
    properties:
      actors:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.OriginActor'
        type: array
      related-tasks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelatedTask'
        type: array
    type: object
  oscalTypes_1_1_3.OriginActor:
    properties:
      actor-uuid:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      role-id:
        type: string
      type:
        type: string
    type: object
  oscalTypes_1_1_3.Parameter:
    properties:
      class:
        type: string
      constraints:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ParameterConstraint'
        type: array
      depends-on:
        type: string
      guidelines:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ParameterGuideline'
        type: array
      id:
        type: string
      label:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      select:
        $ref: '#/definitions/oscalTypes_1_1_3.ParameterSelection'
      usage:
        type: string
      values:
        items:
          type: string
        type: array
    type: object
  oscalTypes_1_1_3.ParameterConstraint:
    properties:
      description:
        type: string
      tests:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ConstraintTest'
        type: array
    type: object
  oscalTypes_1_1_3.ParameterGuideline:
    properties:
      prose:
        type: string
    type: object
  oscalTypes_1_1_3.ParameterSelection:
    properties:
      choice:
        items:
          type: string
        type: array
      how-many:
        type: string
    type: object
  oscalTypes_1_1_3.ParameterSetting:
    properties:
      class:
        type: string
      constraints:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ParameterConstraint'
        type: array
      depends-on:
        type: string
      guidelines:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ParameterGuideline'
        type: array
      label:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      param-id:
        type: string
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      select:
        $ref: '#/definitions/oscalTypes_1_1_3.ParameterSelection'
      usage:
        type: string
      values:
        items:
          type: string
        type: array
    type: object
  oscalTypes_1_1_3.Part:
    properties:
      class:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      name:
        type: string
      ns:
        type: string
      parts:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Part'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      prose:
        type: string
      title:
        type: string
    type: object
  oscalTypes_1_1_3.Party:
    properties:
      addresses:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Address'
        type: array
      email-addresses:
        items:
          type: string
        type: array
      external-ids:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.PartyExternalIdentifier'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      location-uuids:
        items:
          type: string
        type: array
      member-of-organizations:
        items:
          type: string
        type: array
      name:
        type: string
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      short-name:
        type: string
      telephone-numbers:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.TelephoneNumber'
        type: array
      type:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.PartyExternalIdentifier:
    properties:
      id:
        type: string
      scheme:
        type: string
    type: object
  oscalTypes_1_1_3.PlanOfActionAndMilestones:
    properties:
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      findings:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Finding'
        type: array
      import-ssp:
        $ref: '#/definitions/oscalTypes_1_1_3.ImportSsp'
      local-definitions:
        $ref: '#/definitions/oscalTypes_1_1_3.PlanOfActionAndMilestonesLocalDefinitions'
      metadata:
        $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      observations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Observation'
        type: array
      poam-items:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.PoamItem'
        type: array
      risks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Risk'
        type: array
      system-id:
        $ref: '#/definitions/oscalTypes_1_1_3.SystemId'
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.PlanOfActionAndMilestonesLocalDefinitions:
    properties:
      assessment-assets:
        $ref: '#/definitions/oscalTypes_1_1_3.AssessmentAssets'
      components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemComponent'
        type: array
      inventory-items:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.PoamItem:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      origins:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.PoamItemOrigin'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      related-findings:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelatedFinding'
        type: array
      related-observations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelatedObservation'
        type: array
      related-risks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssociatedRisk'
        type: array
      remarks:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.PoamItemOrigin:
    properties:
      actors:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.OriginActor'
        type: array
    type: object
  oscalTypes_1_1_3.PortRange:
    properties:
      end:
        type: integer
      start:
        type: integer
      transport:
        type: string
    type: object
  oscalTypes_1_1_3.Profile:
    properties:
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      imports:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Import'
        type: array
      merge:
        $ref: '#/definitions/oscalTypes_1_1_3.Merge'
      metadata:
        $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      modify:
        $ref: '#/definitions/oscalTypes_1_1_3.Modify'
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Property:
    properties:
      class:
        type: string
      group:
        type: string
      name:
        type: string
      ns:
        type: string
      remarks:
        type: string
      uuid:
        type: string
      value:
        type: string
    type: object
  oscalTypes_1_1_3.Protocol:
    properties:
      name:
        type: string
      port-ranges:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.PortRange'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ProvidedControlImplementation:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ReferencedControlObjectives:
    properties:
      description:
        type: string
      exclude-objectives:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SelectObjectiveById'
        type: array
      include-all:
        $ref: '#/definitions/oscalTypes_1_1_3.IncludeAll'
      include-objectives:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SelectObjectiveById'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.RelatedFinding:
    properties:
      finding-uuid:
        type: string
    type: object
  oscalTypes_1_1_3.RelatedObservation:
    properties:
      observation-uuid:
        type: string
    type: object
  oscalTypes_1_1_3.RelatedTask:
    properties:
      identified-subject:
        $ref: '#/definitions/oscalTypes_1_1_3.IdentifiedSubject'
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
      subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
        type: array
      task-uuid:
        type: string
    type: object
  oscalTypes_1_1_3.RelevantEvidence:
    properties:
      description:
        type: string
      href:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.Removal:
    properties:
      by-class:
        type: string
      by-id:
        type: string
      by-item-name:
        type: string
      by-name:
        type: string
      by-ns:
        type: string
    type: object
  oscalTypes_1_1_3.RequiredAsset:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SubjectReference'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Resource:
    properties:
      base64:
        $ref: '#/definitions/oscalTypes_1_1_3.Base64'
      citation:
        $ref: '#/definitions/oscalTypes_1_1_3.Citation'
      description:
        type: string
      document-ids:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.DocumentId'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      rlinks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResourceLink'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ResourceLink:
    properties:
      hashes:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Hash'
        type: array
      href:
        type: string
      media-type:
        type: string
    type: object
  oscalTypes_1_1_3.Response:
    properties:
      description:
        type: string
      lifecycle:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      origins:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Origin'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      required-assets:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RequiredAsset'
        type: array
      tasks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Task'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ResponsibleParty:
    properties:
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      party-uuids:
        items:
          type: string
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      role-id:
        type: string
    type: object
  oscalTypes_1_1_3.ResponsibleRole:
    properties:
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      party-uuids:
        items:
          type: string
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      role-id:
        type: string
    type: object
  oscalTypes_1_1_3.Result:
    properties:
      assessment-log:
        $ref: '#/definitions/oscalTypes_1_1_3.AssessmentLog'
      attestations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AttestationStatements'
        type: array
      description:
        type: string
      end:
        type: string
      findings:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Finding'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      local-definitions:
        $ref: '#/definitions/oscalTypes_1_1_3.LocalDefinitions'
      observations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Observation'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      reviewed-controls:
        $ref: '#/definitions/oscalTypes_1_1_3.ReviewedControls'
      risks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Risk'
        type: array
      start:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.ReviewedControls:
    properties:
      control-objective-selections:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ReferencedControlObjectives'
        type: array
      control-selections:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessedControls'
        type: array
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
    type: object
  oscalTypes_1_1_3.RevisionHistoryEntry:
    properties:
      last-modified:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      oscal-version:
        type: string
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      published:
        type: string
      remarks:
        type: string
      title:
        type: string
      version:
        type: string
    type: object
  oscalTypes_1_1_3.Risk:
    properties:
      characterizations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Characterization'
        type: array
      deadline:
        type: string
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      mitigating-factors:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.MitigatingFactor'
        type: array
      origins:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Origin'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      related-observations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelatedObservation'
        type: array
      remediations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Response'
        type: array
      risk-log:
        $ref: '#/definitions/oscalTypes_1_1_3.RiskLog'
      statement:
        type: string
      status:
        type: string
      threat-ids:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ThreatId'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.RiskLog:
    properties:
      entries:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RiskLogEntry'
        type: array
    type: object
  oscalTypes_1_1_3.RiskLogEntry:
    properties:
      description:
        type: string
      end:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      logged-by:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.LoggedBy'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      related-responses:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RiskResponseReference'
        type: array
      remarks:
        type: string
      start:
        type: string
      status-change:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.RiskResponseReference:
    properties:
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      related-tasks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelatedTask'
        type: array
      remarks:
        type: string
      response-uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Role:
    properties:
      description:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      short-name:
        type: string
      title:
        type: string
    type: object
  oscalTypes_1_1_3.SatisfiedControlImplementationResponsibility:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsibility-uuid:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.SecurityImpactLevel:
    properties:
      security-objective-availability:
        type: string
      security-objective-confidentiality:
        type: string
      security-objective-integrity:
        type: string
    type: object
  oscalTypes_1_1_3.SelectControlById:
    properties:
      matching:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Matching'
        type: array
      with-child-controls:
        type: string
      with-ids:
        items:
          type: string
        type: array
    type: object
  oscalTypes_1_1_3.SelectObjectiveById:
    properties:
      objective-id:
        type: string
    type: object
  oscalTypes_1_1_3.SelectSubjectById:
    properties:
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      subject-uuid:
        type: string
      type:
        type: string
    type: object
  oscalTypes_1_1_3.SetParameter:
    properties:
      param-id:
        type: string
      remarks:
        type: string
      values:
        items:
          type: string
        type: array
    type: object
  oscalTypes_1_1_3.Statement:
    properties:
      by-components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ByComponent'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      statement-id:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Status:
    properties:
      remarks:
        type: string
      state:
        type: string
    type: object
  oscalTypes_1_1_3.Step:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      reviewed-controls:
        $ref: '#/definitions/oscalTypes_1_1_3.ReviewedControls'
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.SubjectReference:
    properties:
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      subject-uuid:
        type: string
      title:
        type: string
      type:
        type: string
    type: object
  oscalTypes_1_1_3.SystemCharacteristics:
    properties:
      authorization-boundary:
        $ref: '#/definitions/oscalTypes_1_1_3.AuthorizationBoundary'
      data-flow:
        $ref: '#/definitions/oscalTypes_1_1_3.DataFlow'
      date-authorized:
        type: string
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      network-architecture:
        $ref: '#/definitions/oscalTypes_1_1_3.NetworkArchitecture'
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
      security-impact-level:
        $ref: '#/definitions/oscalTypes_1_1_3.SecurityImpactLevel'
      security-sensitivity-level:
        type: string
      status:
        $ref: '#/definitions/oscalTypes_1_1_3.Status'
      system-ids:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemId'
        type: array
      system-information:
        $ref: '#/definitions/oscalTypes_1_1_3.SystemInformation'
      system-name:
        type: string
      system-name-short:
        type: string
    type: object
  oscalTypes_1_1_3.SystemComponent:
    properties:
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      protocols:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Protocol'
        type: array
      purpose:
        type: string
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      status:
        $ref: '#/definitions/oscalTypes_1_1_3.SystemComponentStatus'
      title:
        type: string
      type:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.SystemComponentStatus:
    properties:
      remarks:
        type: string
      state:
        type: string
    type: object
  oscalTypes_1_1_3.SystemId:
    properties:
      id:
        type: string
      identifier-type:
        type: string
    type: object
  oscalTypes_1_1_3.SystemImplementation:
    properties:
      components:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemComponent'
        type: array
      inventory-items:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
        type: array
      leveraged-authorizations:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.LeveragedAuthorization'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      users:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemUser'
        type: array
    type: object
  oscalTypes_1_1_3.SystemInformation:
    properties:
      information-types:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.InformationType'
        type: array
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
    type: object
  oscalTypes_1_1_3.SystemSecurityPlan:
    properties:
      back-matter:
        $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      control-implementation:
        $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementation'
      import-profile:
        $ref: '#/definitions/oscalTypes_1_1_3.ImportProfile'
      metadata:
        $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      system-characteristics:
        $ref: '#/definitions/oscalTypes_1_1_3.SystemCharacteristics'
      system-implementation:
        $ref: '#/definitions/oscalTypes_1_1_3.SystemImplementation'
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.SystemUser:
    properties:
      authorized-privileges:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AuthorizedPrivilege'
        type: array
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      role-ids:
        items:
          type: string
        type: array
      short-name:
        type: string
      title:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.Task:
    properties:
      associated-activities:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssociatedActivity'
        type: array
      dependencies:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.TaskDependency'
        type: array
      description:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleRole'
        type: array
      subjects:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
        type: array
      tasks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Task'
        type: array
      timing:
        $ref: '#/definitions/oscalTypes_1_1_3.EventTiming'
      title:
        type: string
      type:
        type: string
      uuid:
        type: string
    type: object
  oscalTypes_1_1_3.TaskDependency:
    properties:
      remarks:
        type: string
      task-uuid:
        type: string
    type: object
  oscalTypes_1_1_3.TelephoneNumber:
    properties:
      number:
        type: string
      type:
        type: string
    type: object
  oscalTypes_1_1_3.ThreatId:
    properties:
      href:
        type: string
      id:
        type: string
      system:
        type: string
    type: object
  oscalTypes_1_1_3.UsesComponent:
    properties:
      component-uuid:
        type: string
      links:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.Property'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.ResponsibleParty'
        type: array
    type: object
  relational.Action:
    properties:
      date:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      metadata-id:
        description: Actions only exist on a metadata object. We'll link them straight
          there with a BelongsTo relationship
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsibleParties:
        items:
          $ref: '#/definitions/relational.ResponsibleParty'
        type: array
      system:
        description: required
        type: string
      type:
        description: required
        type: string
    type: object
  relational.Activity:
    properties:
      description:
        description: required
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      related-controls:
        $ref: '#/definitions/relational.ReviewedControls'
      relatedControlsID:
        type: string
      remarks:
        description: required
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      steps:
        items:
          $ref: '#/definitions/relational.Step'
        type: array
      title:
        type: string
    type: object
  relational.Addition:
    properties:
      alterationID:
        type: string
      by-id:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      params:
        items:
          $ref: '#/definitions/relational.Parameter'
        type: array
      parts:
        items:
          $ref: '#/definitions/relational.Part'
        type: array
      position:
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      title:
        type: string
    type: object
  relational.Address:
    properties:
      city:
        type: string
      country:
        type: string
      lines:
        items:
          type: string
        type: array
      postal-code:
        type: string
      state:
        type: string
      type:
        $ref: '#/definitions/relational.AddressType'
    type: object
  relational.AddressType:
    enum:
    - work
    - home
    type: string
    x-enum-varnames:
    - AddressTypeWork
    - AddressTypeHome
  relational.Alteration:
    properties:
      adds:
        items:
          $ref: '#/definitions/relational.Addition'
        type: array
      control-id:
        description: required
        type: string
      id:
        type: string
      modify-id:
        type: string
      removes:
        items:
          $ref: '#/definitions/relational.Removal'
        type: array
    type: object
  relational.AssessedControlsSelectControlById:
    properties:
      control:
        $ref: '#/definitions/relational.Control'
      controlID:
        type: string
      id:
        type: string
      statements:
        items:
          $ref: '#/definitions/relational.Statement'
        type: array
    type: object
  relational.AssessmentSubject:
    properties:
      description:
        type: string
      evidence:
        items:
          $ref: '#/definitions/relational.Evidence'
        type: array
      excludeSubjects:
        items:
          $ref: '#/definitions/relational.SelectSubjectById'
        type: array
      id:
        type: string
      includeAll:
        $ref: '#/definitions/datatypes.JSONType-relational_IncludeAll'
      includeSubjects:
        items:
          $ref: '#/definitions/relational.SelectSubjectById'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      sspId:
        type: string
      type:
        description: |-
          Type represents a component, party, location, user, or inventory item.
          It will likely be updated once we can map it correctly
        type: string
    type: object
  relational.AuthorizationBoundary:
    properties:
      description:
        type: string
      diagrams:
        items:
          $ref: '#/definitions/relational.Diagram'
        type: array
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      systemCharacteristicsId:
        type: string
    type: object
  relational.AuthorizedPrivilege:
    properties:
      description:
        type: string
      functions-performed:
        items:
          type: string
        type: array
      id:
        type: string
      systemUserId:
        type: string
      title:
        type: string
    type: object
  relational.BackMatter:
    properties:
      id:
        type: string
      parentID:
        type: string
      parentType:
        type: string
      resources:
        items:
          $ref: '#/definitions/relational.BackMatterResource'
        type: array
    type: object
  relational.BackMatterResource:
    properties:
      backMatterID:
        type: string
      base64:
        $ref: '#/definitions/datatypes.JSONType-relational_Base64'
      citation:
        $ref: '#/definitions/datatypes.JSONType-relational_Citation'
      description:
        type: string
      document-ids:
        items:
          $ref: '#/definitions/relational.DocumentID'
        type: array
      id:
        description: required
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      rlinks:
        items:
          $ref: '#/definitions/relational.ResourceLink'
        type: array
      title:
        type: string
    type: object
  relational.ByComponent:
    properties:
      component-uuid:
        type: string
      description:
        type: string
      export:
        $ref: '#/definitions/relational.Export'
      id:
        type: string
      implementation-status:
        $ref: '#/definitions/datatypes.JSONType-relational_ImplementationStatus'
      inherited-control-implementations:
        items:
          $ref: '#/definitions/relational.InheritedControlImplementation'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      parentID:
        description: As ByComponent can be found in Implemented Requirements & Statements,
          using GORM polymorphism to tell us where to attach
        type: string
      parentType:
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      satisfied:
        items:
          $ref: '#/definitions/relational.SatisfiedControlImplementationResponsibility'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/relational.SetParameter'
        type: array
    type: object
  relational.Capability:
    properties:
      componentDefinition:
        $ref: '#/definitions/relational.ComponentDefinition'
      componentDefinitionId:
        type: string
      control-implementations:
        items:
          $ref: '#/definitions/relational.ControlImplementationSet'
        type: array
      description:
        description: required
        type: string
      id:
        type: string
      incorporates-components:
        items:
          $ref: '#/definitions/relational.IncorporatesComponents'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      name:
        description: required
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
    type: object
  relational.ComponentDefinition:
    properties:
      back-matter:
        $ref: '#/definitions/relational.BackMatter'
      capabilities:
        items:
          $ref: '#/definitions/relational.Capability'
        type: array
      components:
        items:
          $ref: '#/definitions/relational.DefinedComponent'
        type: array
      id:
        type: string
      import-component-definitions:
        items:
          $ref: '#/definitions/relational.ImportComponentDefinition'
        type: array
      metadata:
        allOf:
        - $ref: '#/definitions/relational.Metadata'
        description: required
    type: object
  relational.Control:
    properties:
      catalogID:
        type: string
      class:
        type: string
      controls:
        items:
          $ref: '#/definitions/relational.Control'
        type: array
      filters:
        items:
          $ref: '#/definitions/relational.Filter'
        type: array
      id:
        description: required
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      params:
        items:
          $ref: '#/definitions/relational.Parameter'
        type: array
      parentID:
        type: string
      parentType:
        type: string
      parts:
        items:
          $ref: '#/definitions/relational.Part'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      title:
        description: required
        type: string
    type: object
  relational.ControlImplementation:
    properties:
      description:
        type: string
      id:
        type: string
      implemented-requirements:
        items:
          $ref: '#/definitions/relational.ImplementedRequirement'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/relational.SetParameter'
        type: array
      systemSecurityPlanId:
        type: string
    type: object
  relational.ControlImplementationResponsibility:
    properties:
      description:
        description: required
        type: string
      exportId:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      provided-uuid:
        type: string
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
    type: object
  relational.ControlImplementationSet:
    properties:
      definedComponent:
        $ref: '#/definitions/relational.DefinedComponent'
      definedComponentID:
        type: string
      description:
        description: required
        type: string
      id:
        type: string
      implemented-requirements:
        description: required
        items:
          $ref: '#/definitions/relational.ImplementedRequirementControlImplementation'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/relational.SetParameter'
        type: array
      source:
        description: required
        type: string
    type: object
  relational.ControlObjectiveSelection:
    properties:
      description:
        type: string
      excludeObjectives:
        items:
          $ref: '#/definitions/relational.SelectObjectiveById'
        type: array
      id:
        type: string
      includeAll:
        $ref: '#/definitions/datatypes.JSONType-relational_IncludeAll'
      includeObjectives:
        items:
          $ref: '#/definitions/relational.SelectObjectiveById'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      reviewedControlsID:
        type: string
    type: object
  relational.ControlSelection:
    properties:
      description:
        type: string
      excludeControls:
        items:
          $ref: '#/definitions/relational.AssessedControlsSelectControlById'
        type: array
      id:
        type: string
      includeAll:
        $ref: '#/definitions/datatypes.JSONType-relational_IncludeAll'
      includeControls:
        items:
          $ref: '#/definitions/relational.AssessedControlsSelectControlById'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      reviewedControlsID:
        type: string
    type: object
  relational.ControlStatementImplementation:
    properties:
      description:
        description: required
        type: string
      id:
        type: string
      implementedRequirementControlImplementationId:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      statement-id:
        description: required
        type: string
    type: object
  relational.DataFlow:
    properties:
      description:
        type: string
      diagrams:
        items:
          $ref: '#/definitions/relational.Diagram'
        type: array
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      systemCharacteristicsId:
        type: string
    type: object
  relational.DefinedComponent:
    properties:
      componentDefinition:
        $ref: '#/definitions/relational.ComponentDefinition'
      componentDefinitionID:
        type: string
      control-implementations:
        items:
          $ref: '#/definitions/relational.ControlImplementationSet'
        type: array
      description:
        description: required
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      protocols:
        items:
          $ref: '#/definitions/relational.Protocol'
        type: array
      purpose:
        type: string
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      title:
        description: required
        type: string
      type:
        description: required
        type: string
    type: object
  relational.Diagram:
    properties:
      caption:
        type: string
      description:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      parentID:
        type: string
      parentType:
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
    type: object
  relational.DocumentID:
    properties:
      identifier:
        type: string
      scheme:
        $ref: '#/definitions/relational.DocumentIDScheme'
    type: object
  relational.DocumentIDScheme:
    enum:
    - http://www.doi.org/
    type: string
    x-enum-varnames:
    - DocumentIDSchemeDoi
  relational.Evidence:
    properties:
      activities:
        description: What steps did we take to create this evidence
        items:
          $ref: '#/definitions/relational.Activity'
        type: array
      back-matter:
        $ref: '#/definitions/relational.BackMatter'
      components:
        description: Which components of the subject are being observed. A tool, user,
          policy etc.
