{
  "service": "Aegis IAM (mock)",
  "auth": "X-API-Key header",
  "reviewPeriod": {
    "quarter": "2025-Q3",
    "startDate": "2025-07-01",
    "endDate": "2025-09-30",
    "dueDate": "2025-10-15"
  },
  "endpoints": [
    {
      "method": "GET",
      "path": "/api/v1/accounts",
      "summary": "The privileged-access population for the current review period.",
      "query": {
        "entitlement": "exact match, e.g. DOMAIN_ADMIN",
        "hrStatus": "ACTIVE | LEAVER | CONTRACT_ENDED | NO_HR_RECORD",
        "recertificationStatus": "ON_TIME | LATE | NOT_REVIEWED",
        "systemOwner": "the recorded reviewer, e.g. m.alvarez",
        "limit": "1-486 (default 100)",
        "offset": "row offset, default 0"
      }
    },
    {
      "method": "GET",
      "path": "/api/v1/accounts/{accountId}",
      "summary": "One account, with the same derived assessment block."
    },
    {
      "method": "GET",
      "path": "/api/v1/recertifications",
      "summary": "The review campaign itself: period, due date, reviewers, and completion counted from the population."
    },
    {
      "method": "GET",
      "path": "/api/v1/change-log",
      "summary": "Entitlement revocations actually performed, with the date and the ticket. Optional `since=YYYY-MM-DD`."
    },
    {
      "method": "GET",
      "path": "/api/v1/openapi",
      "summary": "This list, machine-readable. No key required."
    },
    {
      "method": "GET",
      "path": "/health",
      "summary": "Liveness. No key required."
    }
  ]
}