Get the full record for one ISM control by its identifier (e.g. ISM-1781).

Full-text search over ISM control descriptions and topics. Returns up to limit matches ranked by relevance.

List controls that apply at a given classification level. Allowed values: NC, OS, P, S, TS.

List all distinct topic strings present in the ISM.

List controls under a specific topic (exact match, use ism_list_topics to enumerate).

Report database statistics: total controls, ISM revision metadata, source paths.

List the distinct ISM Section values, the vocabulary for the tags filter on ism_applicable.

Return the classification enum (canonical abbreviations and friendly aliases).

Return the Essential Eight maturity levels.

Rank ISM controls relevant to a free-text description of planned or current work.

Uses hybrid retrieval (semantic embeddings + FTS5 BM25) fused with Reciprocal Rank Fusion. Optional filters: classification (NC|OS|P|S|TS or OFFICIAL|...|TOP_SECRET), maturity (ML1|ML2|ML3, Essential Eight only: only ~126 of 1081 controls carry a maturity rating, so passing maturity drops every other control; leave it unset unless scoping to the Essential Eight), tags (validated against ism_list_sections), paths (repo paths whose tokens expand the lexical query). score in each result is a normalised RRF score in [0.0, 1.0], not a probability.

Read the project's coverage manifest. Returns scope, summary counts, and curated entries.

Walks up from cwd if project_path is omitted. status_filter narrows the controls map to a single status (covered|partial|not-applicable|deferred); summary is unfiltered.

Create or update one entry in the coverage manifest.

Validates identifier against the ISM DB, validates status enum, validates that every attachment path resolves on disk and that every url and attachment carries a description. last_reviewed defaults to today. Writes are atomic.

Return outstanding in-scope controls (uncurated, partial, deferred).

If work is supplied, runs ism_applicable with the project's scope as filters and intersects with the manifest to return work-relevant gaps ranked by score. Without work, returns the full outstanding set ordered uncurated > partial > deferred.