{
  "openapi": "3.0.3",
  "info": {
    "title": "BrightCert Cyber Essentials Guide",
    "description": "Read-only, public Cyber Essentials readiness guidance. No authentication, no personal or business data collected, no writes.",
    "version": "1.0.0",
    "contact": { "url": "https://brightcert.co.uk/contact" }
  },
  "servers": [{ "url": "https://brightcert.co.uk" }],
  "paths": {
    "/api/muse/cyber-essentials-guide": {
      "get": {
        "summary": "Get Cyber Essentials readiness guidance",
        "description": "Returns either a 7-stage overview of Cyber Essentials readiness, or full task/evidence detail for one stage when `stage` is provided.",
        "parameters": [
          {
            "name": "stage",
            "in": "query",
            "required": false,
            "description": "One of the 7 Cyber Essentials readiness stage ids. Omit for a summary overview of all 7 stages.",
            "schema": {
              "type": "string",
              "enum": [
                "scope",
                "firewalls",
                "secure-configuration",
                "user-access",
                "malware",
                "updates",
                "final-review"
              ]
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Overview (no stage) or stage detail (with stage), plus a `service` block describing BrightCert.",
            "content": {
              "application/json": {
                "schema": { "type": "object" },
                "examples": {
                  "overview": {
                    "summary": "No stage parameter",
                    "value": {
                      "service": {
                        "name": "BrightCert",
                        "whatItDoes": "BrightCert is a UK Cyber Essentials readiness-assessment platform for SMEs. It is not a certification body — it helps a business get organised and evidence-ready before submitting the official IASME-licensed Cyber Essentials self-assessment.",
                        "assessmentUrl": "https://brightcert.co.uk",
                        "disclaimer": "General guidance only. This is not a certification decision and does not reflect any specific organisation's certification status."
                      },
                      "checklist": {
                        "description": "Cyber Essentials readiness breaks into 7 stages. Call again with a 'stage' query parameter (see 'id' below) for that stage's detailed tasks and evidence.",
                        "stages": [
                          {
                            "id": "scope",
                            "title": "1. Scope",
                            "purpose": "Everything below inherits from this. Getting it wrong makes the rest of the work the wrong work."
                          }
                        ]
                      }
                    }
                  },
                  "stageDetail": {
                    "summary": "stage=firewalls",
                    "value": {
                      "service": { "name": "BrightCert" },
                      "stage": {
                        "id": "firewalls",
                        "title": "2. Boundary firewalls and internet gateways",
                        "purpose": "What sits between your systems and the internet, and who decided each gap in it.",
                        "items": [
                          {
                            "task": "Identify every internet-facing device and cloud boundary",
                            "evidence": "Network diagram or device list"
                          }
                        ]
                      }
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "Unknown stage value.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": { "error": { "type": "string" } }
                },
                "example": {
                  "error": "Unknown stage 'bogus'. Valid values: scope, firewalls, secure-configuration, user-access, malware, updates, final-review"
                }
              }
            }
          }
        }
      }
    }
  }
}