Can we do the Security Stack API RESTfully? (Part 1)

Been thinking about the Security Stack API (A6), wondering if we can do as a RESTful API, something about the URI structuring appeals to me and I think relates well to the many different sections one would need to cover, here's part the first blob:

• /ssapi/compliance/ - returns a list of compliance regimes the provider operates under and their
• /ssapi/compliance/PCI/ - returns a list of sub-elements for the standard, immediate descendants only
• /ssapi/compliance/PCI/1/ - returns a list of sub-elements for the standard, immediate descendants only
• /ssapi/compliance/PCI/1/@all - returns an XML payload with values and freshness for all descendants
• /ssapi/compliance/PCI/1/1/ - returns a list of sub-elements for the standard, immediate descendants only
• /ssapi/compliance/PCI/1/2/1/ - returns a list of sub-elements for the standard, immediate descendants only
• /ssapi/compliance/PCI/1/2/1/a - returns answer and freshness attribute
• /ssapi/compliance/HIPAA/ - returns a list of sub-elements for the standard, immediate descendants only
• /ssapi/compliance/HIPAA/@all - returns an XML payload with values and freshness for all descendants
• /ssapi/compliance/SOX/ - returns a list of sub-elements for the standard, immediate descendants only

Working on layout for policy expression, will share tomorrow.