openapi: 3.1.0
info:
  title: Tenantial Public Review Pack Story Routes
  version: 0.1.0
  description: >
    Static public website route contract for Spec 408. These routes return
    HTML pages only and do not expose platform runtime APIs, tenant data,
    review workspace state, or export functionality.
servers:
  - url: http://127.0.0.1:4321
    description: Local website preview using WEBSITE_PORT default
paths:
  /platform/review-packs:
    get:
      summary: German public review-pack and evidence story page
      operationId: getGermanReviewPackStory
      tags:
        - Public Website
      responses:
        "200":
          description: Static HTML review-story page
          content:
            text/html:
              schema:
                type: string
              examples:
                page:
                  summary: Required visible content
                  value: "Von Policy-Drift zu pruefbaren Entscheidungen. Evidence, Findings und Accepted Risks statt Screenshot-Governance."
        "404":
          description: Route not configured
      x-content-requirements:
        locale: de
        mustInclude:
          - Review Pack hero framing in German buyer language
          - Problem section explaining why technical truth alone is insufficient for governance, review preparation, and audit conversations
          - Governance workflow from policy state to review-pack preparation
          - Review Pack anatomy with executive summary, Evidence basis, Findings, Accepted Risks, Decision Summary, status, and export context
          - Evidence section explaining Evidence beyond screenshots
          - Decision Summary section covering status, reason, impact, Evidence, next action, and review context
          - Customer-safe versus internal detail boundary
          - MSP and Enterprise IT value framing
          - Differentiation from raw exports, screenshot collections, and admin-center snapshots
          - Trust teaser linking to the existing trust route
          - Final CTA with real destinations only
          - Real CTA destinations only
        mustNotInclude:
          - href="#"
          - customer-safe consumption productization
          - route-owned
          - artifact taxonomy
          - source family
          - capability registry
          - repo-real foundation
          - lueckenlose Evidence
          - lueckenlose Evidenz
          - gerichtsfeste Nachweise
          - immutable evidence
          - immutable review packs
          - complete audit trail
          - guarantees audit success
          - macht Sie compliant
          - DSGVO-konform
          - ISO-zertifiziert
          - real-time drift
          - automatic remediation
          - automatic restore
          - Google supported
          - AWS supported
  /en/platform/review-packs:
    get:
      summary: English public review-pack and evidence story page
      operationId: getEnglishReviewPackStory
      tags:
        - Public Website
      responses:
        "200":
          description: Static HTML review-story page
          content:
            text/html:
              schema:
                type: string
              examples:
                page:
                  summary: Required visible content
                  value: "Evidence, reviews, and decisions instead of screenshots. Review-ready governance context for Microsoft 365 buyers."
        "404":
          description: Route not configured
      x-content-requirements:
        locale: en
        mustInclude:
          - Review Pack hero framing in buyer language
          - Problem section explaining why technical truth alone is insufficient for governance, review preparation, and audit conversations
          - Governance workflow from policy state to review-pack preparation
          - Review Pack anatomy with executive summary, Evidence basis, Findings, Accepted Risks, Decision Summary, status, and export context
          - Evidence section explaining Evidence beyond screenshots
          - Decision Summary section covering status, reason, impact, Evidence, next action, and review context
          - Customer-safe versus internal detail boundary
          - MSP and Enterprise IT value framing
          - Differentiation from raw exports, screenshot collections, and admin-center snapshots
          - Trust teaser linking to the existing trust route
          - Final CTA with real destinations only
          - Real CTA destinations only
        mustNotInclude:
          - href="#"
          - customer-safe consumption productization
          - route-owned
          - artifact taxonomy
          - source family
          - capability registry
          - repo-real foundation
          - immutable evidence
          - immutable review packs
          - complete audit trail
          - guarantees audit success
          - DSGVO-konform
          - ISO-zertifiziert
          - real-time drift
          - automatic remediation
          - automatic restore
          - Google supported
          - AWS supported
components:
  schemas:
    ReviewPackCard:
      type: object
      required:
        - key
        - title
        - content
        - availabilityTone
      properties:
        key:
          type: string
          enum:
            - executive-summary
            - evidence-basis
            - findings
            - accepted-risks
            - decision-summary
            - review-pack-status
            - download-export-context
        title:
          type: string
        content:
          type: string
        availabilityTone:
          type: string
          enum:
            - hard-available
            - soft-availability
    EvidenceCard:
      type: object
      required:
        - key
        - title
        - content
      properties:
        key:
          type: string
          enum:
            - policy-evidence
            - change-evidence
            - finding-evidence
            - recovery-evidence
            - review-evidence
        title:
          type: string
        content:
          type: string
    DecisionFacetCard:
      type: object
      required:
        - key
        - title
        - content
      properties:
        key:
          type: string
          enum:
            - status
            - reason
            - impact
            - evidence
            - next-action
            - review-context
        title:
          type: string
        content:
          type: string