CipherShift365 — Questionnaire Engine

<ProjectReference Include="..\..\Core\CipherShift365.Core.Analysis\CipherShift365.Core.Analysis.csproj" />

# Create a console app referencing the analysis engine
dotnet new console -n QuestionnaireDemo
cd QuestionnaireDemo
dotnet add reference ..\CipherShift365.Core.Analysis\CipherShift365.Core.Analysis.csproj

using CipherShift365.Core.Analysis;
using CipherShift365.Core.Runtime;

var service = new AssessmentService();

// List available templates
foreach (var t in service.GetTemplates())
    Console.WriteLine($"{t.Id} v{t.Version}: {t.Title} ({t.Sections.Sum(s => s.Questions.Count)} questions)");

// Submit a response
var response = service.Submit("pqc-readiness-v1", "Alice (Security Architect)",
    new[]
    {
        new QuestionAnswer("q1.1", "Yes, fully applicable", 15),
        new QuestionAnswer("q1.2", "CNSA 2.0 compliance mandate", 10),
        new QuestionAnswer("q1.3", "2030 (key establishment deadline)", 10),
        // ... answers for all 18 questions
    }.AsReadOnly());

// Score
var score = service.Score(response);
Console.WriteLine($"Readiness: {score.ReadinessPercent:F1}%");
Console.WriteLine($"Summary: {score.Summary}");
foreach (var rec in score.Recommendations ?? Array.Empty<string>())
    Console.WriteLine($"  → {rec}");

TOKEN=$(curl -s -X POST http://localhost:5000/v1/auth/token \
  -H "Content-Type: application/json" \
  -d '{"clientId":"admin-001","secret":"any"}' | jq -r .token)

# List templates
curl -s http://localhost:5000/v1/questionnaire/templates \
  -H "Authorization: Bearer $TOKEN" | jq .

# Get full template
curl -s http://localhost:5000/v1/questionnaire/templates/pqc-readiness-v1 \
  -H "Authorization: Bearer $TOKEN" | jq .

# Submit
curl -s -X POST http://localhost:5000/v1/questionnaire/submit \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "templateId": "pqc-readiness-v1",
    "answers": [
      {"questionId":"q1.1","value":"Yes, fully applicable","score":15},
      {"questionId":"q1.2","value":"CNSA 2.0 compliance mandate","score":10}
    ]
  }' | jq .

idx = index of selected option (0-based)
total = total number of options
score = max(1, (1 - idx/total) * MaxScore)

1. GET /v1/questionnaire/templates  →  Browse available assessments
2. GET /v1/questionnaire/templates/{id}  →  View full template with questions
3. Fill out answers (portal UI or programmatic)
4. POST /v1/questionnaire/submit  →  Submit response, receive score
5. GET /v1/questionnaire/responses  →  List prior responses
6. GET /v1/questionnaire/responses/{id}  →  View detailed response with score

public sealed record AssessmentTemplate(
    string Id,                              // e.g., "pqc-readiness-v1"
    string Title,                           // e.g., "PQC Readiness Assessment"
    int Version,                            // e.g., 1
    string Description,
    IReadOnlyList<TemplateSection> Sections,
    DateTimeOffset CreatedAt);

public sealed record TemplateSection(
    string Id,                              // e.g., "s1"
    string Title,                           // e.g., "Organizational & Regulatory Context"
    string? Description,
    IReadOnlyList<TemplateQuestion> Questions);

public sealed record TemplateQuestion(
    string Id,                              // e.g., "q1.1"
    string Text,                            // Full question text
    QuestionType Type,                      // SingleChoice | MultiChoice | FreeText | Numeric
    IReadOnlyList<string>? Options,         // For SingleChoice/MultiChoice
    int MaxScore,                           // Points achievable for this question
    string? WeightCategory);                // e.g., "Regulatory", "Estate", for grouping