        items:
          $ref: '#/definitions/relational.SystemComponent'
        type: array
      description:
        type: string
      end:
        type: string
      expires:
        type: string
      id:
        type: string
      inventory-items:
        items:
          $ref: '#/definitions/relational.InventoryItem'
        type: array
      labels:
        description: Assigning labels to Evidence makes it searchable and easily usable
          in the UI
        items:
          $ref: '#/definitions/relational.Labels'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      origins:
        description: Who or What is generating this evidence
        items:
          $ref: '#/definitions/relational.Origin'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      start:
        description: When did we start collecting the evidence, and when did the process
          end, and how long is it valid for ?
        type: string
      status:
        allOf:
        - $ref: '#/definitions/datatypes.JSONType-oscalTypes_1_1_3_ObjectiveStatus'
        description: Did we satisfy what was being tested for, or did we fail ?
      subjects:
        description: Who or What are we providing evidence for. What's under test.
        items:
          $ref: '#/definitions/relational.AssessmentSubject'
        type: array
      title:
        type: string
      uuid:
        description: |-
          UUID needs to remain consistent when automation runs again, but unique for each subject.
          It represents the "stream" of the same observation being made over time.
        type: string
    type: object
  relational.Export:
    properties:
      byComponentId:
        type: string
      description:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      provided:
        items:
          $ref: '#/definitions/relational.ProvidedControlImplementation'
        type: array
      remarks:
        type: string
      responsibilities:
        items:
          $ref: '#/definitions/relational.ControlImplementationResponsibility'
        type: array
    type: object
  relational.Filter:
    properties:
      components:
        items:
          $ref: '#/definitions/relational.SystemComponent'
        type: array
      controls:
        items:
          $ref: '#/definitions/relational.Control'
        type: array
      filter:
        $ref: '#/definitions/datatypes.JSONType-labelfilter_Filter'
      id:
        type: string
      name:
        type: string
    type: object
  relational.Hash:
    properties:
      algorithm:
        allOf:
        - $ref: '#/definitions/relational.HashAlgorithm'
        description: required
      value:
        description: required
        type: string
    type: object
  relational.HashAlgorithm:
    enum:
    - SHA-224
    - SHA-256
    - SHA-384
    - SHA-512
    - SHA3-224
    - SHA3-256
    - SHA3-384
    - SHA3-512
    type: string
    x-enum-varnames:
    - HashAlgorithmSHA_224
    - HashAlgorithmSHA_256
    - HashAlgorithmSHA_384
    - HashAlgorithmSHA_512
    - HashAlgorithmSHA3_224
    - HashAlgorithmSHA3_256
    - HashAlgorithmSHA3_384
    - HashAlgorithmSHA3_512
  relational.ImplementedComponent:
    properties:
      component:
        $ref: '#/definitions/relational.DefinedComponent'
      component-uuid:
        type: string
      id:
        type: string
      inventoryItemId:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/relational.ResponsibleParty'
        type: array
    type: object
  relational.ImplementedRequirement:
    properties:
      by-components:
        items:
          $ref: '#/definitions/relational.ByComponent'
        type: array
      control-id:
        type: string
      controlImplementationId:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/relational.SetParameter'
        type: array
      statements:
        items:
          $ref: '#/definitions/relational.Statement'
        type: array
    type: object
  relational.ImplementedRequirementControlImplementation:
    properties:
      control-id:
        description: required
        type: string
      controlImplementationSetID:
        type: string
      description:
        description: required
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-roles:
        description: required
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      set-parameters:
        items:
          $ref: '#/definitions/relational.SetParameter'
        type: array
      statements:
        items:
          $ref: '#/definitions/relational.ControlStatementImplementation'
        type: array
    type: object
  relational.Import:
    properties:
      exclude-controls:
        items:
          $ref: '#/definitions/relational.SelectControlById'
        type: array
      href:
        description: |-
          Href as per the OSCAL docs can be an absolute network path (potentially remote), relative or a URI fragment
          for the moment to make the system's life easier, it should be a URI fragment to back-matter and try and resolve
          back to an ingested catalog.
        type: string
      id:
        type: string
      include-all:
        $ref: '#/definitions/datatypes.JSONType-relational_IncludeAll'
      include-controls:
        items:
          $ref: '#/definitions/relational.SelectControlById'
        type: array
      profileID:
        type: string
    type: object
  relational.ImportComponentDefinition:
    properties:
      href:
        type: string
    type: object
  relational.IncorporatesComponents:
    properties:
      component-uuid:
        type: string
      description:
        type: string
    type: object
  relational.InheritedControlImplementation:
    properties:
      byComponentId:
        type: string
      description:
        description: required
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      provided-uuid:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
    type: object
  relational.InventoryItem:
    properties:
      description:
        type: string
      evidence:
        items:
          $ref: '#/definitions/relational.Evidence'
        type: array
      id:
        type: string
      implemented-components:
        items:
          $ref: '#/definitions/relational.ImplementedComponent'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/relational.ResponsibleParty'
        type: array
      systemImplementationId:
        type: string
    type: object
  relational.Labels:
    properties:
      name:
        type: string
      value:
        type: string
    type: object
  relational.LeveragedAuthorization:
    properties:
      date-authorized:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      party-uuid:
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      systemImplementationId:
        type: string
      title:
        type: string
    type: object
  relational.Link:
    properties:
      href:
        type: string
      media-type:
        type: string
      rel:
        type: string
      resource-fragment:
        type: string
      text:
        type: string
    type: object
  relational.Location:
    properties:
      address:
        $ref: '#/definitions/datatypes.JSONType-relational_Address'
      email-addresses:
        items:
          type: string
        type: array
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      telephone-numbers:
        items:
          $ref: '#/definitions/relational.TelephoneNumber'
        type: array
      title:
        type: string
      urls:
        items:
          type: string
        type: array
    type: object
  relational.Matching:
    properties:
      pattern:
        type: string
    type: object
  relational.Merge:
    properties:
      as-is:
        type: boolean
      combine:
        $ref: '#/definitions/datatypes.JSONType-relational_CombinationRule'
      flat:
        $ref: '#/definitions/datatypes.JSONType-relational_FlatWithoutGrouping'
      id:
        type: string
      profileID:
        type: string
    type: object
  relational.Metadata:
    properties:
      actions:
        items:
          $ref: '#/definitions/relational.Action'
        type: array
      document-ids:
        description: -> DocumentID
        items:
          $ref: '#/definitions/relational.DocumentID'
        type: array
      id:
        type: string
      last-modified:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      locations:
        items:
          $ref: '#/definitions/relational.Location'
        type: array
      oscal-version:
        type: string
      parentID:
        description: Metadata is shared across many resources, and so it mapped using
          a polymorphic relationship
        type: string
      parentType:
        type: string
      parties:
        items:
          $ref: '#/definitions/relational.Party'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      published:
        type: string
      remarks:
        type: string
      responsibleParties:
        items:
          $ref: '#/definitions/relational.ResponsibleParty'
        type: array
      revisions:
        items:
          $ref: '#/definitions/relational.Revision'
        type: array
      roles:
        items:
          $ref: '#/definitions/relational.Role'
        type: array
      title:
        type: string
      version:
        type: string
    type: object
  relational.Modify:
    properties:
      alters:
        items:
          $ref: '#/definitions/relational.Alteration'
        type: array
      id:
        type: string
      profileID:
        type: string
      set-parameters:
        items:
          $ref: '#/definitions/relational.ParameterSetting'
        type: array
    type: object
  relational.NetworkArchitecture:
    properties:
      description:
        type: string
      diagrams:
        items:
          $ref: '#/definitions/relational.Diagram'
        type: array
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      systemCharacteristicsId:
        type: string
    type: object
  relational.Origin:
    properties:
      actors:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.OriginActor'
        type: array
      related-tasks:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.RelatedTask'
        type: array
    type: object
  relational.Parameter:
    properties:
      class:
        type: string
      constraints:
        items:
          $ref: '#/definitions/relational.ParameterConstraint'
        type: array
      guidelines:
        items:
          $ref: '#/definitions/relational.ParameterGuideline'
        type: array
      id:
        type: string
      label:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      select:
        $ref: '#/definitions/datatypes.JSONType-relational_ParameterSelection'
      usage:
        type: string
      values:
        items:
          type: string
        type: array
    type: object
  relational.ParameterConstraint:
    properties:
      description:
        type: string
      tests:
        items:
          $ref: '#/definitions/relational.ParameterConstraintTest'
        type: array
    type: object
  relational.ParameterConstraintTest:
    properties:
      expression:
        type: string
      remarks:
        type: string
    type: object
  relational.ParameterGuideline:
    properties:
      prose:
        type: string
    type: object
  relational.ParameterSetting:
    properties:
      class:
        type: string
      constraints:
        items:
          $ref: '#/definitions/relational.ParameterConstraint'
        type: array
      depends-on:
        type: string
      guidelines:
        items:
          $ref: '#/definitions/relational.ParameterGuideline'
        type: array
      id:
        type: string
      label:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      modifyID:
        type: string
      param-id:
        description: required
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      select:
        $ref: '#/definitions/datatypes.JSONType-relational_ParameterSelection'
      values:
        items:
          type: string
        type: array
    type: object
  relational.Part:
    properties:
      class:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      name:
        type: string
      ns:
        type: string
      part_id:
        type: string
      parts:
        description: -> Part
        items:
          $ref: '#/definitions/relational.Part'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      prose:
        type: string
      title:
        type: string
    type: object
  relational.Party:
    properties:
      addresses:
        items:
          $ref: '#/definitions/relational.Address'
        type: array
      email-addresses:
        items:
          type: string
        type: array
      external-ids:
        items:
          $ref: '#/definitions/relational.PartyExternalID'
        type: array
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      locations:
        items:
          $ref: '#/definitions/relational.Location'
        type: array
      member-of-organizations:
        description: -> Party
        items:
          $ref: '#/definitions/relational.Party'
        type: array
      name:
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      short-name:
        type: string
      telephone-numbers:
        items:
          $ref: '#/definitions/relational.TelephoneNumber'
        type: array
      type:
        $ref: '#/definitions/relational.PartyType'
    type: object
  relational.PartyExternalID:
    properties:
      id:
        type: string
      scheme:
        $ref: '#/definitions/relational.PartyExternalIDScheme'
    type: object
  relational.PartyExternalIDScheme:
    enum:
    - http://orcid.org/
    type: string
    x-enum-varnames:
    - PartyExternalIDSchemeOrchid
  relational.PartyType:
    enum:
    - person
    - organization
    type: string
    x-enum-varnames:
    - PartyTypePerson
    - PartyTypeOrganization
  relational.Profile:
    properties:
      back-matter:
        $ref: '#/definitions/relational.BackMatter'
      controls:
        items:
          $ref: '#/definitions/relational.Control'
        type: array
      id:
        type: string
      imports:
        items:
          $ref: '#/definitions/relational.Import'
        type: array
      merge:
        $ref: '#/definitions/relational.Merge'
      metadata:
        $ref: '#/definitions/relational.Metadata'
      modify:
        $ref: '#/definitions/relational.Modify'
    type: object
  relational.Prop:
    properties:
      class:
        type: string
      group:
        type: string
      name:
        type: string
      ns:
        type: string
      remarks:
        type: string
      uuid:
        type: string
      value:
        type: string
    type: object
  relational.Protocol:
    properties:
      name:
        type: string
      port-ranges:
        items:
          $ref: '#/definitions/oscalTypes_1_1_3.PortRange'
        type: array
      title:
        type: string
      uuid:
        type: string
    type: object
  relational.ProvidedControlImplementation:
    properties:
      description:
        type: string
      exportId:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
    type: object
  relational.Removal:
    properties:
      by-class:
        type: string
      by-id:
        type: string
      by-item-name:
        type: string
      by-name:
        type: string
      by-ns:
        type: string
    type: object
  relational.ResourceLink:
    properties:
      hashes:
        items:
          $ref: '#/definitions/relational.Hash'
        type: array
      href:
        description: required
        type: string
      media-type:
        type: string
    type: object
  relational.ResponsibleParty:
    properties:
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      parentID:
        description: Polymorphic relationship - allows ResponsibleParty to belong
          to different parent types
        type: string
      parentType:
        type: string
      parties:
        items:
          $ref: '#/definitions/relational.ResponsiblePartyParties'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      role:
        $ref: '#/definitions/relational.Role'
      role-id:
        description: required
        type: string
    type: object
  relational.ResponsiblePartyParties:
    properties:
      partyID:
        type: string
      responsiblePartyID:
        type: string
    type: object
  relational.ResponsibleRole:
    properties:
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      parentID:
        type: string
      parentType:
        type: string
      parties:
        items:
          $ref: '#/definitions/relational.Party'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      role:
        $ref: '#/definitions/relational.Role'
      role-id:
        description: required
        type: string
    type: object
  relational.ReviewedControls:
    properties:
      controlObjectiveSelections:
        items:
          $ref: '#/definitions/relational.ControlObjectiveSelection'
        type: array
      controlSelections:
        description: required
        items:
          $ref: '#/definitions/relational.ControlSelection'
        type: array
      description:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
    type: object
  relational.Revision:
    properties:
      id:
        type: string
      last-modified:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      metadata-id:
        description: Revision only exist on a metadata object. We'll link them straight
          there with a BelongsTo relationship
        type: string
      oscal-version:
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      published:
        type: string
      remarks:
        type: string
      title:
        type: string
      version:
        description: required
        type: string
    type: object
  relational.Role:
    properties:
      description:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      short-name:
        type: string
      title:
        type: string
    type: object
  relational.SatisfiedControlImplementationResponsibility:
    properties:
      by-component-id:
        type: string
      description:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsibility-uuid:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
    type: object
  relational.SelectControlById:
    properties:
      id:
        type: string
      matching:
        items:
          $ref: '#/definitions/relational.Matching'
        type: array
      parentID:
        type: string
      parentType:
        type: string
      with-child-controls:
        type: string
      with-ids:
        items:
          type: string
        type: array
    type: object
  relational.SelectObjectiveById:
    properties:
      id:
        type: string
      objective:
        description: required
        type: string
      parentID:
        type: string
      parentType:
        type: string
    type: object
  relational.SelectSubjectById:
    properties:
      assessmentSubjectID:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      subjectUUID:
        description: |-
          SubjectUUID technically represents a UUID of a component, party, location, user, or inventory item.
