Run the POPIA compliance questionnaire from a JSON answers file.

answers is the path to a JSON file mapping item ids to "yes" | "no" | "partial"; out optionally overrides where the results JSON is written.

Generate POPIA compliance documents.

docs selects which documents to generate (default all); out is the output directory (default: the gavaza data dir).

Log a breach in the register and print the 72-hour checklist.

description is required (what happened). date (ISO format, defaults to today), categories of personal information involved, risk assessment, and status are optional.

List all breaches logged in the register.

Render the POPIA assessment report as JSON (default), Markdown or HTML.

The JSON output of the CLI is passed through untouched.

List the eight POPIA conditions and their compliance checklists.

List the additional POPIA sections (special information, children, cross-border, automated decisions, direct marketing, DSR rights).

slug optionally prints only one section.

Print the POPIA to GDPR mapping table.

Log a data subject request with a 30-day response deadline.

right is one of access, correction, objection, consent_withdrawal.

List data subject requests, optionally filtered by status.

Update the status of a data subject request.

new_status is one of open, in_progress, completed, rejected.

Attach an evidence file to a checklist item (hashed, local copy).

List recorded evidence, optionally filtered by item id.

Remove an evidence entry and its copied file.

Add a typed node to the knowledge graph.

node_id is the unique id, node_type the node type (e.g. Person, Company, Asset), props optional key/value properties written as --prop k=v pairs, store an optional store file.

Add a typed edge between two nodes.

source/target are node ids, edge_type the relationship type (e.g. owns, works_at), props optional key/value properties, store an optional store file.

Find nodes in the knowledge graph.

node_type filters by node type, where filters by property as k=v (e.g. status=critical), store an optional store file.

List the direct neighbors (nodes and edges) of node_id.

Find the shortest path between two node ids in the graph.

Full-text search over the graph's nodes.

term is matched against node ids, types, and property values. Results come back ranked by relevance.

Print the mutation timeline (every recorded change, newest last).

Reverse the mutation with timeline sequence number seq.

Print the active typed schema of the graph as JSON.

Import local Xavani home data (memories and sessions) into the graph.

The import is read-only and sync-only; nothing leaves the machine.

Print knowledge graph statistics (node/edge counts, types).

Run a web security audit against url.

The target must be authorized first (see mhangani_authorize) or the CLI refuses the audit. allow_private permits auditing private/internal addresses (off by default as a safety guard), timeout overrides the per-check timeout in seconds, rate_delay spaces HTTP requests, respect_robots refuses paths that robots.txt disallows.

Record explicit authorization for a target host.

Run this before auditing a host for the first time.

List all recorded authorizations.

Remove the authorization for a target host.

Render the last audit as JSON (default), Markdown, HTML, or exec.

The JSON output of the CLI is passed through untouched.

List previous audits stored in ~/.mhangani (newest first).

Snapshot the latest audit as the posture baseline.

Print the stored posture baseline.

Compare the latest audit with the stored baseline.

Show how the posture score moved across the audit history.

Print the OWASP-aligned check catalogue.

Delete all stored audits and history in ~/.mhangani.