public enum QuestionType { SingleChoice, MultiChoice, FreeText, Numeric }

public sealed record AssessmentResponse(
    string Id,                              // Auto-generated (12-char hex)
    string TemplateId,
    int TemplateVersion,                    // Version of template when submitted
    string Actor,                           // JWT Name claim
    DateTimeOffset SubmittedAt,
    IReadOnlyList<QuestionAnswer> Answers);

public sealed record QuestionAnswer(
    string QuestionId,                      // Must match a TemplateQuestion.Id
    string? Value,                          // Selected option text or free-text
    int Score);                             // 1 to MaxScore

public sealed record AssessmentScore(
    int TotalScore,                         // Sum of all answer scores
    int MaxPossibleScore,                   // Sum of all question MaxScores
    double ReadinessPercent,                // TotalScore / MaxPossibleScore * 100
    IReadOnlyDictionary<string, int> SectionScores,  // Section ID → section total
    string Summary,                         // Readiness band text
    IReadOnlyList<string>? Recommendations); // Generated recommendations

public AssessmentScore Score(AssessmentResponse response)
{
    var template = GetTemplate(response.TemplateId);
    var questionMap = template.Sections
        .SelectMany(s => s.Questions)
        .ToDictionary(q => q.Id);

    var sectionScores = new Dictionary<string, int>();
    var recommendations = new List<string>();
    int totalScore = 0, maxScore = 0;

    foreach (var section in template.Sections)
    {
        int sectionScore = 0, sectionMax = 0;
        foreach (var q in section.Questions)
        {
            var answer = response.Answers.FirstOrDefault(a => a.QuestionId == q.Id);
            sectionScore += answer?.Score ?? 0;   // Unanswered = 0
            sectionMax += q.MaxScore;
            maxScore += q.MaxScore;
        }
        sectionScores[section.Id] = sectionScore;
        totalScore += sectionScore;

        // Recommendation thresholds
        var pct = sectionMax > 0 ? (double)sectionScore / sectionMax : 0;
        if (pct < 0.4)
            recommendations.Add($"{section.Title}: needs significant improvement ({pct:P0})");
        else if (pct < 0.7)
            recommendations.Add($"{section.Title}: moderate — further action recommended ({pct:P0})");
    }

    var readiness = maxScore > 0 ? (double)totalScore / maxScore * 100 : 0;
    var summary = readiness switch
    {
        >= 85 => "Advanced readiness — organization is well-prepared for PQC migration.",
        >= 60 => "Moderate readiness — key gaps identified; prioritized plan recommended.",
        >= 30 => "Early readiness — significant gaps; comprehensive migration plan required.",
        _     => "Critical — immediate action required across multiple domains.",
    };

    return new AssessmentScore(totalScore, maxScore, Math.Round(readiness, 1),
        sectionScores.AsReadOnly(), summary,
        recommendations.Count > 0 ? recommendations.AsReadOnly() : null);
}

var service = new AssessmentService();

// This would typically be called in Program.cs or a database seeder
var customTemplate = new AssessmentTemplate(
    "financial-compliance-v1",
    "Financial Services PQC Compliance",
    1,
    "Assesses PQC readiness for PCI DSS and SOX regulated environments.",
    new[]
    {
        new TemplateSection("s1", "PCI DSS Cryptographic Requirements",
            "Review of payment card data encryption.",
            new[]
            {
                new TemplateQuestion("q1.1", "Is cardholder data encrypted at rest with quantum-resistant algorithms?",
                    QuestionType.SingleChoice,
                    new[] { "Yes — PQC algorithms used", "Yes — AES-256 only", "No" }, 10, "PCI"),
            }.AsReadOnly()),
        // ... more sections
    }.AsReadOnly(),
    DateTimeOffset.UtcNow);