          It will likely be updated once we can map it correctly
        type: string
    type: object
  relational.SetParameter:
    properties:
      param-id:
        type: string
      remarks:
        type: string
      values:
        items:
          type: string
        type: array
    type: object
  relational.Statement:
    properties:
      by-components:
        items:
          $ref: '#/definitions/relational.ByComponent'
        type: array
      id:
        type: string
      implementedRequirementId:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      statement-id:
        type: string
    type: object
  relational.Step:
    properties:
      activityID:
        type: string
      description:
        description: required
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      reviewed-controls:
        $ref: '#/definitions/relational.ReviewedControls'
      reviewedControlsID:
        type: string
      title:
        type: string
    type: object
  relational.SystemCharacteristics:
    properties:
      authorization-boundary:
        $ref: '#/definitions/relational.AuthorizationBoundary'
      dataFlow:
        $ref: '#/definitions/relational.DataFlow'
      date-authorized:
        type: string
      description:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      networkArchitecture:
        $ref: '#/definitions/relational.NetworkArchitecture'
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      responsible-parties:
        items:
          $ref: '#/definitions/relational.ResponsibleParty'
        type: array
      security-impact-level:
        $ref: '#/definitions/datatypes.JSONType-relational_SecurityImpactLevel'
      security-sensitivity-level:
        type: string
      status:
        $ref: '#/definitions/datatypes.JSONType-relational_Status'
      system-ids:
        items:
          $ref: '#/definitions/relational.SystemId'
        type: array
      system-information:
        $ref: '#/definitions/datatypes.JSONType-relational_SystemInformation'
      system-name:
        type: string
      system-name-short:
        type: string
      systemSecurityPlanId:
        type: string
    type: object
  relational.SystemComponent:
    properties:
      definedComponentId:
        type: string
      description:
        type: string
      evidence:
        items:
          $ref: '#/definitions/relational.Evidence'
        type: array
      filters:
        items:
          $ref: '#/definitions/relational.Filter'
        type: array
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      protocols:
        items:
          $ref: '#/definitions/relational.Protocol'
        type: array
      purpose:
        type: string
      remarks:
        type: string
      responsible-roles:
        items:
          $ref: '#/definitions/relational.ResponsibleRole'
        type: array
      status:
        $ref: '#/definitions/datatypes.JSONType-relational_SystemComponentStatus'
      systemImplementationId:
        type: string
      title:
        type: string
      type:
        type: string
    type: object
  relational.SystemComponentSuggestion:
    properties:
      componentDefinitionId:
        type: string
      definedComponentId:
        type: string
      description:
        type: string
      name:
        type: string
      purpose:
        type: string
      type:
        type: string
    type: object
  relational.SystemId:
    properties:
      id:
        type: string
      identifier-type:
        type: string
    type: object
  relational.SystemImplementation:
    properties:
      components:
        items:
          $ref: '#/definitions/relational.SystemComponent'
        type: array
      id:
        type: string
      inventory-items:
        items:
          $ref: '#/definitions/relational.InventoryItem'
        type: array
      leveraged-authorizations:
        items:
          $ref: '#/definitions/relational.LeveragedAuthorization'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      systemSecurityPlanId:
        type: string
      users:
        items:
          $ref: '#/definitions/relational.SystemUser'
        type: array
    type: object
  relational.SystemSecurityPlan:
    properties:
      back-matter:
        $ref: '#/definitions/relational.BackMatter'
      control-implementation:
        $ref: '#/definitions/relational.ControlImplementation'
      id:
        type: string
      import-profile:
        $ref: '#/definitions/datatypes.JSONType-relational_ImportProfile'
      metadata:
        $ref: '#/definitions/relational.Metadata'
      profile:
        $ref: '#/definitions/relational.Profile'
      profileID:
        type: string
      system-characteristics:
        $ref: '#/definitions/relational.SystemCharacteristics'
      system-implementation:
        $ref: '#/definitions/relational.SystemImplementation'
    type: object
  relational.SystemUser:
    properties:
      authorized-privileges:
        items:
          $ref: '#/definitions/relational.AuthorizedPrivilege'
        type: array
      description:
        type: string
      id:
        type: string
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      remarks:
        type: string
      role-ids:
        items:
          type: string
        type: array
      short-name:
        type: string
      systemImplementationId:
        type: string
      title:
        type: string
    type: object
  relational.TelephoneNumber:
    properties:
      number:
        type: string
      type:
        $ref: '#/definitions/relational.TelephoneNumberType'
    type: object
  relational.TelephoneNumberType:
    enum:
    - home
    - office
    - mobile
    type: string
    x-enum-varnames:
    - TelephoneNumberTypeHome
    - TelephoneNumberTypeOffice
    - TelephoneNumberTypeMobile
  relational.User:
    properties:
      authMethod:
        type: string
      createdAt:
        type: string
      deletedAt:
        allOf:
        - $ref: '#/definitions/gorm.DeletedAt'
        description: Soft delete
      digestSubscribed:
        description: DigestSubscribed indicates if the user wants to receive evidence
          digest emails
        type: boolean
      email:
        type: string
      failedLogins:
        type: integer
      firstName:
        type: string
      id:
        type: string
      isActive:
        type: boolean
      isLocked:
        type: boolean
      lastLogin:
        type: string
      lastName:
        type: string
      riskNotificationsSubscribed:
        description: |-
          RiskNotificationsSubscribed indicates if the user wants to receive risk lifecycle notifications.
          The DB default is intentionally true so existing users are opted in when the column is introduced.
        type: boolean
      taskAvailableEmailSubscribed:
        description: TaskAvailableEmailSubscribed indicates if the user wants an email
          when tasks become available
        type: boolean
      taskDailyDigestSubscribed:
        description: TaskDailyDigestSubscribed indicates if the user wants to receive
          a daily task digest email
        type: boolean
      updatedAt:
        type: string
      userAttributes:
        type: string
    type: object
  risks.RiskComponentLink:
    properties:
      componentId:
        type: string
      createdAt:
        type: string
      createdById:
        type: string
      riskId:
        type: string
    type: object
  risks.RiskControlLink:
    properties:
      catalogId:
        type: string
      controlId:
        type: string
      createdAt:
        type: string
      createdById:
        type: string
      riskId:
        type: string
    type: object
  risks.RiskEvidenceLink:
    properties:
      createdAt:
        type: string
      createdById:
        type: string
      evidenceId:
        description: EvidenceID stores the evidence stream UUID (evidences.uuid),
          not a single evidence row ID.
        type: string
      riskId:
        type: string
    type: object
  risks.RiskSubjectLink:
    properties:
      createdAt:
        type: string
      createdById:
        type: string
      riskId:
        type: string
      subjectId:
        type: string
    type: object
  service.ListResponse-handler_riskResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/handler.riskResponse'
        type: array
      limit:
        type: integer
      page:
        type: integer
      total:
        type: integer
      totalPages:
        type: integer
    type: object
  service.ListResponse-risks_RiskComponentLink:
    properties:
      data:
        items:
          $ref: '#/definitions/risks.RiskComponentLink'
        type: array
      limit:
        type: integer
      page:
        type: integer
      total:
        type: integer
      totalPages:
        type: integer
    type: object
  service.ListResponse-risks_RiskControlLink:
    properties:
      data:
        items:
          $ref: '#/definitions/risks.RiskControlLink'
        type: array
      limit:
        type: integer
      page:
        type: integer
      total:
        type: integer
      totalPages:
        type: integer
    type: object
  service.ListResponse-risks_RiskSubjectLink:
    properties:
      data:
        items:
          $ref: '#/definitions/risks.RiskSubjectLink'
        type: array
      limit:
        type: integer
      page:
        type: integer
      total:
        type: integer
      totalPages:
        type: integer
    type: object
  service.ListResponse-templates_evidenceTemplateResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/templates.evidenceTemplateResponse'
        type: array
      limit:
        type: integer
      page:
        type: integer
      total:
        type: integer
      totalPages:
        type: integer
    type: object
  service.ListResponse-templates_riskTemplateResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/templates.riskTemplateResponse'
        type: array
      limit:
        type: integer
      page:
        type: integer
      total:
        type: integer
      totalPages:
        type: integer
    type: object
  service.ListResponse-templates_subjectTemplateResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/templates.subjectTemplateResponse'
        type: array
      limit:
        type: integer
      page:
        type: integer
      total:
        type: integer
      totalPages:
        type: integer
    type: object
  service.ListResponse-uuid_UUID:
    properties:
      data:
        items:
          type: string
        type: array
      limit:
        type: integer
      page:
        type: integer
      total:
        type: integer
      totalPages:
        type: integer
    type: object
  templates.evidenceTemplateDataResponse:
    properties:
      data:
        $ref: '#/definitions/templates.evidenceTemplateResponse'
    type: object
  templates.evidenceTemplateLabelSchemaFieldRequest:
    properties:
      description:
        type: string
      key:
        type: string
      required:
        type: boolean
    type: object
  templates.evidenceTemplateLabelSchemaFieldResponse:
    properties:
      description:
        type: string
      key:
        type: string
      required:
        type: boolean
    type: object
  templates.evidenceTemplateResponse:
    properties:
      createdAt:
        type: string
      description:
        type: string
      id:
        type: string
      isActive:
        type: boolean
      labelSchema:
        items:
          $ref: '#/definitions/templates.evidenceTemplateLabelSchemaFieldResponse'
        type: array
      methods:
        items:
          type: string
        type: array
      pluginId:
        type: string
      policyPackage:
        type: string
      riskTemplateIds:
        items:
          type: string
        type: array
      selectorLabels:
        items:
          $ref: '#/definitions/templates.evidenceTemplateSelectorLabelResponse'
        type: array
      subjectTemplateIds:
        items:
          type: string
        type: array
      title:
        type: string
      updatedAt:
        type: string
    type: object
  templates.evidenceTemplateSelectorLabelRequest:
    properties:
      key:
        type: string
      value:
        type: string
    type: object
  templates.evidenceTemplateSelectorLabelResponse:
    properties:
      key:
        type: string
      value:
        type: string
    type: object
  templates.remediationTaskRequest:
    properties:
      orderIndex:
        type: integer
      title:
        type: string
    type: object
  templates.remediationTaskResponse:
    properties:
      id:
        type: string
      orderIndex:
        type: integer
      title:
        type: string
    type: object
  templates.remediationTemplateRequest:
    properties:
      description:
        type: string
      tasks:
        items:
          $ref: '#/definitions/templates.remediationTaskRequest'
        type: array
      title:
        type: string
    type: object
  templates.remediationTemplateResponse:
    properties:
      description:
        type: string
      id:
        type: string
      tasks:
        items:
          $ref: '#/definitions/templates.remediationTaskResponse'
        type: array
      title:
        type: string
    type: object
  templates.riskTemplateDataResponse:
    properties:
      data:
        $ref: '#/definitions/templates.riskTemplateResponse'
    type: object
  templates.riskTemplateResponse:
    properties:
      createdAt:
        type: string
      id:
        type: string
      impactHint:
        type: string
      isActive:
        type: boolean
      likelihoodHint:
        type: string
      name:
        type: string
      pluginId:
        type: string
      policyPackage:
        type: string
      remediationTemplate:
        $ref: '#/definitions/templates.remediationTemplateResponse'
      statement:
        type: string
      threatIds:
        items:
          $ref: '#/definitions/templates.threatIDResponse'
        type: array
      title:
        type: string
      updatedAt:
        type: string
      violationIds:
        items:
          type: string
        type: array
    type: object
  templates.subjectTemplateDataResponse:
    properties:
      data:
        $ref: '#/definitions/templates.subjectTemplateResponse'
    type: object
  templates.subjectTemplateLabelSchemaFieldRequest:
    properties:
      description:
        type: string
      key:
        type: string
    type: object
  templates.subjectTemplateLabelSchemaFieldResponse:
    properties:
      description:
        type: string
      key:
        type: string
    type: object
  templates.subjectTemplateResponse:
    properties:
      createdAt:
        type: string
      descriptionTemplate:
        type: string
      id:
        type: string
      identityLabelKeys:
        items:
          type: string
        type: array
      labelSchema:
        items:
          $ref: '#/definitions/templates.subjectTemplateLabelSchemaFieldResponse'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      name:
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      purposeTemplate:
        type: string
      remarksTemplate:
        type: string
      selectorLabels:
        items:
          $ref: '#/definitions/templates.subjectTemplateSelectorLabelResponse'
        type: array
      sourceMode:
        type: string
      titleTemplate:
        type: string
      type:
        type: string
      updatedAt:
        type: string
    type: object
  templates.subjectTemplateSelectorLabelRequest:
    properties:
      key:
        type: string
      value:
        type: string
    type: object
  templates.subjectTemplateSelectorLabelResponse:
    properties:
      key:
        type: string
      value:
        type: string
    type: object
  templates.threatIDRequest:
    properties:
      id:
        type: string
      system:
        type: string
      title:
        type: string
      url:
        type: string
    type: object
  templates.threatIDResponse:
    properties:
      id:
        type: string
      system:
        type: string
      title:
        type: string
      url:
        type: string
    type: object
  templates.upsertEvidenceTemplateRequest:
    properties:
      description:
        type: string
      isActive:
        type: boolean
      labelSchema:
        items:
          $ref: '#/definitions/templates.evidenceTemplateLabelSchemaFieldRequest'
        type: array
      methods:
        items:
          type: string
        type: array
      pluginId:
        type: string
      policyPackage:
        type: string
      riskTemplateIds:
        items:
          type: string
        type: array
      selectorLabels:
        items:
          $ref: '#/definitions/templates.evidenceTemplateSelectorLabelRequest'
        type: array
      subjectTemplateIds:
        items:
          type: string
        type: array
      title:
        type: string
    type: object
  templates.upsertRiskTemplateRequest:
    properties:
      impactHint:
        type: string
      isActive:
        type: boolean
      likelihoodHint:
        type: string
      name:
        type: string
      pluginId:
        type: string
      policyPackage:
        type: string
      remediationTemplate:
        $ref: '#/definitions/templates.remediationTemplateRequest'
      statement:
        type: string
      threatIds:
        items:
          $ref: '#/definitions/templates.threatIDRequest'
        type: array
      title:
        type: string
      violationIds:
        items:
          type: string
        type: array
    type: object
  templates.upsertSubjectTemplateRequest:
    properties:
      descriptionTemplate:
        type: string
      identityLabelKeys:
        items:
          type: string
        type: array
      labelSchema:
        items:
          $ref: '#/definitions/templates.subjectTemplateLabelSchemaFieldRequest'
        type: array
      links:
        items:
          $ref: '#/definitions/relational.Link'
        type: array
      name:
        type: string
      props:
        items:
          $ref: '#/definitions/relational.Prop'
        type: array
      purposeTemplate:
        type: string
      remarksTemplate:
        type: string
      selectorLabels:
        items:
          $ref: '#/definitions/templates.subjectTemplateSelectorLabelRequest'
        type: array
      sourceMode:
        type: string
      titleTemplate:
        type: string
      type:
        type: string
    required:
    - identityLabelKeys
    - labelSchema
    - name
    - selectorLabels
    - sourceMode
    - type
    type: object
  time.Duration:
    enum:
    - -9223372036854775808
    - 9223372036854775807
    - 1
    - 1000
    - 1000000
    - 1000000000
    - 60000000000
    - 3600000000000
    format: int64
    type: integer
    x-enum-varnames:
    - minDuration
    - maxDuration
    - Nanosecond
    - Microsecond
    - Millisecond
    - Second
    - Minute
    - Hour
  workflow.EvidenceSubmission:
    properties:
      description:
        type: string
      evidence-id:
        type: string
      evidence-type:
        type: string
      file-content:
        description: Base64 encoded file content
        type: string
      file-hash:
        type: string
      file-path:
        type: string
      file-size:
        type: integer
      media-type:
        description: MIME type (e.g., "application/pdf", "image/png")
        type: string
      metadata:
        type: string
      name:
        type: string
    type: object
  workflow.ExecutionMetrics:
    properties:
      averageStepDuration:
        $ref: '#/definitions/time.Duration'
      duration:
        $ref: '#/definitions/time.Duration'
      executionID:
        type: string
      longestStepDuration:
        $ref: '#/definitions/time.Duration'
      totalSteps:
        type: integer
    type: object
  workflow.ExecutionStatus:
    properties:
      blockedSteps:
        type: integer
      cancelledSteps:
        type: integer
      completedAt:
        type: string
      completedSteps:
        type: integer
      executionID:
        type: string
      failedAt:
        type: string
      failedSteps:
        type: integer
      failureReason:
        type: string
      inProgressSteps:
        type: integer
      overdueSteps:
        type: integer
      pendingSteps:
        type: integer
      startedAt:
        type: string
      status:
        type: string
      totalSteps:
        type: integer
    type: object
  workflows.BulkReassignRoleResponse:
    properties:
      data:
        $ref: '#/definitions/workflows.BulkReassignRoleResponseData'
    type: object
  workflows.BulkReassignRoleResponseData:
    properties:
      execution-id:
        type: string
      reassigned-count:
        type: integer
      reassigned-step-execution-ids:
        items:
          type: string
        type: array
      role-name:
        type: string
    type: object
  workflows.CancelWorkflowExecutionRequest:
    properties:
      reason:
        type: string
    type: object
  workflows.ControlRelationship:
    properties:
      catalog_id:
        description: Link to catalog if available
        type: string
      control_id:
        description: Control Information
        type: string
      control_source:
        description: e.g., "NIST 800-53 Rev 5", "ISO 27001"
        type: string
      created-at:
        type: string
      deleted_at:
        $ref: '#/definitions/gorm.DeletedAt'
      id:
        type: string
      is_active:
        type: boolean
      relationship_type:
        description: Relationship Information
        type: string
      strength:
        description: primary, secondary, supporting
        type: string
      updated-at:
        type: string
      workflow_definition:
        allOf:
        - $ref: '#/definitions/workflows.WorkflowDefinition'
        description: Relationships
      workflow_definition_id:
        description: Foreign Keys
        type: string
    type: object
  workflows.ControlRelationshipListResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/workflows.ControlRelationship'
        type: array
    type: object
  workflows.ControlRelationshipResponse:
    properties:
      data:
        $ref: '#/definitions/workflows.ControlRelationship'
    type: object
  workflows.CreateControlRelationshipRequest:
    properties:
      catalog-id:
        type: string
      control-id:
        type: string
      description:
        type: string
      is-active:
        type: boolean
      relationship-type:
        description: If not provided - 'satisfies' is used
        type: string
      strength:
        description: If not provided - 'primary' is used
        type: string
      workflow-definition-id:
        type: string
    required:
    - catalog-id
    - control-id
    - workflow-definition-id
    type: object
  workflows.CreateRoleAssignmentRequest:
    properties:
      assigned-to-id:
        type: string
      assigned-to-type:
        type: string
      is-active:
        type: boolean
      role-name:
        type: string
      workflow-instance-id:
        type: string
    required:
    - assigned-to-id
    - assigned-to-type
    - role-name
    - workflow-instance-id
    type: object
  workflows.CreateWorkflowDefinitionRequest:
    properties:
      description:
        type: string
      evidence-required:
        type: string
      grace-period-days:
        type: integer
      name:
        type: string
      suggested-cadence:
        type: string
      version:
        type: string
    required:
    - name
    type: object
  workflows.CreateWorkflowInstanceRequest:
    properties:
      cadence:
        type: string
      description:
        type: string
      grace-period-days:
        type: integer
      is-active:
        type: boolean
      name:
        type: string
      system-id:
        type: string
      workflow-definition-id:
        type: string
    required:
    - name
    - system-id
    - workflow-definition-id
    type: object
  workflows.CreateWorkflowStepDefinitionRequest:
    properties:
      depends-on:
        description: Array of step IDs this step depends on
        items:
          type: string
        type: array
      description:
        type: string
      estimated-duration:
        type: integer
      evidence-required:
        items:
          $ref: '#/definitions/workflows.EvidenceRequirement'
        type: array
      grace-period-days:
        type: integer
      name:
        type: string
      responsible-role:
        type: string
      workflow-definition-id:
        type: string
    required:
    - name
    - responsible-role
    - workflow-definition-id
    type: object
  workflows.EvidenceRequirement:
    properties:
      description:
        type: string
      required:
        type: boolean
      type:
        type: string
    type: object
  workflows.FailStepRequest:
    properties:
      reason:
        type: string
    required:
    - reason
    type: object
  workflows.MyAssignmentsResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/workflows.StepExecution'
        type: array
      has-more:
        type: boolean
      limit:
        type: integer
      offset:
        type: integer
      total:
        type: integer
    type: object
  workflows.ReassignRoleRequest:
    properties:
      new-assigned-to-id:
        type: string
      new-assigned-to-type:
        enum:
        - user
        - group
        - email
        type: string
      reason:
        type: string
      role-name:
        type: string
    required:
    - new-assigned-to-id
    - new-assigned-to-type
    - role-name
    type: object
  workflows.ReassignStepRequest:
    properties:
      assigned-to-id:
        type: string
      assigned-to-type:
        enum:
        - user
        - group
        - email
        type: string
      reason:
        type: string
    required:
    - assigned-to-id
    - assigned-to-type
    type: object
  workflows.RoleAssignment:
    properties:
      assigned_to_id:
        description: User ID, group ID, or email
        type: string
      assigned_to_type:
        description: user, group, email
        type: string
      id:
        type: string
      is_active:
        type: boolean
      role_name:
        type: string
      workflow_instance:
        allOf:
        - $ref: '#/definitions/workflows.WorkflowInstance'
        description: Relationships
      workflow_instance_id:
        type: string
    type: object
  workflows.RoleAssignmentListResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/workflows.RoleAssignment'
        type: array
    type: object
  workflows.RoleAssignmentResponse:
    properties:
      data:
        $ref: '#/definitions/workflows.RoleAssignment'
    type: object
  workflows.StartWorkflowExecutionRequest:
    properties:
      triggered-by:
        type: string
      triggered-by-id:
        type: string
      workflow-instance-id:
        type: string
    required:
    - triggered-by
    - workflow-instance-id
    type: object
  workflows.StepDependency:
    properties:
      depends_on_step:
        $ref: '#/definitions/workflows.WorkflowStepDefinition'
      depends_on_step_id:
        type: string
      id:
        type: string
      workflow_step_definition:
        allOf:
        - $ref: '#/definitions/workflows.WorkflowStepDefinition'
        description: Relationships
      workflow_step_definition_id:
        type: string
    type: object
  workflows.StepEvidence:
    properties:
      created-at:
        type: string
      deleted_at:
        $ref: '#/definitions/gorm.DeletedAt'
      description:
        type: string
      evidence:
        $ref: '#/definitions/relational.Evidence'
      evidence_id:
        description: Link to main evidence table
        type: string
      evidence_type:
        description: document, attestation, screenshot, log
        type: string
      file-size:
        description: File size in bytes
        type: integer
      file_hash:
        description: SHA-256 hash of file
        type: string
      file_path:
        description: Path to stored file
        type: string
      id:
        type: string
      metadata:
        description: JSON metadata
        type: string
      name:
        description: Evidence Information
        type: string
      step_execution:
        allOf:
        - $ref: '#/definitions/workflows.StepExecution'
        description: Relationships
      step_execution_id:
        description: Foreign Keys
        type: string
      updated-at:
        type: string
    type: object
  workflows.StepExecution:
    properties:
      assigned-at:
        type: string
      assigned_to_id:
        description: User ID, group ID, or email
        type: string
      assigned_to_type:
        description: Assignment Information
        type: string
      completed-at:
        type: string
      created-at:
        type: string
      deleted_at:
        $ref: '#/definitions/gorm.DeletedAt'
      due_date:
        type: string
      failed-at:
        type: string
      failure_reason:
        type: string
      id:
        type: string
      overdue-at:
        type: string
      reassignment_history:
        items:
          $ref: '#/definitions/workflows.StepReassignmentHistory'
        type: array
      started-at:
        type: string
      status:
        description: Execution Information
        type: string
      step_evidence:
        items:
          $ref: '#/definitions/workflows.StepEvidence'
        type: array
      updated-at:
        type: string
      workflow_execution:
        allOf:
        - $ref: '#/definitions/workflows.WorkflowExecution'
        description: Relationships
      workflow_execution_id:
        description: Foreign Keys
        type: string
      workflow_step_definition:
        $ref: '#/definitions/workflows.WorkflowStepDefinition'
      workflow_step_definition_id:
        type: string
    type: object
  workflows.StepExecutionListResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/workflows.StepExecution'
        type: array
    type: object
  workflows.StepExecutionResponse:
    properties:
      data:
        $ref: '#/definitions/workflows.StepExecution'
    type: object
  workflows.StepReassignmentHistory:
    properties:
      created-at:
        type: string
      deleted_at:
        $ref: '#/definitions/gorm.DeletedAt'
      id:
        type: string
      new_assigned_to_id:
        type: string
      new_assigned_to_type:
        type: string
      previous_assigned_to_id:
        type: string
      previous_assigned_to_type:
        type: string
      reason:
        type: string
      reassigned_by_email:
        type: string
      reassigned_by_user_id:
        type: string
      step_execution:
        $ref: '#/definitions/workflows.StepExecution'
      step_execution_id:
        type: string
      updated-at:
        type: string
      workflow_execution_id:
        type: string
    type: object
  workflows.StepTrigger:
    properties:
      id:
        type: string
      is_active:
        type: boolean
      trigger_condition:
        description: JSON condition expression
        type: string
      trigger_type:
        description: evidence_stream, time_based, external_event
        type: string
      workflow_step_definition:
        allOf:
        - $ref: '#/definitions/workflows.WorkflowStepDefinition'
        description: Relationships
      workflow_step_definition_id:
        type: string
    type: object
  workflows.TransitionStepRequest:
    properties:
      evidence:
        items:
          $ref: '#/definitions/workflow.EvidenceSubmission'
        type: array
      notes:
        type: string
      status:
        enum:
        - in_progress
        - completed
        type: string
      user-id:
        type: string
      user-type:
        enum:
        - user
        - group
        - email
        type: string
    required:
    - status
    - user-id
    - user-type
    type: object
  workflows.UpdateControlRelationshipRequest:
    properties:
      description:
        type: string
      relationship-type:
        type: string
      strength:
        type: string
    type: object
  workflows.UpdateRoleAssignmentRequest:
    properties:
      assigned-to-id:
        type: string
      assigned-to-type:
        type: string
    type: object
  workflows.UpdateWorkflowDefinitionRequest:
    properties:
      description:
        type: string
      evidence-required:
        type: string
      grace-period-days:
        type: integer
      name:
        type: string
      suggested-cadence:
        type: string
      version:
        type: string
    type: object
  workflows.UpdateWorkflowInstanceRequest:
    properties:
      cadence:
        type: string
      description:
        type: string
      grace-period-days:
        type: integer
      is-active:
        type: boolean
      name:
        type: string
    type: object
  workflows.UpdateWorkflowStepDefinitionRequest:
    properties:
      depends-on:
        items:
          type: string
        type: array
      description:
        type: string
      estimated-duration:
        type: integer
      evidence-required:
        items:
          $ref: '#/definitions/workflows.EvidenceRequirement'
        type: array
      grace-period-days:
        type: integer
      name:
        type: string
      responsible-role:
        type: string
    type: object
  workflows.WorkflowDefinition:
    properties:
      control_relationships:
        items:
          $ref: '#/definitions/workflows.ControlRelationship'
        type: array
      created-at:
        type: string
      created_by_id:
        description: Audit Fields
        type: string
      deleted_at:
        $ref: '#/definitions/gorm.DeletedAt'
      description:
        type: string
      evidence_required:
        description: JSON array of required evidence types
        type: string
      grace-period-days:
        description: Override global default if set
        type: integer
      id:
        type: string
      instances:
        items:
          $ref: '#/definitions/workflows.WorkflowInstance'
        type: array
      name:
        description: Basic Information
        type: string
      steps:
        description: Relationships
        items:
          $ref: '#/definitions/workflows.WorkflowStepDefinition'
        type: array
      suggested_cadence:
        description: Workflow Configuration
        type: string
      updated-at:
        type: string
      updated_by_id:
        type: string
      version:
        type: string
    type: object
  workflows.WorkflowDefinitionListResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/workflows.WorkflowDefinition'
        type: array
    type: object
  workflows.WorkflowDefinitionResponse:
    properties:
      data:
        $ref: '#/definitions/workflows.WorkflowDefinition'
    type: object
  workflows.WorkflowExecution:
    properties:
      completed-at:
        type: string
      created-at:
        type: string
      created_by_id:
        description: Audit Fields
        type: string
      deleted_at:
        $ref: '#/definitions/gorm.DeletedAt'
      due_date:
        type: string
      failed-at:
        type: string
      failure_reason:
        type: string
      id:
        type: string
      overdue-at:
        type: string
      period_label:
        description: Scheduling Context
        type: string
      started-at:
        type: string
      status:
        description: Execution Information
        type: string
      step_executions:
        items:
          $ref: '#/definitions/workflows.StepExecution'
        type: array
      triggered_by:
        description: Execution Context
        type: string
      triggered_by_id:
        description: User ID or system identifier
        type: string
      updated-at:
        type: string
      updated_by_id:
        type: string
      workflow_instance:
        allOf:
        - $ref: '#/definitions/workflows.WorkflowInstance'
        description: Relationships
      workflow_instance_id:
        description: Foreign Keys
        type: string
    type: object
  workflows.WorkflowExecutionListResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/workflows.WorkflowExecution'
        type: array
    type: object
  workflows.WorkflowExecutionMetricsResponse:
    properties:
      data:
        $ref: '#/definitions/workflow.ExecutionMetrics'
    type: object
  workflows.WorkflowExecutionResponse:
    properties:
      data:
        $ref: '#/definitions/workflows.WorkflowExecution'
    type: object
  workflows.WorkflowExecutionStatusResponse:
    properties:
      data:
        $ref: '#/definitions/workflow.ExecutionStatus'
    type: object
  workflows.WorkflowInstance:
    properties:
      cadence:
        description: Instance Configuration
        type: string
      created-at:
        type: string
      created_by_id:
        description: Audit Fields
        type: string
      deleted_at:
        $ref: '#/definitions/gorm.DeletedAt'
      description:
        type: string
      executions:
        items:
          $ref: '#/definitions/workflows.WorkflowExecution'
        type: array
      grace-period-days:
        description: Override definition/global default if set
        type: integer
      id:
        type: string
      is_active:
        type: boolean
      last-executed-at:
        type: string
      name:
        description: Basic Information
        type: string
      next-scheduled-at:
        description: Scheduling
        type: string
      role_assignments:
        items:
          $ref: '#/definitions/workflows.RoleAssignment'
        type: array
      system_id:
        type: string
      system_security_plan:
        allOf:
        - $ref: '#/definitions/relational.SystemSecurityPlan'
        description: Relationships
      updated-at:
        type: string
      updated_by_id:
        type: string
      workflow_definition:
        $ref: '#/definitions/workflows.WorkflowDefinition'
      workflow_definition_id:
        description: Foreign Keys
        type: string
    type: object
  workflows.WorkflowInstanceListResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/workflows.WorkflowInstance'
        type: array
    type: object
  workflows.WorkflowInstanceResponse:
    properties:
      data:
        $ref: '#/definitions/workflows.WorkflowInstance'
    type: object
  workflows.WorkflowStepDefinition:
    properties:
      created-at:
        type: string
      deleted_at:
        $ref: '#/definitions/gorm.DeletedAt'
      dependent_steps:
        items:
          $ref: '#/definitions/workflows.StepDependency'
        type: array
      depends_on:
        items:
          $ref: '#/definitions/workflows.StepDependency'
        type: array
      description:
        type: string
      estimated_duration:
        description: Estimated duration in minutes
        type: integer
      evidence_required:
        description: JSON array of required evidence types
        items:
          $ref: '#/definitions/workflows.EvidenceRequirement'
        type: array
      grace-period-days:
        description: Override default grace for this specific step
        type: integer
      id:
        type: string
      name:
        description: Basic Information
        type: string
      order:
        description: Step Configuration
        type: integer
      responsible_role:
        description: Role responsible for this step
        type: string
      step_executions:
        items:
          $ref: '#/definitions/workflows.StepExecution'
        type: array
      triggers:
        items:
          $ref: '#/definitions/workflows.StepTrigger'
        type: array
      updated-at:
        type: string
      workflow_definition:
        allOf:
        - $ref: '#/definitions/workflows.WorkflowDefinition'
        description: Relationships
      workflow_definition_id:
        description: Foreign Keys
        type: string
    type: object
  workflows.WorkflowStepDefinitionListResponse:
    properties:
      data:
        items:
          $ref: '#/definitions/workflows.WorkflowStepDefinition'
        type: array
    type: object
  workflows.WorkflowStepDefinitionResponse:
    properties:
      data:
        $ref: '#/definitions/workflows.WorkflowStepDefinition'
    type: object
externalDocs:
  description: OpenAPI
  url: https://swagger.io/resources/open-api/
host: localhost:8080
info:
  contact: {}
  description: This is the API for the Continuous Compliance Framework.
  title: Continuous Compliance Framework API
  version: "1"
paths:
  /admin/digest/preview:
    get:
      description: Returns the current evidence summary that would be included in
        a digest email
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-digest_EvidenceSummary'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Preview evidence digest
      tags:
      - Digest
  /admin/digest/trigger:
    post:
      description: Manually triggers the evidence digest job to send emails to all
        users
      parameters:
      - description: 'Job name to trigger (default: global-evidence-digest)'
        in: query
        name: job
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            additionalProperties:
              type: string
            type: object
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Trigger evidence digest
      tags:
      - Digest
  /admin/users:
    get:
      description: Lists all users in the system
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-relational_User'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List all users
      tags:
      - Users
    post:
      consumes:
      - application/json
      description: Creates a new user in the system
      parameters:
      - description: User details
        in: body
        name: user
        required: true
        schema:
          $ref: '#/definitions/handler.UserHandler'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-relational_User'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "409":
          description: Conflict
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a new user
      tags:
      - Users
  /admin/users/{id}:
    delete:
      description: Deletes a user from the system
      parameters:
      - description: User ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a user
      tags:
      - Users
    get:
      description: Get user details by user ID
      parameters:
      - description: User ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-relational_User'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get user by ID
      tags:
      - Users
    put:
      consumes:
      - application/json
      description: Updates the details of an existing user
      parameters:
      - description: User ID
        in: path
        name: id
        required: true
        type: string
      - description: User details
        in: body
        name: user
        required: true
        schema:
          $ref: '#/definitions/handler.UserHandler'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-relational_User'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update user details
      tags:
      - Users
  /agent/heartbeat:
    post:
      consumes:
      - application/json
      description: Creates a new heartbeat record for monitoring.
      parameters:
      - description: Heartbeat payload
        in: body
        name: heartbeat
        required: true
        schema:
          $ref: '#/definitions/handler.HeartbeatCreateRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create Heartbeat
      tags:
      - Heartbeat
  /agent/heartbeat/over-time:
    get:
      description: Retrieves heartbeat counts aggregated by 2-minute intervals.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-handler_OverTime_HeartbeatInterval'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get Heartbeat Metrics Over Time
      tags:
      - Heartbeat
  /auth/forgot-password:
    post:
      consumes:
      - application/json
      description: Sends a password reset email to users with authMethod=password
      parameters:
      - description: Email
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/auth.AuthHandler'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-string'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Forgot password
      tags:
      - Auth
  /auth/login:
    post:
      consumes:
      - application/json
      description: Login user and returns a JWT token and sets a cookie with the token
      parameters:
      - description: Login Data
        in: body
        name: loginRequest
        required: true
        schema:
          $ref: '#/definitions/auth.AuthHandler'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-auth_AuthHandler'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-auth_AuthHandler'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Login user
      tags:
      - Auth
  /auth/password-reset:
    post:
      consumes:
      - application/json
      description: Resets password using a valid JWT token
      parameters:
      - description: Reset data
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/auth.AuthHandler'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-string'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Reset password
      tags:
      - Auth
  /auth/publickey:
    get:
      consumes:
      - application/json
      description: Get JSON Web Key (JWK) representation of the JWT public key
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/authn.JWK'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get JWK
      tags:
      - Auth
  /auth/token:
    post:
      consumes:
      - application/x-www-form-urlencoded
      description: Get OAuth2 token using username and password
      parameters:
      - description: Username (email)
        in: formData
        name: username
        required: true
        type: string
      - description: Password
        in: formData
        name: password
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/auth.AuthHandler'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get OAuth2 token
      tags:
      - Auth
  /evidence:
    post:
      consumes:
      - application/json
      description: Creates a new Evidence record including activities, inventory items,
        components, and subjects.
      parameters:
      - description: Evidence create request
        in: body
        name: evidence
        required: true
        schema:
          $ref: '#/definitions/handler.EvidenceCreateRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-relational_Evidence'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create new Evidence
      tags:
      - Evidence
  /evidence-templates:
    get:
      description: List evidence templates with optional filters and pagination.
      parameters:
      - description: Plugin ID
        in: query
        name: pluginId
        type: string
      - description: Policy package
        in: query
        name: policyPackage
        type: string
      - description: Active flag
        in: query
        name: isActive
        type: boolean
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-templates_evidenceTemplateResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List evidence templates
      tags:
      - Evidence Templates
    post:
      consumes:
      - application/json
      description: Create an evidence template with selector labels, label schema,
        and linked risk/subject template IDs.
      parameters:
      - description: Evidence template payload
        in: body
        name: template
        required: true
        schema:
          $ref: '#/definitions/templates.upsertEvidenceTemplateRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/templates.evidenceTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create evidence template
      tags:
      - Evidence Templates
  /evidence-templates/{id}:
    delete:
      description: Delete an evidence template and its associated selector labels,
        label schema, and join rows.
      parameters:
      - description: Evidence Template ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete evidence template
      tags:
      - Evidence Templates
    get:
      description: Get an evidence template by ID.
      parameters:
      - description: Evidence Template ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/templates.evidenceTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get evidence template
      tags:
      - Evidence Templates
    put:
      consumes:
      - application/json
      description: Update an evidence template and atomically replace selector labels,
        label schema, and linked IDs.
      parameters:
      - description: Evidence Template ID
        in: path
        name: id
        required: true
        type: string
      - description: Evidence template payload
        in: body
        name: template
        required: true
        schema:
          $ref: '#/definitions/templates.upsertEvidenceTemplateRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/templates.evidenceTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update evidence template
      tags:
      - Evidence Templates
  /evidence/{id}:
    get:
      description: Retrieves a single Evidence record by its unique ID, including
        associated activities, inventory items, components, subjects, and labels.
      parameters:
      - description: Evidence ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_OscalLikeEvidence'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get Evidence by ID
      tags:
      - Evidence
  /evidence/compliance-by-control/{id}:
    get:
      description: Retrieves the count of evidence statuses for filters associated
        with a specific Control ID.
      parameters:
      - description: Control ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-evidence_StatusCount'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get compliance counts by control
      tags:
      - Evidence
  /evidence/compliance-by-filter/{id}:
    get:
      description: Retrieves the count of evidence statuses for a specific filter/dashboard.
      parameters:
      - description: Filter/Dashboard ID (UUID)
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-evidence_StatusCount'
        "400":
          description: Invalid UUID
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get compliance status counts by filter/dashboard ID
      tags:
      - Evidence
  /evidence/for-control/{id}:
    get:
      description: Retrieves Evidence records associated with a specific Control ID,
        including related activities, inventory items, components, subjects, and labels.
      parameters:
      - description: Control ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.ForControl.EvidenceDataListResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: List Evidence for a Control
      tags:
      - Evidence
  /evidence/history/{id}:
    get:
      description: Retrieves a the history for a Evidence record by its UUID, including
        associated activities, inventory items, components, subjects, and labels.
      parameters:
      - description: Evidence ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-handler_OscalLikeEvidence'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get Evidence history by UUID
      tags:
      - Evidence
  /evidence/search:
    post:
      consumes:
      - application/json
      description: Searches Evidence records by label filters.
      parameters:
      - description: Label filter
        in: body
        name: filter
        required: true
        schema:
          $ref: '#/definitions/labelfilter.Filter'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-relational_Evidence'
        "422":
          description: Unprocessable Entity
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Search Evidence
      tags:
      - Evidence
  /evidence/status-over-time:
    post:
      consumes:
      - application/json
      description: Retrieves counts of evidence statuses at various time intervals
        based on a label filter.
      parameters:
      - description: Label filter
        in: body
        name: filter
        required: true
        schema:
          $ref: '#/definitions/labelfilter.Filter'
      - description: Comma-separated list of duration intervals (e.g., '10m,1h,24h')
        in: query
        name: intervals
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-handler_StatusInterval'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "422":
          description: Unprocessable Entity
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Evidence status metrics over intervals
      tags:
      - Evidence
  /evidence/status-over-time/{id}:
    get:
      description: Retrieves counts of evidence statuses at various time intervals
        for a specific evidence stream identified by UUID.