// For the AssessmentService to pick it up, add to the internal _templates list.
// The current implementation only seeds the default template.
// To make templates extensible:
// 1. Add a public RegisterTemplate(AssessmentTemplate template) method to AssessmentService
// 2. Call it in Program.cs before any request

var answers = new[]
{
    // Section 1: Regulatory (35 pts max)
    new QuestionAnswer("q1.1", "Yes, fully applicable", 15),
    new QuestionAnswer("q1.2", "CNSA 2.0 compliance mandate", 10),
    new QuestionAnswer("q1.3", "2030 (key establishment deadline)", 10),

    // Section 2: Estate (20 pts max)
    new QuestionAnswer("q2.1", "51-200", 5),
    new QuestionAnswer("q2.2", "51-75%", 5),
    new QuestionAnswer("q2.3", ".NET 6, .NET 7/8 deployed", 3),

    // Section 3: Inventory (35 pts max)
    new QuestionAnswer("q3.1", "Partially — some assets identified", 10),
    new QuestionAnswer("q3.2", "Most identified", 7),
    new QuestionAnswer("q3.3", "Evaluating/trialing CipherShift365", 5),

    // Section 4: Data / HNDL (35 pts max)
    new QuestionAnswer("q4.1", "10-25 years", 9),
    new QuestionAnswer("q4.2", "Possibly — under evaluation", 8),
    new QuestionAnswer("q4.3", "PII, Financial, IP data requires protection", 3),

    // Section 5: Migration (30 pts max)
    new QuestionAnswer("q5.1", "Partially funded", 9),
    new QuestionAnswer("q5.2", "2029-2030", 7),
    new QuestionAnswer("q5.3", "Under evaluation with CipherShift365", 5),

    // Section 6: Governance (25 pts max)
    new QuestionAnswer("q6.1", "Yes — Director/VP level", 7),
    new QuestionAnswer("q6.2", "Quarterly", 6),
    new QuestionAnswer("q6.3", "Draft in progress", 5),
}.AsReadOnly();

var response = service.Submit("pqc-readiness-v1", "Alice", answers);
var score = service.Score(response);
// TotalScore: ~142, MaxScore: 180
// ReadinessPercent: ~78.9% → "Moderate readiness"
// Recommendations: ["Estate Profile: moderate — further action recommended (55%)", ...]

$token = (Invoke-RestMethod -Uri "http://localhost:5000/v1/auth/token" -Method Post -Body '{"clientId":"admin-001","secret":"any"}' -ContentType "application/json").token
headers = @{ Authorization = "Bearertoken" }

# Get all responses
$responses = Invoke-RestMethod -Uri "http://localhost:5000/v1/questionnaire/responses" -Headers$headers
foreach ($r in$responses) {
    Write-Host "$($r.actor): $($r.readinessPercent)% — $($r.summary)"
}

# Get detailed response
$detail = Invoke-RestMethod -Uri "http://localhost:5000/v1/questionnaire/responses/$($responses[0].id)" -Headers$headers
foreach ($a in$detail.answers) {
    Write-Host "  $($a.questionId): $($a.value) ($($a.score) pts)"
}

var resp1 = service.GetResponse("abc123");
var resp2 = service.GetResponse("def456");

var score1 = service.Score(resp1!);
var score2 = service.Score(resp2!);

Console.WriteLine($"Response 1 ({resp1!.SubmittedAt:yyyy-MM-dd}): {score1.ReadinessPercent:F1}%");
Console.WriteLine($"Response 2 ({resp2!.SubmittedAt:yyyy-MM-dd}): {score2.ReadinessPercent:F1}%");
Console.WriteLine($"Delta: {score2.ReadinessPercent - score1.ReadinessPercent:+#.#;-#.#}%");

// Section-level comparison
foreach (var (sectionId, sectionScore1) in score1.SectionScores)
{
    var sectionScore2 = score2.SectionScores[sectionId];
    var delta = sectionScore2 - sectionScore1;
    Console.WriteLine($"  {sectionId}: {sectionScore1} → {sectionScore2} ({delta:+#;-#})");
}