      parameters:
      - description: Evidence UUID
        in: path
        name: id
        required: true
        type: string
      - description: Comma-separated list of duration intervals (e.g., '10m,1h,24h')
        in: query
        name: intervals
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-handler_StatusInterval'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "422":
          description: Unprocessable Entity
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Evidence status metrics over intervals by UUID
      tags:
      - Evidence
  /filters:
    get:
      description: Retrieves all filters, optionally filtered by controlId or componentId.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-handler_FilterWithAssociations'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: List filters
      tags:
      - Filters
    post:
      consumes:
      - application/json
      description: Creates a new filter.
      parameters:
      - description: Filter to add
        in: body
        name: filter
        required: true
        schema:
          $ref: '#/definitions/handler.createFilterRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-relational_Filter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "422":
          description: Unprocessable Entity
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new filter
      tags:
      - Filters
  /filters/{id}:
    delete:
      description: Deletes a filter.
      parameters:
      - description: Filter ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a filter
      tags:
      - Filters
    get:
      description: Retrieves a single filter by its unique ID.
      parameters:
      - description: Filter ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_FilterWithAssociations'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get a filter
      tags:
      - Filters
    put:
      consumes:
      - application/json
      description: Updates an existing filter.
      parameters:
      - description: Filter ID
        in: path
        name: id
        required: true
        type: string
      - description: Filter to update
        in: body
        name: filter
        required: true
        schema:
          $ref: '#/definitions/handler.createFilterRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-relational_Filter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a filter
      tags:
      - Filters
  /filters/import:
    post:
      consumes:
      - multipart/form-data
      description: Import multiple dashboard filter JSON files
      parameters:
      - description: Dashboard filter JSON files to import
        in: formData
        name: files
        required: true
        type: file
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_FilterImportResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Import dashboard filters
      tags:
      - Filters
  /oscal/activities:
    post:
      consumes:
      - application/json
      description: Creates a new activity for us in other resources.
      parameters:
      - description: Activity object
        in: body
        name: activity
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Activity'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Activity'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create an Activity
      tags:
      - Activities
  /oscal/activities/{id}:
    delete:
      description: Deletes an activity
      parameters:
      - description: Activity ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete Activity
      tags:
      - Activities
    get:
      consumes:
      - application/json
      description: Retrieves an Activity by its unique ID.
      parameters:
      - description: Activity ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Activity'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Retrieve an Activity
      tags:
      - Activities
    put:
      consumes:
      - application/json
      description: Updates properties of an existing Activity by its ID.
      parameters:
      - description: Activity ID
        in: path
        name: id
        required: true
        type: string
      - description: Activity object
        in: body
        name: activity
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Activity'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Activity'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update an Activity
      tags:
      - Activities
  /oscal/assessment-plans:
    get:
      description: Retrieves all Assessment Plans.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_AssessmentPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List Assessment Plans
      tags:
      - Assessment Plans
    post:
      consumes:
      - application/json
      description: Creates a new OSCAL Assessment Plan with comprehensive validation.
      parameters:
      - description: 'Assessment Plan object with required fields: UUID, metadata
          (title, version), import-ssp'
        in: body
        name: plan
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPlan'
      produces:
      - application/json
      responses:
        "201":
          description: Successfully created assessment plan
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentPlan'
        "400":
          description: Bad request - validation errors or malformed input
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized - invalid or missing JWT token
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal server error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create an Assessment Plan
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}:
    delete:
      description: Deletes an Assessment Plan by its unique ID.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete an Assessment Plan
      tags:
      - Assessment Plans
    get:
      description: Retrieves a single Assessment Plan by its unique ID.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get an Assessment Plan
      tags:
      - Assessment Plans
    put:
      consumes:
      - application/json
      description: Updates an existing Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Assessment Plan object
        in: body
        name: plan
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentPlan'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update an Assessment Plan
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/assessment-assets:
    get:
      description: Retrieves all assessment assets for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-array_oscalTypes_1_1_3_AssessmentAssets'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Plan Assets
      tags:
      - Assessment Plans
    post:
      consumes:
      - application/json
      description: Creates a new assessment asset for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Assessment Asset object
        in: body
        name: asset
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentAssets'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentAssets'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create Assessment Plan Asset
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/assessment-assets/{assetId}:
    delete:
      description: Deletes an assessment asset from an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Assessment Asset ID
        in: path
        name: assetId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete Assessment Plan Asset
      tags:
      - Assessment Plans
    put:
      consumes:
      - application/json
      description: Updates an existing assessment asset for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Assessment Asset ID
        in: path
        name: assetId
        required: true
        type: string
      - description: Assessment Asset object
        in: body
        name: asset
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentAssets'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentAssets'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update Assessment Plan Asset
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/assessment-subjects:
    get:
      description: Retrieves all assessment subjects for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-array_oscalTypes_1_1_3_AssessmentSubject'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Plan Subjects
      tags:
      - Assessment Plans
    post:
      consumes:
      - application/json
      description: Creates a new assessment subject for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Assessment Subject object
        in: body
        name: subject
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentSubject'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create Assessment Plan Subject
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/assessment-subjects/{subjectId}:
    delete:
      description: Deletes an assessment subject from an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Assessment Subject ID
        in: path
        name: subjectId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete Assessment Plan Subject
      tags:
      - Assessment Plans
    put:
      consumes:
      - application/json
      description: Updates an existing assessment subject for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Assessment Subject ID
        in: path
        name: subjectId
        required: true
        type: string
      - description: Assessment Subject object
        in: body
        name: subject
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentSubject'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentSubject'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update Assessment Plan Subject
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/back-matter:
    get:
      description: Retrieves back matter for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Plan Back Matter
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/full:
    get:
      description: Retrieves a single Assessment Plan by its unique ID with all related
        data preloaded.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a full Assessment Plan
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/import-ssp:
    get:
      description: Retrieves import SSP information for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImportSsp'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Plan Import SSP
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/local-definitions:
    get:
      description: Retrieves local definitions for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_LocalDefinitions'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Plan Local Definitions
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/metadata:
    get:
      description: Retrieves metadata for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Metadata'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Plan Metadata
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/tasks:
    get:
      description: Retrieves all tasks for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-array_oscalTypes_1_1_3_Task'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Plan Tasks
      tags:
      - Assessment Plans
    post:
      consumes:
      - application/json
      description: Creates a new task for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Task object
        in: body
        name: task
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Task'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Task'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create Assessment Plan Task
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/tasks/{taskId}:
    delete:
      description: Deletes a task from an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Task ID
        in: path
        name: taskId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete Assessment Plan Task
      tags:
      - Assessment Plans
    put:
      consumes:
      - application/json
      description: Updates an existing task for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Task ID
        in: path
        name: taskId
        required: true
        type: string
      - description: Task object
        in: body
        name: task
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Task'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Task'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update Assessment Plan Task
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/tasks/{taskId}/associated-activities:
    get:
      description: Retrieves all Activities associated with a specific Task in an
        Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Task ID
        in: path
        name: taskId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_AssociatedActivity'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List Associated Activities for a Task
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/tasks/{taskId}/associated-activities/{activityId}:
    delete:
      description: Removes an association of an Activity from a Task within an Assessment
        Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Task ID
        in: path
        name: taskId
        required: true
        type: string
      - description: Activity ID
        in: path
        name: activityId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Disassociate an Activity from a Task
      tags:
      - Assessment Plans
    post:
      description: Associates an existing Activity to a Task within an Assessment
        Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Task ID
        in: path
        name: taskId
        required: true
        type: string
      - description: Activity ID
        in: path
        name: activityId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Associate an Activity with a Task
      tags:
      - Assessment Plans
  /oscal/assessment-plans/{id}/terms-and-conditions:
    get:
      description: Retrieves terms and conditions for an Assessment Plan.
      parameters:
      - description: Assessment Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentPlanTermsAndConditions'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Plan Terms and Conditions
      tags:
      - Assessment Plans
  /oscal/assessment-results:
    get:
      description: Retrieves all Assessment Results.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_AssessmentResults'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List Assessment Results
      tags:
      - Assessment Results
    post:
      consumes:
      - application/json
      description: Creates an Assessment Results from input.
      parameters:
      - description: Assessment Results data
        in: body
        name: ar
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentResults'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentResults'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create an Assessment Results
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}:
    delete:
      description: Deletes an Assessment Results by its ID.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete an Assessment Results
      tags:
      - Assessment Results
    get:
      description: Retrieves a single Assessment Results by its unique ID.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentResults'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get an Assessment Results
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates an existing Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated Assessment Results object
        in: body
        name: ar
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AssessmentResults'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentResults'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update an Assessment Results
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/available-controls:
    get:
      description: Retrieves controls that can be referenced in findings
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-array_oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get available controls for findings
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/back-matter:
    delete:
      description: Deletes the back matter for an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete back matter
      tags:
      - Assessment Results
    get:
      description: Retrieves the back matter for an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get back matter
      tags:
      - Assessment Results
    post:
      consumes:
      - application/json
      description: Creates or replaces the back matter for an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Back Matter
        in: body
        name: backMatter
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create back matter
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates the back matter for an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Back Matter
        in: body
        name: backMatter
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update back matter
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/back-matter/resources:
    get:
      description: Retrieves all resources from the back matter for an Assessment
        Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get back matter resources
      tags:
      - Assessment Results
    post:
      consumes:
      - application/json
      description: Creates a new resource in the back matter for an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource
        in: body
        name: resource
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Resource'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create back matter resource
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/back-matter/resources/{resourceId}:
    delete:
      description: Deletes a specific resource from the back matter for an Assessment
        Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource ID
        in: path
        name: resourceId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete back matter resource
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates a specific resource in the back matter for an Assessment
        Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource ID
        in: path
        name: resourceId
        required: true
        type: string
      - description: Resource
        in: body
        name: resource
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Resource'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update back matter resource
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/control/{controlId}:
    get:
      description: Retrieves a control with all its parts for reference in findings
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Control ID
        in: path
        name: controlId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get control details with statements and objectives
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/findings:
    get:
      description: Retrieves all findings in the system that can be associated with
        results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Finding'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List all findings available for association
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/full:
    get:
      description: Retrieves a complete Assessment Results by its ID, including all
        metadata and related objects.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AssessmentResults'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a complete Assessment Results
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/import-ap:
    get:
      description: Retrieves import-ap for a given Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImportAp'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Results import-ap
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates import-ap for a given Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Import AP data
        in: body
        name: importAp
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ImportAp'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImportAp'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update Assessment Results import-ap
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/local-definitions:
    get:
      description: Retrieves local-definitions for a given Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_LocalDefinitions'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Results local-definitions
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates local-definitions for a given Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Local definitions data
        in: body
        name: localDefinitions
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.LocalDefinitions'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_LocalDefinitions'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update Assessment Results local-definitions
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/metadata:
    get:
      description: Retrieves metadata for a given Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Metadata'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Assessment Results metadata
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates metadata for a given Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Metadata data
        in: body
        name: metadata
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Metadata'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update Assessment Results metadata
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/observations:
    get:
      description: Retrieves all observations in the system that can be associated
        with results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Observation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List all observations available for association
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results:
    get:
      description: Retrieves all results for a given Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Result'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get results for an Assessment Results
      tags:
      - Assessment Results
    post:
      consumes:
      - application/json
      description: Creates a new result for a given Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result data
        in: body
        name: result
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Result'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Result'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a result for an Assessment Results
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}:
    delete:
      description: Deletes a specific result from an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a result
      tags:
      - Assessment Results
    get:
      description: Retrieves a specific result from an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Result'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a specific result
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates a specific result in an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Result data
        in: body
        name: result
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Result'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Result'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/associated-findings:
    get:
      description: Retrieves all Findings associated with a specific Result in an
        Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Finding'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List Associated Findings for a Result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/associated-findings/{findingId}:
    delete:
      description: Removes an association of a Finding from a Result within an Assessment
        Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Finding ID
        in: path
        name: findingId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Disassociate a Finding from a Result
      tags:
      - Assessment Results
    post:
      description: Associates an existing Finding to a Result within an Assessment
        Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Finding ID
        in: path
        name: findingId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Associate a Finding with a Result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/associated-observations:
    get:
      description: Retrieves all Observations associated with a specific Result in
        an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Observation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List Associated Observations for a Result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/associated-observations/{observationId}:
    delete:
      description: Removes an association of an Observation from a Result within an
        Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Observation ID
        in: path
        name: observationId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Disassociate an Observation from a Result
      tags:
      - Assessment Results
    post:
      description: Associates an existing Observation to a Result within an Assessment
        Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Observation ID
        in: path
        name: observationId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Associate an Observation with a Result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/associated-risks:
    get:
      description: Retrieves all Risks associated with a specific Result in an Assessment
        Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Risk'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List Associated Risks for a Result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/associated-risks/{riskId}:
    delete:
      description: Removes an association of a Risk from a Result within an Assessment
        Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: riskId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Disassociate a Risk from a Result
      tags:
      - Assessment Results
    post:
      description: Associates an existing Risk to a Result within an Assessment Results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: riskId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Associate a Risk with a Result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/attestations:
    get:
      description: Retrieves all attestations for a given result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_AttestationStatements'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get attestations for a result
      tags:
      - Assessment Results
    post:
      consumes:
      - application/json
      description: Creates a new attestation for a given result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Attestation data
        in: body
        name: attestation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AttestationStatements'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AttestationStatements'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create an attestation for a result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/attestations/{attestationId}:
    delete:
      description: Deletes a specific attestation from a result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Attestation ID
        in: path
        name: attestationId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete an attestation
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates a specific attestation in a result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Attestation ID
        in: path
        name: attestationId
        required: true
        type: string
      - description: Attestation data
        in: body
        name: attestation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.AttestationStatements'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AttestationStatements'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update an attestation
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/findings:
    get:
      description: Retrieves all findings for a given result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Finding'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get findings for a result
      tags:
      - Assessment Results
    post:
      consumes:
      - application/json
      description: Creates a new finding for a given result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Finding data
        in: body
        name: finding
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Finding'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Finding'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a finding for a result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/findings/{findingId}:
    delete:
      description: Deletes a specific finding from a result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Finding ID
        in: path
        name: findingId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a finding
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates a specific finding in a result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Finding ID
        in: path
        name: findingId
        required: true
        type: string
      - description: Finding data
        in: body
        name: finding
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Finding'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Finding'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a finding
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/observations:
    get:
      description: Retrieves all observations for a given result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Observation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get observations for a result
      tags:
      - Assessment Results
    post:
      consumes:
      - application/json
      description: Creates a new observation for a given result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Observation data
        in: body
        name: observation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Observation'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Observation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create an observation for a result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/observations/{obsId}:
    delete:
      description: Deletes a specific observation from a result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Observation ID
        in: path
        name: obsId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete an observation
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates a specific observation in a result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Observation ID
        in: path
        name: obsId
        required: true
        type: string
      - description: Observation data
        in: body
        name: observation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Observation'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Observation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update an observation
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/risks:
    get:
      description: Retrieves all risks for a given result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Risk'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get risks for a result
      tags:
      - Assessment Results
    post:
      consumes:
      - application/json
      description: Creates a new risk for a given result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Risk data
        in: body
        name: risk
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Risk'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Risk'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a risk for a result
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/results/{resultId}/risks/{riskId}:
    delete:
      description: Deletes a specific risk from a result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: riskId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a risk
      tags:
      - Assessment Results
    put:
      consumes:
      - application/json
      description: Updates a specific risk in a result.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      - description: Result ID
        in: path
        name: resultId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: riskId
        required: true
        type: string
      - description: Risk data
        in: body
        name: risk
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Risk'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Risk'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a risk
      tags:
      - Assessment Results
  /oscal/assessment-results/{id}/risks:
    get:
      description: Retrieves all risks in the system that can be associated with results.
      parameters:
      - description: Assessment Results ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Risk'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List all risks available for association
      tags:
      - Assessment Results
  /oscal/catalogs:
    get:
      description: Retrieves all catalogs.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Catalog'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List catalogs
      tags:
      - Catalog
    post:
      consumes:
      - application/json
      description: Creates a new OSCAL Catalog.
      parameters:
      - description: Catalog object
        in: body
        name: catalog
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Catalog'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Catalog'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a new Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}:
    delete:
      description: Deletes a Catalog and cascades to related groups/controls, metadata
        and back-matter.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a Catalog (cascade)
      tags:
      - Catalog
    get:
      description: Retrieves a single Catalog by its unique ID.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Catalog'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a Catalog
      tags:
      - Catalog
    put:
      consumes:
      - application/json
      description: Updates an existing OSCAL Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated Catalog object
        in: body
        name: catalog
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Catalog'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Catalog'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}/all-controls:
    get:
      description: Retrieves the top-level controls for a given Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List controls for a Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}/back-matter:
    get:
      description: Retrieves the back-matter for a given Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get back-matter for a Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}/controls:
    get:
      description: Retrieves the top-level controls for a given Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List controls for a Catalog
      tags:
      - Catalog
    post:
      consumes:
      - application/json
      description: Adds a top-level control under the specified Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Control object
        in: body
        name: control
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a new Control for a Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}/controls/{control}:
    delete:
      description: Deletes a Control and cascades to nested children; clears filter
        associations.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Control ID
        in: path
        name: control
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a Control (cascade)
      tags:
      - Catalog
    get:
      description: Retrieves a single Control by its ID for a given Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Control ID
        in: path
        name: control
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a specific Control within a Catalog
      tags:
      - Catalog
    put:
      consumes:
      - application/json
      description: Updates the properties of an existing Control under the specified
        Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Control ID
        in: path
        name: control
        required: true
        type: string
      - description: Updated Control object
        in: body
        name: control
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a Control within a Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}/controls/{control}/controls:
    get:
      description: Retrieves the controls directly under a specific Control in a given
        Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Control ID
        in: path
        name: control
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List child controls for a Control within a Catalog
      tags:
      - Catalog
    post:
      consumes:
      - application/json
      description: Adds a child control under the specified Catalog Control.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Parent Control ID
        in: path
        name: control
        required: true
        type: string
      - description: Control object
        in: body
        name: control
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a new Sub-Control for a Control within a Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}/groups:
    get:
      description: Retrieves the top-level groups for a given Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Group'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List groups for a Catalog
      tags:
      - Catalog
    post:
      consumes:
      - application/json
      description: Adds a top-level group under the specified Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Group object
        in: body
        name: group
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Group'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Group'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a new Group for a Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}/groups/{group}:
    delete:
      description: Deletes a Group and cascades to nested groups and controls.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Group ID
        in: path
        name: group
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a Group (cascade)
      tags:
      - Catalog
    get:
      description: Retrieves a single Group by its ID for a given Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Group ID
        in: path
        name: group
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Group'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a specific Group within a Catalog
      tags:
      - Catalog
    put:
      consumes:
      - application/json
      description: Updates the properties of an existing Group under the specified
        Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Group ID
        in: path
        name: group
        required: true
        type: string
      - description: Updated Group object
        in: body
        name: group
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Group'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Group'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a Group within a Catalog
      tags:
      - Catalog
  /oscal/catalogs/{id}/groups/{group}/controls:
    get:
      description: Retrieves the controls directly under a specific Group in a given
        Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Group ID
        in: path
        name: group
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List controls for a Group within a Catalog
      tags:
      - Catalog
    post:
      consumes:
      - application/json
      description: Adds a control under the specified Catalog and Group.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Parent Group ID
        in: path
        name: group
        required: true
        type: string
      - description: Control object
        in: body
        name: control
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Control'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Control'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a new Control for a Catalog Group
      tags:
      - Catalog
  /oscal/catalogs/{id}/groups/{group}/groups:
    get:
      description: Retrieves the sub-groups of a specific Group in a given Catalog.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Group ID
        in: path
        name: group
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Group'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List sub-groups for a Group within a Catalog
      tags:
      - Catalog
    post:
      consumes:
      - application/json
      description: Adds a sub-group under the specified Catalog and Group.
      parameters:
      - description: Catalog ID
        in: path
        name: id
        required: true
        type: string
      - description: Parent Group ID
        in: path
        name: group
        required: true
        type: string
      - description: Group object
        in: body
        name: group
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Group'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Group'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a new Sub-Group for a Catalog Group
      tags:
      - Catalog
  /oscal/component-definitions:
    get:
      description: Retrieves all component definitions.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ComponentDefinition'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List component definitions
      tags:
      - Component Definitions
    post:
      consumes:
      - application/json
      description: Creates a new component definition.
      parameters:
      - description: Component Definition
        in: body
        name: componentDefinition
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ComponentDefinition'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ComponentDefinition'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a component definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}:
    get:
      description: Retrieves a single component definition by its unique ID.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ComponentDefinition'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a component definition
      tags:
      - Component Definitions
    put:
      consumes:
      - application/json
      description: Updates an existing component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated Component Definition object
        in: body
        name: componentDefinition
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ComponentDefinition'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ComponentDefinition'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a component definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/back-matter:
    get:
      description: Retrieves the back-matter for a given Component Definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get back-matter for a Component Definition
      tags:
      - Component Definitions
    post:
      consumes:
      - application/json
      description: Creates new back-matter for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Back Matter
        in: body
        name: back-matter
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create back-matter for a component definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/capabilities:
    get:
      description: Retrieves all capabilities for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Capability'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get capabilities for a component definition
      tags:
      - Component Definitions
    post:
      consumes:
      - application/json
      description: Creates new capabilities for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Capabilities
        in: body
        name: capabilities
        required: true
        schema:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.Capability'
          type: array
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Capability'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create capabilities for a component definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/capabilities/{capability}:
    put:
      consumes:
      - application/json
      description: Updates a single capability for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Capability ID (UUID)
        in: path
        name: capability
        required: true
        type: string
      - description: Capability to update
        in: body
        name: capability
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Capability'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Capability'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a capability for a component definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/capabilities/incorporates-components:
    get:
      description: Retrieves all incorporates components for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_IncorporatesComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get incorporates components for a component definition
      tags:
      - Component Definitions
    post:
      consumes:
      - application/json
      description: Creates new incorporates components for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Incorporates Components
        in: body
        name: incorporates-components
        required: true
        schema:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.IncorporatesComponent'
          type: array
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_IncorporatesComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create incorporates components for a component definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/components:
    get:
      description: Retrieves all components for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_DefinedComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get components for a component definition
      tags:
      - Component Definitions
    post:
      consumes:
      - application/json
      description: Creates new components for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Components to create
        in: body
        name: components
        required: true
        schema:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.DefinedComponent'
          type: array
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_DefinedComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create components for a component definition
      tags:
      - Component Definitions
    put:
      consumes:
      - application/json
      description: Updates the components for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Components to update
        in: body
        name: components
        required: true
        schema:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.DefinedComponent'
          type: array
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_DefinedComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update components for a component definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/components/{defined-component}:
    get:
      description: Retrieves a defined component for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_DefinedComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a defined component for a component definition
      tags:
      - Component Definitions
    post:
      consumes:
      - application/json
      description: Creates a new defined component for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component to create
        in: body
        name: defined-component
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.DefinedComponent'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_DefinedComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a defined component for a component definition
      tags:
      - Component Definitions
    put:
      consumes:
      - application/json
      description: Updates a defined component for a given component definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      - description: Defined Component to update
        in: body
        name: defined-component
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.DefinedComponent'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_DefinedComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a defined component for a component definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/components/{defined-component}/control-implementations:
    get:
      description: Retrieves all control implementations for a given defined component.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ControlImplementationSet'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get control implementations for a defined component
      tags:
      - Component Definitions
    post:
      consumes:
      - application/json
      description: Creates new control implementations for a given defined component.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      - description: Control Implementations
        in: body
        name: control-implementations
        required: true
        schema:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementationSet'
          type: array
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ControlImplementationSet'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create control implementations for a defined component
      tags:
      - Component Definitions
    put:
      consumes:
      - application/json
      description: Updates control implementations for a given defined component.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      - description: Control Implementations
        in: body
        name: control-implementations
        required: true
        schema:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementationSet'
          type: array
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ControlImplementationSet'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update control implementations for a defined component
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/components/{defined-component}/control-implementations/{control-implementation}:
    put:
      consumes:
      - application/json
      description: Updates a specific control implementation for a given defined component.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      - description: Control Implementation ID
        in: path
        name: control-implementation
        required: true
        type: string
      - description: Control Implementation
        in: body
        name: control-implementation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementationSet'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ControlImplementationSet'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a single control implementation for a defined component
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/components/{defined-component}/control-implementations/implemented-requirements:
    get:
      description: Retrieves all implemented requirements for a given defined component.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ImplementedRequirementControlImplementation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get implemented requirements for a defined component
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/components/{defined-component}/control-implementations/implemented-requirements/statements:
    get:
      description: Retrieves all statements for a given defined component.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ControlStatementImplementation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get statements for a defined component
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/full:
    get:
      description: Retrieves a complete Component Definition by its ID, including
        all metadata and revisions.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ComponentDefinition'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a complete Component Definition
      tags:
      - Component Definitions
  /oscal/component-definitions/{id}/import-component-definitions:
    get:
      description: Retrieves all import component definitions for a given defined
        component.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Defined Component ID
        in: path
        name: defined-component
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ImportComponentDefinition'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get import component definitions for a defined component
      tags:
      - Component Definitions
    post:
      description: Creates new import component definitions for a given component
        definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Import Component Definitions
        in: body
        name: import-component-definitions
        required: true
        schema:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.ImportComponentDefinition'
          type: array
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ImportComponentDefinition'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create import component definitions for a component definition
      tags:
      - Component Definitions
    put:
      description: Updates the import component definitions for a given component
        definition.
      parameters:
      - description: Component Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Import Component Definitions
        in: body
        name: import-component-definitions
        required: true
        schema:
          items:
            $ref: '#/definitions/oscalTypes_1_1_3.ImportComponentDefinition'
          type: array
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ImportComponentDefinition'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update import component definitions for a component definition
      tags:
      - Component Definitions
  /oscal/import:
    post:
      consumes:
      - multipart/form-data
      description: Import multiple OSCAL JSON files (catalogs, profiles, SSPs, etc.)
      parameters:
      - description: OSCAL JSON files to import
        in: formData
        name: files
        required: true
        type: file
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscal_ImportResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Import OSCAL files
      tags:
      - OSCAL
  /oscal/inventory:
    get:
      description: Retrieves all inventory items from all sources (SSP, Evidence,
        POAM, AP, AR)
      parameters:
      - description: Include items from System Security Plans
        in: query
        name: include_ssp
        type: string
      - description: Include items from Evidence
        in: query
        name: include_evidence
        type: string
      - description: Include items from Plan of Action and Milestones
        in: query
        name: include_poam
        type: string
      - description: Include items from Assessment Plans
        in: query
        name: include_ap
        type: string
      - description: Include items from Assessment Results
        in: query
        name: include_ar
        type: string
      - description: Filter by item type (e.g., operating-system, database, web-server)
        in: query
        name: item_type
        type: string
      - description: Filter by SSP attachment status
        in: query
        name: attached_to_ssp
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscal_InventoryItemWithSource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get All Inventory Items
      tags:
      - Inventory
    post:
      consumes:
      - application/json
      description: Creates a new inventory item with optional attachment to SSP or
        POAM
      parameters:
      - description: Create Inventory Item Request
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/oscal.CreateInventoryItemRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscal_InventoryItemWithSource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create Inventory Item
      tags:
      - Inventory
  /oscal/inventory/{id}:
    get:
      description: Retrieves a specific inventory item by its ID
      parameters:
      - description: Inventory Item ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscal_InventoryItemWithSource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Inventory Item by ID
      tags:
      - Inventory
  /oscal/parties:
    get:
      description: Retrieves all parties.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Party'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List parties
      tags:
      - Oscal
  /oscal/parties/{id}:
    get:
      description: Retrieves a single Party by its unique ID.
      parameters:
      - description: Party ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Party'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a Party
      tags:
      - Oscal
  /oscal/plan-of-action-and-milestones:
    get:
      description: Retrieves all Plan of Action and Milestones.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_PlanOfActionAndMilestones'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: List POA&Ms
      tags:
      - Plan Of Action and Milestones
    post:
      consumes:
      - application/json
      description: Creates a new Plan of Action and Milestones.
      parameters:
      - description: POA&M data
        in: body
        name: poam
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.PlanOfActionAndMilestones'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_PlanOfActionAndMilestones'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}:
    delete:
      description: Deletes an existing Plan of Action and Milestones and all its related
        data.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a POA&M
      tags:
      - Plan Of Action and Milestones
    get:
      description: Retrieves a single Plan of Action and Milestones by its unique
        ID.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_PlanOfActionAndMilestones'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get a POA&M
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates an existing Plan of Action and Milestones.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: POA&M data
        in: body
        name: poam
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.PlanOfActionAndMilestones'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_PlanOfActionAndMilestones'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/back-matter:
    get:
      description: Retrieves back-matter for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get POA&M back-matter
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/back-matter/resources:
    get:
      description: Retrieves all back-matter resources for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get back-matter resources for a POA&M
      tags:
      - Plan Of Action and Milestones
    post:
      consumes:
      - application/json
      description: Creates a new back-matter resource for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource data
        in: body
        name: resource
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Resource'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new back-matter resource for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/back-matter/resources/{resourceId}:
    delete:
      description: Deletes an existing back-matter resource for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource ID
        in: path
        name: resourceId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a back-matter resource from a POA&M
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates an existing back-matter resource for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource ID
        in: path
        name: resourceId
        required: true
        type: string
      - description: Resource data
        in: body
        name: resource
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Resource'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a back-matter resource for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/findings:
    get:
      description: Retrieves all findings for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Finding'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get findings for a POA&M
      tags:
      - Plan Of Action and Milestones
    post:
      consumes:
      - application/json
      description: Creates a new finding for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Finding data
        in: body
        name: finding
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Finding'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Finding'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new finding for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/findings/{findingId}:
    delete:
      description: Deletes an existing finding for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Finding ID
        in: path
        name: findingId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a finding from a POA&M
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates an existing finding for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Finding ID
        in: path
        name: findingId
        required: true
        type: string
      - description: Finding data
        in: body
        name: finding
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Finding'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Finding'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a finding for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/full:
    get:
      description: Retrieves a complete POA&M by its ID, including all metadata and
        related objects.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_PlanOfActionAndMilestones'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get a complete POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/import-ssp:
    get:
      description: Retrieves import-ssp for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImportSsp'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get POA&M import-ssp
      tags:
      - Plan Of Action and Milestones
    post:
      consumes:
      - application/json
      description: Creates import-ssp for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Import SSP data
        in: body
        name: importSsp
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ImportSsp'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImportSsp'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create import-ssp for a POA&M
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates import-ssp for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Import SSP data
        in: body
        name: importSsp
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ImportSsp'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImportSsp'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update import-ssp for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/local-definitions:
    get:
      description: Retrieves local definitions for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_PlanOfActionAndMilestonesLocalDefinitions'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get POA&M local definitions
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: |-
        Updates local-definitions for a given POA&M with special handling of array and object fields.
        - Components and inventory-items arrays are treated as full replacements: the existing values on the POA&M are overwritten by the arrays provided in the request body (no per-element merge is performed).
        - Sending an empty array [] for components or inventory-items clears that specific field (resulting in an empty array on the POA&M).
        - Omitting a field in the request body leaves the existing value for that field unchanged.
        - Sending an empty JSON object {} as the payload deletes the entire local-definitions object for the POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Local definitions data
        in: body
        name: local-definitions
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.PlanOfActionAndMilestonesLocalDefinitions'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_PlanOfActionAndMilestonesLocalDefinitions'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update POA&M local-definitions
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/metadata:
    get:
      description: Retrieves metadata for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Metadata'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get POA&M metadata
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates metadata for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Metadata data
        in: body
        name: metadata
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Metadata'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update POA&M metadata
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/observations:
    get:
      description: Retrieves all observations for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Observation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get observations for a POA&M
      tags:
      - Plan Of Action and Milestones
    post:
      consumes:
      - application/json
      description: Creates a new observation for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Observation data
        in: body
        name: observation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Observation'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Observation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new observation for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/observations/{obsId}:
    delete:
      description: Deletes an existing observation for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Observation ID
        in: path
        name: obsId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete an observation from a POA&M
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates an existing observation for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Observation ID
        in: path
        name: obsId
        required: true
        type: string
      - description: Observation data
        in: body
        name: observation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Observation'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Observation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update an observation for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/poam-items:
    get:
      description: Retrieves all POA&M items for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_PoamItem'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get POA&M items
      tags:
      - Plan Of Action and Milestones
    post:
      consumes:
      - application/json
      description: Creates a new POAM item for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: POAM Item data
        in: body
        name: poam-item
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.PoamItem'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_PoamItem'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new POAM item for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/poam-items/{itemId}:
    delete:
      description: Deletes an existing POAM item for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: POAM Item ID
        in: path
        name: itemId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a POAM item from a POA&M
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates an existing POAM item for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: POAM Item ID
        in: path
        name: itemId
        required: true
        type: string
      - description: POAM Item data
        in: body
        name: poam-item
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.PoamItem'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_PoamItem'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a POAM item for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/risks:
    get:
      description: Retrieves all risks for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Risk'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get risks for a POA&M
      tags:
      - Plan Of Action and Milestones
    post:
      consumes:
      - application/json
      description: Creates a new risk for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Risk data
        in: body
        name: risk
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Risk'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Risk'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new risk for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/risks/{riskId}:
    delete:
      description: Deletes an existing risk for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Risk ID
        in: path
        name: riskId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a risk from a POA&M
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates an existing risk for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: Risk ID
        in: path
        name: riskId
        required: true
        type: string
      - description: Risk data
        in: body
        name: risk
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Risk'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Risk'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a risk for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/plan-of-action-and-milestones/{id}/system-id:
    get:
      description: Retrieves system-id for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemId'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get POA&M system-id
      tags:
      - Plan Of Action and Milestones
    post:
      consumes:
      - application/json
      description: Creates system-id for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: System ID data
        in: body
        name: systemId
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemId'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemId'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create system-id for a POA&M
      tags:
      - Plan Of Action and Milestones
    put:
      consumes:
      - application/json
      description: Updates system-id for a given POA&M.
      parameters:
      - description: POA&M ID
        in: path
        name: id
        required: true
        type: string
      - description: System ID data
        in: body
        name: systemId
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemId'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemId'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update system-id for a POA&M
      tags:
      - Plan Of Action and Milestones
  /oscal/profiles:
    get:
      description: Retrieves all OSCAL profiles
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscal_ProfileHandler'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List Profiles
      tags:
      - Profile
    post:
      consumes:
      - application/json
      description: Creates a new OSCAL Profile.
      parameters:
      - description: Profile object
        in: body
        name: profile
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Profile'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Profile'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a new OSCAL Profile
      tags:
      - Profile
  /oscal/profiles/{id}:
    get:
      description: Get an OSCAL profile with the uuid provided
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscal_ProfileHandler'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Profile
      tags:
      - Profile
  /oscal/profiles/{id}/back-matter:
    get:
      description: Get the BackMatter for a specific profile
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Backmatter
      tags:
      - Profile
  /oscal/profiles/{id}/compliance-progress:
    get:
      description: Returns aggregated compliance progress for controls in a Profile,
        including summary, optional per-control rows, and group rollups.
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      - description: Include per-control breakdown (default true)
        in: query
        name: includeControls
        type: boolean
      - description: System Security Plan ID for implementation coverage
        in: query
        name: sspId
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscal_ProfileComplianceProgress'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get compliance progress for a Profile
      tags:
      - Profile
  /oscal/profiles/{id}/full:
    get:
      description: Retrieves the full OSCAL Profile, including all nested content.
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Profile'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get full Profile
      tags:
      - Profile
  /oscal/profiles/{id}/imports:
    get:
      description: List imports for a specific profile
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Import'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List Imports
      tags:
      - Profile
  /oscal/profiles/{id}/imports/{href}:
    delete:
      description: Deletes an import from a profile by its href
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      - description: Import Href
        in: path
        name: href
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: Import deleted successfully
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete Import from Profile
      tags:
      - Profile
    get:
      description: Retrieves a specific import from a profile by its backmatter href
      parameters:
      - description: Profile UUID
        in: path
        name: id
        required: true
        type: string
      - description: Import Href
        in: path
        name: href
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Import'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Import from Profile by Backmatter Href
      tags:
      - Profile
    put:
      consumes:
      - application/json
      description: Updates an existing import in a profile by its href
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      - description: Import Href
        in: path
        name: href
        required: true
        type: string
      - description: Import data to update
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Import'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Import'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update Import in Profile
      tags:
      - Profile
  /oscal/profiles/{id}/imports/add:
    post:
      consumes:
      - application/json
      description: Adds an import to a profile by its UUID and type (catalog/profile).
        Only catalogs are currently supported currently
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      - description: Request data
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/oscal.ProfileHandler'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Import'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "409":
          description: Conflict
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Add Import to Profile
      tags:
      - Profile
  /oscal/profiles/{id}/merge:
    get:
      description: Retrieves the merge section for a specific profile.
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Merge'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get merge section
      tags:
      - Profile
    put:
      consumes:
      - application/json
      description: Updates the merge information for a specific profile
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      - description: Merge data to update
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Merge'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Merge'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update Merge
      tags:
      - Profile
  /oscal/profiles/{id}/modify:
    get:
      description: Retrieves the modify section for a specific profile.
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Modify'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get modify section
      tags:
      - Profile
  /oscal/profiles/{id}/resolve:
    post:
      description: Resolves a Profiled identified by the "profile ID" param and stores
        a new catalog in the database
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscal_ProfileHandler'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Resolves a Profile as a stored catalog
      tags:
      - Profile
  /oscal/profiles/{id}/resolved:
    get:
      description: Returns a resolved OSCAL catalog based on a given Profile ID, applying
        all imports and modifications.
      parameters:
      - description: Profile ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Catalog'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Resolved Profile
      tags:
      - Profile
  /oscal/profiles/build-props:
    post:
      consumes:
      - application/json
      description: Generates a Profile selecting controls from a catalog based on
        prop matching rules. Returns the created Profile and the matched control IDs.
      parameters:
      - description: Prop matching request
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/oscal.BuildByPropsRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscal_BuildByPropsResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Build Profile by Control Props
      tags:
      - Profile
  /oscal/roles:
    get:
      description: Retrieves all roles.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Role'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List roles
      tags:
      - Oscal
  /oscal/roles/{id}:
    get:
      description: Retrieves a single Role by its unique ID.
      parameters:
      - description: Party ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Role'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a Role
      tags:
      - Oscal
  /oscal/system-security-plans:
    get:
      description: Retrieves all System Security Plans.
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_SystemSecurityPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List System Security Plans
      tags:
      - System Security Plans
    post:
      consumes:
      - application/json
      description: Creates a System Security Plan from input.
      parameters:
      - description: SSP data
        in: body
        name: ssp
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemSecurityPlan'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemSecurityPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a System Security Plan
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}:
    delete:
      description: Deletes an existing System Security Plan and all its related data.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a System Security Plan
      tags:
      - System Security Plans
    get:
      description: Retrieves a single System Security Plan by its unique ID.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemSecurityPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get a System Security Plan
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates an existing System Security Plan.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: SSP data
        in: body
        name: ssp
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemSecurityPlan'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemSecurityPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a System Security Plan
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/back-matter:
    get:
      description: Retrieves back-matter for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get SSP back-matter
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates back-matter for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Back Matter data
        in: body
        name: back-matter
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.BackMatter'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_BackMatter'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update SSP back-matter
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/back-matter/resources:
    get:
      description: Retrieves all back-matter resources for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get back-matter resources for a SSP
      tags:
      - System Security Plans
    post:
      consumes:
      - application/json
      description: Creates a new back-matter resource for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource data
        in: body
        name: resource
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Resource'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new back-matter resource for a SSP
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/back-matter/resources/{resourceId}:
    delete:
      description: Deletes an existing back-matter resource for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource ID
        in: path
        name: resourceId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a back-matter resource from a SSP
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates an existing back-matter resource for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Resource ID
        in: path
        name: resourceId
        required: true
        type: string
      - description: Resource data
        in: body
        name: resource
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Resource'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Resource'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a back-matter resource for a SSP
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/bulk-apply-component-suggestions:
    post:
      description: For each ImplementedRequirement, creates SystemComponents from
        matching DefinedComponents and links them via ByComponent.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Bulk apply component suggestions for all implemented requirements in
        an SSP
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation:
    get:
      description: Retrieves the Control Implementation for a given System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ControlImplementation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Control Implementation
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates the Control Implementation for a given System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated Control Implementation object
        in: body
        name: control-implementation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ControlImplementation'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ControlImplementation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update Control Implementation
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements:
    get:
      description: Retrieves all implemented requirements for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_ImplementedRequirement'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get implemented requirements for a SSP
      tags:
      - System Security Plans
    post:
      consumes:
      - application/json
      description: Creates a new implemented requirement for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Implemented Requirement data
        in: body
        name: requirement
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ImplementedRequirement'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImplementedRequirement'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new implemented requirement for a SSP
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}:
    delete:
      description: Deletes an existing implemented requirement for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete an implemented requirement from a SSP
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates an existing implemented requirement for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: Implemented Requirement data
        in: body
        name: requirement
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ImplementedRequirement'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImplementedRequirement'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update an implemented requirement for a SSP
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/apply-suggestion:
    post:
      description: Creates SystemComponents from DefinedComponents that implement
        the same control and links them via ByComponent.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Implemented Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Apply component suggestions for an implemented requirement
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/by-components/{byComponentId}:
    put:
      consumes:
      - application/json
      description: Updates an existing by-component that belongs to an implemented
        requirement for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: By-Component ID
        in: path
        name: byComponentId
        required: true
        type: string
      - description: By-Component data
        in: body
        name: by-component
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ByComponent'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ByComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a by-component within an implemented requirement
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/statements:
    post:
      consumes:
      - application/json
      description: Creates a new statement within an implemented requirement for a
        given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: Statement data
        in: body
        name: statement
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Statement'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Statement'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new statement within an implemented requirement
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/statements/{stmtId}:
    put:
      consumes:
      - application/json
      description: Updates an existing statement within an implemented requirement
        for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: Statement ID
        in: path
        name: stmtId
        required: true
        type: string
      - description: Statement data
        in: body
        name: statement
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Statement'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Statement'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a statement within an implemented requirement
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/statements/{stmtId}/apply-suggestion:
    post:
      description: Creates SystemComponents from DefinedComponents that implement
        the statement's parent control and links them via ByComponent to the statement.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Implemented Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: Statement ID
        in: path
        name: stmtId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Apply component suggestions for a statement
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/statements/{stmtId}/by-components:
    post:
      consumes:
      - application/json
      description: Create a by-component within an existing statement within an implemented
        requirement for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: Statement ID
        in: path
        name: stmtId
        required: true
        type: string
      - description: By-Component data
        in: body
        name: by-component
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ByComponent'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ByComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a by-component within a statement (within an implemented requirement)
      tags:
      - System Security Plans
  ? /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/statements/{stmtId}/by-components/{byComponentId}
  : delete:
      consumes:
      - application/json
      description: Deletes a by-component within an existing statement within an implemented
        requirement for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: Statement ID
        in: path
        name: stmtId
        required: true
        type: string
      - description: By-Component ID
        in: path
        name: byComponentId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ByComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a by-component within a statement (within an implemented requirement)
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates a by-component within an existing statement within an implemented
        requirement for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: Statement ID
        in: path
        name: stmtId
        required: true
        type: string
      - description: By-Component ID
        in: path
        name: byComponentId
        required: true
        type: string
      - description: By-Component data
        in: body
        name: by-component
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ByComponent'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ByComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a by-component within a statement (within an implemented requirement)
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/statements/{stmtId}/suggest-components:
    post:
      description: Returns DefinedComponents that implement the statement's parent
        control and are not yet present in the SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Implemented Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      - description: Statement ID
        in: path
        name: stmtId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-relational_SystemComponentSuggestion'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Suggest system components for a statement
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/control-implementation/implemented-requirements/{reqId}/suggest-components:
    post:
      description: Returns DefinedComponents that implement the same control and are
        not yet present in the SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Implemented Requirement ID
        in: path
        name: reqId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-relational_SystemComponentSuggestion'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Suggest system components for an implemented requirement
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/import-profile:
    get:
      description: Retrieves import-profile for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImportProfile'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get SSP import-profile
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates import-profile for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Import Profile data
        in: body
        name: import-profile
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.ImportProfile'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_ImportProfile'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update SSP import-profile
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/metadata:
    get:
      description: Retrieves metadata for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Metadata'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Get SSP metadata
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates metadata for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Metadata data
        in: body
        name: metadata
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Metadata'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Metadata'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update SSP metadata
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/profile:
    get:
      description: Retrieves the Profile attached to the specified System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Profile'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Profile for a System Security Plan
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Associates a given Profile with a System Security Plan.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Profile ID to attach
        in: body
        name: profileId
        required: true
        schema:
          type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemSecurityPlan'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Attach a Profile to a System Security Plan
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics:
    get:
      description: Retrieves the System Characteristics for a given System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemCharacteristics'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get System Characteristics
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates the System Characteristics for a given System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated System Characteristics object
        in: body
        name: characteristics
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemCharacteristics'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemCharacteristics'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update System Characteristics
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/authorization-boundary:
    get:
      description: Retrieves the Authorization Boundary for a given System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_AuthorizationBoundary'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Authorization Boundary
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/authorization-boundary/diagrams:
    post:
      consumes:
      - application/json
      description: Creates a new Diagram under the Authorization Boundary of a System
        Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram object to create
        in: body
        name: diagram
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Diagram'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create an Authorization Boundary Diagram
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/authorization-boundary/diagrams/{diagram}:
    delete:
      description: Deletes a specific Diagram under the Authorization Boundary of
        a System Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram ID
        in: path
        name: diagram
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete an Authorization Boundary Diagram
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates a specific Diagram under the Authorization Boundary of
        a System Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram ID
        in: path
        name: diagram
        required: true
        type: string
      - description: Updated Diagram object
        in: body
        name: diagram
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Diagram'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update an Authorization Boundary Diagram
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/data-flow:
    get:
      description: Retrieves the Data Flow for a given System Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_DataFlow'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Data Flow
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/data-flow/diagrams:
    post:
      consumes:
      - application/json
      description: Creates a new Diagram under the Data Flow of a System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram object to create
        in: body
        name: diagram
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Diagram'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a Data Flow Diagram
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/data-flow/diagrams/{diagram}:
    delete:
      description: Deletes a specific Diagram under the Data Flow of a System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram ID
        in: path
        name: diagram
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a Data Flow Diagram
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates a specific Diagram under the Data Flow of a System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram ID
        in: path
        name: diagram
        required: true
        type: string
      - description: Updated Diagram object
        in: body
        name: diagram
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Diagram'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a Data Flow Diagram
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/network-architecture:
    get:
      description: Retrieves the Network Architecture for a given System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_NetworkArchitecture'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get Network Architecture
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/network-architecture/diagrams:
    post:
      consumes:
      - application/json
      description: Creates a new Diagram under the Network Architecture of a System
        Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram object to create
        in: body
        name: diagram
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Diagram'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create a Network Architecture Diagram
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-characteristics/network-architecture/diagrams/{diagram}:
    delete:
      description: Deletes a specific Diagram under the Network Architecture of a
        System Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram ID
        in: path
        name: diagram
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete a Network Architecture Diagram
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates a specific Diagram under the Network Architecture of a
        System Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Diagram ID
        in: path
        name: diagram
        required: true
        type: string
      - description: Updated Diagram object
        in: body
        name: diagram
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.Diagram'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_Diagram'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update a Network Architecture Diagram
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation:
    get:
      description: Retrieves the System Implementation for a given System Security
        Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemImplementation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get System Implementation
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates the System Implementation for a given System Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated System Implementation object
        in: body
        name: system-implementation
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemImplementation'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemImplementation'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update System Implementation
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation/components:
    get:
      description: Retrieves components in the System Implementation for a given System
        Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_SystemComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List System Implementation Components
      tags:
      - System Security Plans
    post:
      consumes:
      - application/json
      description: Creates a new system component for a given SSP. Accepts an optional
        definedComponentId field to link to a DefinedComponent.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: System Component data with optional definedComponentId field
        in: body
        name: component
        required: true
        schema:
          $ref: '#/definitions/oscal.SystemComponentRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new system component
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation/components/{componentId}:
    delete:
      description: Deletes an existing system component for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Component ID
        in: path
        name: componentId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a system component
      tags:
      - System Security Plans
    get:
      description: Retrieves component in the System Implementation for a given System
        Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      - description: Component ID
        in: path
        name: componentId
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get System Implementation Component
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates an existing system component for a given SSP. Accepts an
        optional definedComponentId field to link to a DefinedComponent.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Component ID
        in: path
        name: componentId
        required: true
        type: string
      - description: System Component data with optional definedComponentId field
        in: body
        name: component
        required: true
        schema:
          $ref: '#/definitions/oscal.SystemComponentRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemComponent'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a system component
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation/inventory-items:
    get:
      description: Retrieves inventory items in the System Implementation for a given
        System Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_InventoryItem'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List System Implementation Inventory Items
      tags:
      - System Security Plans
    post:
      consumes:
      - application/json
      description: Creates a new inventory item for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Inventory Item data
        in: body
        name: item
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_InventoryItem'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new inventory item
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation/inventory-items/{itemId}:
    delete:
      description: Deletes an existing inventory item for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Item ID
        in: path
        name: itemId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete an inventory item
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates an existing inventory item for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Item ID
        in: path
        name: itemId
        required: true
        type: string
      - description: Inventory Item data
        in: body
        name: item
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.InventoryItem'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_InventoryItem'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update an inventory item
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation/leveraged-authorizations:
    get:
      description: Retrieves leveraged authorizations in the System Implementation
        for a given System Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_LeveragedAuthorization'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List System Implementation Leveraged Authorizations
      tags:
      - System Security Plans
    post:
      consumes:
      - application/json
      description: Creates a new leveraged authorization for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Leveraged Authorization data
        in: body
        name: auth
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.LeveragedAuthorization'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_LeveragedAuthorization'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new leveraged authorization
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation/leveraged-authorizations/{authId}:
    delete:
      description: Deletes an existing leveraged authorization for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Authorization ID
        in: path
        name: authId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a leveraged authorization
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates an existing leveraged authorization for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: Authorization ID
        in: path
        name: authId
        required: true
        type: string
      - description: Leveraged Authorization data
        in: body
        name: auth
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.LeveragedAuthorization'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_LeveragedAuthorization'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a leveraged authorization
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation/users:
    get:
      description: Retrieves users in the System Implementation for a given System
        Security Plan.
      parameters:
      - description: System Security Plan ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataListResponse-oscalTypes_1_1_3_SystemUser'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List System Implementation Users
      tags:
      - System Security Plans
    post:
      consumes:
      - application/json
      description: Creates a new system user for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: System User data
        in: body
        name: user
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemUser'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemUser'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Create a new system user
      tags:
      - System Security Plans
  /oscal/system-security-plans/{id}/system-implementation/users/{userId}:
    delete:
      description: Deletes an existing system user for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: User ID
        in: path
        name: userId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Delete a system user
      tags:
      - System Security Plans
    put:
      consumes:
      - application/json
      description: Updates an existing system user for a given SSP.
      parameters:
      - description: SSP ID
        in: path
        name: id
        required: true
        type: string
      - description: User ID
        in: path
        name: userId
        required: true
        type: string
      - description: System User data
        in: body
        name: user
        required: true
        schema:
          $ref: '#/definitions/oscalTypes_1_1_3.SystemUser'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-oscalTypes_1_1_3_SystemUser'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      summary: Update a system user
      tags:
      - System Security Plans
  /risk-templates:
    get:
      description: List risk templates with optional filters and pagination.
      parameters:
      - description: Plugin ID
        in: query
        name: pluginId
        type: string
      - description: Policy package
        in: query
        name: policyPackage
        type: string
      - description: Active flag
        in: query
        name: isActive
        type: boolean
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-templates_riskTemplateResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List risk templates
      tags:
      - Risk Templates
    post:
      consumes:
      - application/json
      description: Create a risk template with threat references and remediation template/tasks.
      parameters:
      - description: Risk template payload
        in: body
        name: template
        required: true
        schema:
          $ref: '#/definitions/templates.upsertRiskTemplateRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/templates.riskTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create risk template
      tags:
      - Risk Templates
  /risk-templates/{id}:
    delete:
      description: Delete a risk template and its associated threat references and
        remediation data.
      parameters:
      - description: Risk Template ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete risk template
      tags:
      - Risk Templates
    get:
      description: Get a risk template by ID.
      parameters:
      - description: Risk Template ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/templates.riskTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get risk template
      tags:
      - Risk Templates
    put:
      consumes:
      - application/json
      description: Update a risk template and atomically replace threat refs and remediation
        tasks.
      parameters:
      - description: Risk Template ID
        in: path
        name: id
        required: true
        type: string
      - description: Risk template payload
        in: body
        name: template
        required: true
        schema:
          $ref: '#/definitions/templates.upsertRiskTemplateRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/templates.riskTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update risk template
      tags:
      - Risk Templates
  /risks:
    get:
      description: Lists risk register entries with filtering, sorting, and pagination.
      parameters:
      - description: Risk status
        in: query
        name: status
        type: string
      - description: Risk likelihood
        in: query
        name: likelihood
        type: string
      - description: Risk impact
        in: query
        name: impact
        type: string
      - description: SSP ID
        in: query
        name: sspId
        type: string
      - description: Control ID
        in: query
        name: controlId
        type: string
      - description: Evidence ID
        in: query
        name: evidenceId
        type: string
      - description: Owner kind
        in: query
        name: ownerKind
        type: string
      - description: Owner reference
        in: query
        name: ownerRef
        type: string
      - description: Review deadline upper bound (RFC3339)
        in: query
        name: reviewDeadlineBefore
        type: string
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      - description: Sort field
        in: query
        name: sort
        type: string
      - description: Sort order (asc|desc)
        in: query
        name: order
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List risks
      tags:
      - Risks
    post:
      consumes:
      - application/json
      description: Creates a risk register entry.
      parameters:
      - description: Risk payload
        in: body
        name: risk
        required: true
        schema:
          $ref: '#/definitions/handler.createRiskRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create risk
      tags:
      - Risks
  /risks/{id}:
    delete:
      description: Deletes a risk register entry and link rows by ID.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete risk
      tags:
      - Risks
    get:
      description: Retrieves a risk register entry by ID.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get risk
      tags:
      - Risks
    put:
      consumes:
      - application/json
      description: Updates a risk register entry by ID.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Risk payload
        in: body
        name: risk
        required: true
        schema:
          $ref: '#/definitions/handler.updateRiskRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update risk
      tags:
      - Risks
  /risks/{id}/accept:
    post:
      consumes:
      - application/json
      description: Accepts a risk with required justification and a future review
        deadline.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Accept payload
        in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/handler.acceptRiskRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Accept risk
      tags:
      - Risks
  /risks/{id}/components:
    get:
      description: Lists components linked to a risk.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-risks_RiskComponentLink'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List risk component links
      tags:
      - Risks
    post:
      consumes:
      - application/json
      description: Idempotently links a component to a risk.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Component link payload
        in: body
        name: link
        required: true
        schema:
          $ref: '#/definitions/handler.addComponentLinkRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-risks_RiskComponentLink'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Link component to risk
      tags:
      - Risks
  /risks/{id}/controls:
    get:
      description: Lists controls linked to a risk.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-risks_RiskControlLink'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List risk control links
      tags:
      - Risks
    post:
      consumes:
      - application/json
      description: Idempotently links a control to a risk.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Control link payload
        in: body
        name: link
        required: true
        schema:
          $ref: '#/definitions/handler.addControlLinkRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-risks_RiskControlLink'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Link control to risk
      tags:
      - Risks
  /risks/{id}/evidence:
    get:
      description: Lists evidence IDs linked to a risk.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-uuid_UUID'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List risk evidence links
      tags:
      - Risks
    post:
      consumes:
      - application/json
      description: Idempotently links an evidence item to a risk.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Evidence link payload
        in: body
        name: link
        required: true
        schema:
          $ref: '#/definitions/handler.addEvidenceLinkRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-risks_RiskEvidenceLink'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Link evidence to risk
      tags:
      - Risks
  /risks/{id}/evidence/{evidenceId}:
    delete:
      description: Deletes the link between a risk and evidence item.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Evidence ID
        in: path
        name: evidenceId
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete risk evidence link
      tags:
      - Risks
  /risks/{id}/review:
    post:
      consumes:
      - application/json
      description: Records a structured review for an accepted risk. nextReviewDeadline
        is required for decision=extend and must be omitted for decision=reopen.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Review payload
        in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/handler.reviewRiskRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Review risk
      tags:
      - Risks
  /risks/{id}/subjects:
    get:
      description: Lists subjects linked to a risk.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-risks_RiskSubjectLink'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List risk subject links
      tags:
      - Risks
    post:
      consumes:
      - application/json
      description: Idempotently links a subject to a risk.
      parameters:
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Subject link payload
        in: body
        name: link
        required: true
        schema:
          $ref: '#/definitions/handler.addSubjectLinkRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-risks_RiskSubjectLink'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Link subject to risk
      tags:
      - Risks
  /ssp/{sspId}/risks:
    get:
      description: Lists risk register entries scoped to an SSP.
      parameters:
      - description: SSP ID
        in: path
        name: sspId
        required: true
        type: string
      - description: Risk status
        in: query
        name: status
        type: string
      - description: Risk likelihood
        in: query
        name: likelihood
        type: string
      - description: Risk impact
        in: query
        name: impact
        type: string
      - description: Control ID
        in: query
        name: controlId
        type: string
      - description: Evidence ID
        in: query
        name: evidenceId
        type: string
      - description: Owner kind
        in: query
        name: ownerKind
        type: string
      - description: Owner reference
        in: query
        name: ownerRef
        type: string
      - description: Review deadline upper bound (RFC3339)
        in: query
        name: reviewDeadlineBefore
        type: string
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      - description: Sort field
        in: query
        name: sort
        type: string
      - description: Sort order (asc|desc)
        in: query
        name: order
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List risks for SSP
      tags:
      - Risks
    post:
      consumes:
      - application/json
      description: Creates a risk register entry scoped to an SSP.
      parameters:
      - description: SSP ID
        in: path
        name: sspId
        required: true
        type: string
      - description: Risk payload
        in: body
        name: risk
        required: true
        schema:
          $ref: '#/definitions/handler.createRiskRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create risk for SSP
      tags:
      - Risks
  /ssp/{sspId}/risks/{id}:
    delete:
      description: Deletes a risk register entry by ID scoped to an SSP.
      parameters:
      - description: SSP ID
        in: path
        name: sspId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete risk for SSP
      tags:
      - Risks
    get:
      description: Retrieves a risk register entry by ID scoped to an SSP.
      parameters:
      - description: SSP ID
        in: path
        name: sspId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get risk for SSP
      tags:
      - Risks
    put:
      consumes:
      - application/json
      description: Updates a risk register entry by ID scoped to an SSP.
      parameters:
      - description: SSP ID
        in: path
        name: sspId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Risk payload
        in: body
        name: risk
        required: true
        schema:
          $ref: '#/definitions/handler.updateRiskRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update risk for SSP
      tags:
      - Risks
  /ssp/{sspId}/risks/{id}/accept:
    post:
      consumes:
      - application/json
      description: Accepts a risk by ID scoped to an SSP.
      parameters:
      - description: SSP ID
        in: path
        name: sspId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Accept payload
        in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/handler.acceptRiskRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Accept risk for SSP
      tags:
      - Risks
  /ssp/{sspId}/risks/{id}/review:
    post:
      consumes:
      - application/json
      description: Records a risk review by ID scoped to an SSP. nextReviewDeadline
        is required for decision=extend and must be omitted for decision=reopen.
      parameters:
      - description: SSP ID
        in: path
        name: sspId
        required: true
        type: string
      - description: Risk ID
        in: path
        name: id
        required: true
        type: string
      - description: Review payload
        in: body
        name: body
        required: true
        schema:
          $ref: '#/definitions/handler.reviewRiskRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_riskResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Review risk for SSP
      tags:
      - Risks
  /subject-templates:
    get:
      description: List subject templates with optional filters and pagination.
      parameters:
      - description: Subject type
        in: query
        name: type
        type: string
      - description: Source mode
        in: query
        name: sourceMode
        type: string
      - description: Page number
        in: query
        name: page
        type: integer
      - description: Page size
        in: query
        name: limit
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/service.ListResponse-templates_subjectTemplateResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List subject templates
      tags:
      - Subject Templates
    post:
      consumes:
      - application/json
      description: Create a subject template with selector labels and label schema.
      parameters:
      - description: Subject template payload
        in: body
        name: template
        required: true
        schema:
          $ref: '#/definitions/templates.upsertSubjectTemplateRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/templates.subjectTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create subject template
      tags:
      - Subject Templates
  /subject-templates/{id}:
    get:
      description: Get a subject template by ID.
      parameters:
      - description: Subject Template ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/templates.subjectTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get subject template
      tags:
      - Subject Templates
    put:
      consumes:
      - application/json
      description: Update a subject template and atomically replace selector labels
        and label schema.
      parameters:
      - description: Subject Template ID
        in: path
        name: id
        required: true
        type: string
      - description: Subject template payload
        in: body
        name: template
        required: true
        schema:
          $ref: '#/definitions/templates.upsertSubjectTemplateRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/templates.subjectTemplateDataResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update subject template
      tags:
      - Subject Templates
  /users/{id}/change-password:
    post:
      consumes:
      - application/json
      description: Changes the password for a user by ID
      parameters:
      - description: User ID
        in: path
        name: id
        required: true
        type: string
      - description: Change Password Request
        in: body
        name: changePasswordRequest
        required: true
        schema:
          $ref: '#/definitions/handler.UserHandler'
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Change password for a specific user
      tags:
      - Users
  /users/me:
    get:
      description: Retrieves the details of the currently logged-in user
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-relational_User'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get logged-in user details
      tags:
      - Users
  /users/me/change-password:
    post:
      consumes:
      - application/json
      description: Changes the password for the currently logged-in user
      parameters:
      - description: Change Password Request
        in: body
        name: changePasswordRequest
        required: true
        schema:
          $ref: '#/definitions/handler.UserHandler'
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Change password for logged-in user
      tags:
      - Users
  /users/me/subscriptions:
    get:
      description: Gets the current user's digest and workflow notification email
        preferences
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_SubscriptionsResponse'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get notification preferences
      tags:
      - Users
    put:
      consumes:
      - application/json
      description: Updates the current user's digest and workflow notification email
        preferences
      parameters:
      - description: Notification preferences
        in: body
        name: subscription
        required: true
        schema:
          $ref: '#/definitions/handler.UpdateSubscriptionsRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/handler.GenericDataResponse-handler_SubscriptionsResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update notification preferences
      tags:
      - Users
  /workflows/control-relationships:
    get:
      description: List all control relationships, optionally filtered by workflow
        definition
      parameters:
      - description: Workflow Definition ID
        in: query
        name: workflow_definition_id
        type: string
      - description: Control ID
        in: query
        name: control_id
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.ControlRelationshipListResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List control relationships
      tags:
      - Control Relationships
    post:
      consumes:
      - application/json
      description: Create a new control relationship for a workflow
      parameters:
      - description: Control relationship details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.CreateControlRelationshipRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/workflows.ControlRelationshipResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create control relationship
      tags:
      - Control Relationships
  /workflows/control-relationships/{id}:
    delete:
      description: Delete a control relationship
      parameters:
      - description: Control Relationship ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete control relationship
      tags:
      - Control Relationships
    get:
      description: Get control relationship by ID
      parameters:
      - description: Control Relationship ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.ControlRelationshipResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get control relationship
      tags:
      - Control Relationships
    put:
      consumes:
      - application/json
      description: Update an existing control relationship
      parameters:
      - description: Control Relationship ID
        in: path
        name: id
        required: true
        type: string
      - description: Update details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.UpdateControlRelationshipRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.ControlRelationshipResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update control relationship
      tags:
      - Control Relationships
  /workflows/control-relationships/{id}/activate:
    put:
      description: Activate a control relationship
      parameters:
      - description: Control Relationship ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.ControlRelationshipResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Activate control relationship
      tags:
      - Control Relationships
  /workflows/control-relationships/{id}/deactivate:
    put:
      description: Deactivate a control relationship
      parameters:
      - description: Control Relationship ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.ControlRelationshipResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Deactivate control relationship
      tags:
      - Control Relationships
  /workflows/definitions:
    get:
      description: List all workflow definition templates
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowDefinitionListResponse'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List workflow definitions
      tags:
      - Workflow Definitions
    post:
      consumes:
      - application/json
      description: Create a new workflow definition template
      parameters:
      - description: Workflow definition details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.CreateWorkflowDefinitionRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/workflows.WorkflowDefinitionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create workflow definition
      tags:
      - Workflow Definitions
  /workflows/definitions/{id}:
    delete:
      description: Delete workflow definition by ID
      parameters:
      - description: Workflow Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete workflow definition
      tags:
      - Workflow Definitions
    get:
      description: Get workflow definition by ID
      parameters:
      - description: Workflow Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowDefinitionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get workflow definition
      tags:
      - Workflow Definitions
    put:
      consumes:
      - application/json
      description: Update workflow definition by ID
      parameters:
      - description: Workflow Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated workflow definition details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.UpdateWorkflowDefinitionRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowDefinitionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update workflow definition
      tags:
      - Workflow Definitions
  /workflows/executions:
    get:
      description: List all executions for a workflow instance
      parameters:
      - description: Workflow Instance ID
        in: query
        name: workflow_instance_id
        required: true
        type: string
      - description: Limit
        in: query
        name: limit
        type: integer
      - description: Offset
        in: query
        name: offset
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowExecutionListResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List workflow executions
      tags:
      - Workflow Executions
    post:
      consumes:
      - application/json
      description: Start a new execution of a workflow instance
      parameters:
      - description: Execution details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.StartWorkflowExecutionRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/workflows.WorkflowExecutionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Start workflow execution
      tags:
      - Workflow Executions
  /workflows/executions/{id}:
    get:
      description: Get workflow execution by ID
      parameters:
      - description: Workflow Execution ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowExecutionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get workflow execution
      tags:
      - Workflow Executions
  /workflows/executions/{id}/cancel:
    put:
      consumes:
      - application/json
      description: Cancel a running workflow execution
      parameters:
      - description: Workflow Execution ID
        in: path
        name: id
        required: true
        type: string
      - description: Cancel details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.CancelWorkflowExecutionRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowExecutionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Cancel workflow execution
      tags:
      - Workflow Executions
  /workflows/executions/{id}/metrics:
    get:
      description: Get performance metrics for a workflow execution
      parameters:
      - description: Workflow Execution ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowExecutionMetricsResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get workflow execution metrics
      tags:
      - Workflow Executions
  /workflows/executions/{id}/reassign-role:
    put:
      consumes:
      - application/json
      description: Reassign eligible steps in an execution for a given role
      parameters:
      - description: Workflow Execution ID
        in: path
        name: id
        required: true
        type: string
      - description: Bulk reassignment details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.ReassignRoleRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.BulkReassignRoleResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Bulk reassign steps by role
      tags:
      - Workflow Executions
  /workflows/executions/{id}/retry:
    post:
      description: Create a new execution to retry a failed workflow
      parameters:
      - description: Workflow Execution ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/workflows.WorkflowExecutionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Retry workflow execution
      tags:
      - Workflow Executions
  /workflows/executions/{id}/status:
    get:
      description: Get detailed status of a workflow execution including step counts
      parameters:
      - description: Workflow Execution ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowExecutionStatusResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get workflow execution status
      tags:
      - Workflow Executions
  /workflows/instances:
    get:
      description: List all workflow instances with optional filtering
      parameters:
      - description: Filter by Workflow Definition ID
        in: query
        name: workflow_definition_id
        type: string
      - description: Filter by System Security Plan ID
        in: query
        name: system_security_plan_id
        type: string
      - description: Filter by Active Status
        in: query
        name: is_active
        type: boolean
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowInstanceListResponse'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List workflow instances
      tags:
      - Workflow Instances
    post:
      consumes:
      - application/json
      description: Create a new workflow instance for a specific system
      parameters:
      - description: Workflow instance details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.CreateWorkflowInstanceRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/workflows.WorkflowInstanceResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create workflow instance
      tags:
      - Workflow Instances
  /workflows/instances/{id}:
    delete:
      description: Delete workflow instance by ID
      parameters:
      - description: Workflow Instance ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete workflow instance
      tags:
      - Workflow Instances
    get:
      description: Get workflow instance by ID
      parameters:
      - description: Workflow Instance ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowInstanceResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get workflow instance
      tags:
      - Workflow Instances
    put:
      consumes:
      - application/json
      description: Update workflow instance by ID
      parameters:
      - description: Workflow Instance ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated workflow instance details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.UpdateWorkflowInstanceRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowInstanceResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update workflow instance
      tags:
      - Workflow Instances
  /workflows/instances/{id}/activate:
    put:
      description: Activate a workflow instance to enable scheduled executions
      parameters:
      - description: Workflow Instance ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowInstanceResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Activate workflow instance
      tags:
      - Workflow Instances
  /workflows/instances/{id}/deactivate:
    put:
      description: Deactivate a workflow instance to disable scheduled executions
      parameters:
      - description: Workflow Instance ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowInstanceResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Deactivate workflow instance
      tags:
      - Workflow Instances
  /workflows/role-assignments:
    get:
      description: List all role assignments, optionally filtered by workflow instance
      parameters:
      - description: Workflow Instance ID
        in: query
        name: workflow_instance_id
        type: string
      - description: Role Name
        in: query
        name: role_name
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.RoleAssignmentListResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List role assignments
      tags:
      - Role Assignments
    post:
      consumes:
      - application/json
      description: Create a new role assignment for a workflow instance
      parameters:
      - description: Role assignment details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.CreateRoleAssignmentRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/workflows.RoleAssignmentResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create role assignment
      tags:
      - Role Assignments
  /workflows/role-assignments/{id}:
    delete:
      description: Delete a role assignment
      parameters:
      - description: Role Assignment ID
        in: path
        name: id
        required: true
        type: string
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete role assignment
      tags:
      - Role Assignments
    get:
      description: Get role assignment by ID
      parameters:
      - description: Role Assignment ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.RoleAssignmentResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get role assignment
      tags:
      - Role Assignments
    put:
      consumes:
      - application/json
      description: Update an existing role assignment
      parameters:
      - description: Role Assignment ID
        in: path
        name: id
        required: true
        type: string
      - description: Update details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.UpdateRoleAssignmentRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.RoleAssignmentResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update role assignment
      tags:
      - Role Assignments
  /workflows/role-assignments/{id}/activate:
    put:
      description: Activate a role assignment
      parameters:
      - description: Role Assignment ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.RoleAssignmentResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Activate role assignment
      tags:
      - Role Assignments
  /workflows/role-assignments/{id}/deactivate:
    put:
      description: Deactivate a role assignment
      parameters:
      - description: Role Assignment ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.RoleAssignmentResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Deactivate role assignment
      tags:
      - Role Assignments
  /workflows/step-executions:
    get:
      description: List all step executions for a workflow execution
      parameters:
      - description: Workflow Execution ID
        in: query
        name: workflow_execution_id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.StepExecutionListResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List step executions
      tags:
      - Step Executions
  /workflows/step-executions/{id}:
    get:
      description: Get step execution by ID
      parameters:
      - description: Step Execution ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.StepExecutionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get step execution
      tags:
      - Step Executions
  /workflows/step-executions/{id}/can-transition:
    get:
      description: Check if a user has permission to transition a step execution
      parameters:
      - description: Step Execution ID
        in: path
        name: id
        required: true
        type: string
      - description: User ID
        in: query
        name: user_id
        required: true
        type: string
      - description: User Type (user, group, email)
        in: query
        name: user_type
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            additionalProperties: true
            type: object
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Check if user can transition step
      tags:
      - Step Executions
  /workflows/step-executions/{id}/evidence-requirements:
    get:
      description: Get the evidence requirements for a step execution
      parameters:
      - description: Step Execution ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            additionalProperties: true
            type: object
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get evidence requirements for step
      tags:
      - Step Executions
  /workflows/step-executions/{id}/fail:
    put:
      consumes:
      - application/json
      description: Mark a step execution as failed with a reason
      parameters:
      - description: Step Execution ID
        in: path
        name: id
        required: true
        type: string
      - description: Failure details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.FailStepRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.StepExecutionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Fail step execution
      tags:
      - Step Executions
  /workflows/step-executions/{id}/reassign:
    put:
      consumes:
      - application/json
      description: Reassign a step execution to a new assignee
      parameters:
      - description: Step Execution ID
        in: path
        name: id
        required: true
        type: string
      - description: Reassignment details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.ReassignStepRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.StepExecutionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Reassign step execution
      tags:
      - Step Executions
  /workflows/step-executions/{id}/transition:
    put:
      consumes:
      - application/json
      description: Transition a step execution status with role verification and evidence
        validation
      parameters:
      - description: Step Execution ID
        in: path
        name: id
        required: true
        type: string
      - description: Transition request
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.TransitionStepRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.StepExecutionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "403":
          description: Forbidden
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Transition step execution status
      tags:
      - Step Executions
  /workflows/step-executions/my:
    get:
      description: List all step executions assigned to the current user with optional
        filters and pagination
      parameters:
      - description: Filter by status (pending, in_progress, blocked)
        in: query
        name: status
        type: string
      - description: Filter by due date before (RFC3339 format)
        in: query
        name: due_before
        type: string
      - description: Filter by due date after (RFC3339 format)
        in: query
        name: due_after
        type: string
      - description: Filter by workflow definition ID
        in: query
        name: workflow_definition_id
        type: string
      - description: Limit (default 20, max 100)
        in: query
        name: limit
        type: integer
      - description: Offset (default 0)
        in: query
        name: offset
        type: integer
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.MyAssignmentsResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List my step assignments
      tags:
      - Step Executions
  /workflows/steps:
    get:
      description: List all step definitions for a workflow definition
      parameters:
      - description: Workflow Definition ID
        in: query
        name: workflow_definition_id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowStepDefinitionListResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: List workflow step definitions
      tags:
      - Workflow Step Definitions
    post:
      consumes:
      - application/json
      description: Create a new step definition for a workflow
      parameters:
      - description: Step definition details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.CreateWorkflowStepDefinitionRequest'
      produces:
      - application/json
      responses:
        "201":
          description: Created
          schema:
            $ref: '#/definitions/workflows.WorkflowStepDefinitionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Create workflow step definition
      tags:
      - Workflow Step Definitions
  /workflows/steps/{id}:
    delete:
      description: Delete workflow step definition by ID
      parameters:
      - description: Step Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "204":
          description: No Content
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Delete workflow step definition
      tags:
      - Workflow Step Definitions
    get:
      description: Get workflow step definition by ID
      parameters:
      - description: Step Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowStepDefinitionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get workflow step definition
      tags:
      - Workflow Step Definitions
    put:
      consumes:
      - application/json
      description: Update workflow step definition by ID
      parameters:
      - description: Step Definition ID
        in: path
        name: id
        required: true
        type: string
      - description: Updated step definition details
        in: body
        name: request
        required: true
        schema:
          $ref: '#/definitions/workflows.UpdateWorkflowStepDefinitionRequest'
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowStepDefinitionResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Update workflow step definition
      tags:
      - Workflow Step Definitions
  /workflows/steps/{id}/dependencies:
    get:
      description: Get all dependencies for a workflow step definition
      parameters:
      - description: Step Definition ID
        in: path
        name: id
        required: true
        type: string
      produces:
      - application/json
      responses:
        "200":
          description: OK
          schema:
            $ref: '#/definitions/workflows.WorkflowStepDefinitionListResponse'
        "400":
          description: Bad Request
          schema:
            $ref: '#/definitions/api.Error'
        "401":
          description: Unauthorized
          schema:
            $ref: '#/definitions/api.Error'
        "404":
          description: Not Found
          schema:
            $ref: '#/definitions/api.Error'
        "500":
          description: Internal Server Error
          schema:
            $ref: '#/definitions/api.Error'
      security:
      - OAuth2Password: []
      summary: Get step dependencies
      tags:
      - Workflow Step Definitions
produces:
- application/json
securityDefinitions:
  OAuth2Password:
    flow: password
    tokenUrl: /api/auth/token
    type: oauth2
swagger: "2.0"