wiki: sync 2026-08-13 04:59 UTC — 2 file(s) updated

This commit is contained in:
2026-08-13 04:59:21 +00:00
parent 4cf6f3fcff
commit 2a21e5c9d4
2 changed files with 41 additions and 3 deletions
+6 -3
View File
@@ -1,6 +1,6 @@
# vssa-storm
_Last sync: 2026-08-13 00:10 UTC_
_Last sync: 2026-08-13 04:08 UTC_
## Purpose
@@ -12,7 +12,7 @@ VSSA client investigation and evidence gathering.
- Repository: <https://gitea.lego-cloud.eu/vssa-v1/documentation>
- Repository worktree: `/opt/data/vssa-documentation`
- Published Docusaurus site: <https://pages.apps.lego-cloud.eu/vssa-v1/documentation/>
- Client navigation has first-level **Overview** and an expanded **Registry** group containing 290 ordered client dossiers. System navigation follows the same hierarchy with 421 ordered system dossiers. Contractors are now a separate top-level collection with the same **Overview → Registry** hierarchy and 58 generated contractor/provider dossiers. Systems Dossiers are generated from canonical client system-table rows; the latest validated registry contains 421 unique systems from 626 observations, with conservative alias rules in `data/system-aliases.json` and machine-readable outputs at `/data/systems-registry.json` and `/data/contractors-registry.json`.
- Client navigation has first-level **Overview** and an expanded **Registry** group containing 290 ordered client dossiers. System navigation follows the same hierarchy with 421 ordered system dossiers. Contractors are now a separate top-level collection with the same **Overview → Registry** hierarchy and 59 generated contractor/provider dossiers. Systems Dossiers are generated from canonical client system-table rows; the latest validated registry contains 421 unique systems from 626 observations, with conservative alias rules in `data/system-aliases.json` and machine-readable outputs at `/data/systems-registry.json` and `/data/contractors-registry.json`.
- Each generated Systems Dossier now includes canonical system-level analysis for production cloud/on-premises/hybrid hosting, original delivery kickoff, and latest production release. The source is `data/system-analysis.json`; known values require direct system-level URLs and supporting quotes, while missing evidence remains explicit rather than inferred.
- Overview, Clients, Systems, Contractors, Methodology, and Data now use separate Docusaurus docs-plugin instances and dedicated sidebars. Generated system relationships use reusable React evidence cards, and every generated client/system dossier has a de-duplicated References index. `SYS-*` and `CTR-*` IDs are deterministic internal registry IDs, not public-source identifiers.
- Every generated client system table has a **System dossier** column. Each of the 626 client observations displays its canonical `SYS-*` ID and links directly to one of the 421 internal system dossiers; generation fails if any observation is unlinked.
@@ -31,10 +31,13 @@ VSSA client investigation and evidence gathering.
- CVP IS also has a validated organization-first discovery route: search the exact client at `https://viesiejipirkimai.lt/epps/viewOrganisations.do`, identity-check and open `prepareViewCAOrganisation.do?id=<organizationId>`, then follow **PERŽIŪRĖTI VISUS PASKELBTUS SKELBIMUS** to `viewPublishedNotices.do?authorityId=<authorityId>&orgGroupId=<orgGroupId>`. Both IDs must be extracted from the actual profile link. Notice-type links can be direct PDF downloads; preserve their identifiers/metadata, extract the body, and classify procurement stage before mapping evidence. This route is additional and not assumed complete.
- The job workdir and remote now target `/opt/data/vssa-documentation` and `vssa-v1/documentation`; it must not edit generated Docusaurus output.
- The recurring job explicitly treats a dated official announcement that says a named system started operating/launched/went live as direct production-release evidence at the announcement's stated precision, while distinguishing this from generic webpage metadata. It maintains contractor dossiers as exact client-system-role-evidence relationships and does not conflate development, hosting, support, licensing, or other roles.
- **Latest rotation (2026-08-13 00:10 UTC):** clients 201–210 were reviewed. The CVP IS organization-first route identity-matched clients 201–209 and exposed profile/notice-list pairs `12830/29932`, `13905/36656`, `2137/2149`, `1522/1525`, `4500/4906`, `2329/2359`, `5766/7188`, `4344/4699`, and `1516/1519`; an exact current organization match was not found for client 210. The NMA list yielded a direct award PDF for **ŽŪPAIS Informacinio portalo palaikymas ir vystymas** (`resourceId=6504564`, `documentId=8110181`, `noticeId=8110157`, procedure `32350071-7198-4af1-a61e-f26a6efd8eba`): UAB „iTree Lietuva“ won a EUR 104,060, 36-month maintenance/development contract signed 2026-05-28. Client 204 and the generated NMA system/contractor dossiers now preserve this bounded role. Exact client/system CPVA searches, reopened official sources, contractor query ladders, and the remaining organization notice lists produced no other defensible system, contractor, production-hosting, delivery-kickoff, or production-release claim. No new CVP IS instructor guidance was available through the runtime's latest accessible channel export. Commit `5cc1b2c8bbf14cc967017a50ca5bb7ee9c3f080c` and Actions run `2363` (job `3339`) were verified successful, including Pages publication, authenticated source readback, generated client/system/contractor markers, and the expected public Keycloak `302`. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; the registry remains 421 systems and 626 observations, while normalized contractor/provider entities increased to 58. Next rotation: clients 211–220.
- **Latest rotation (2026-08-13 04:08 UTC):** clients 221–230 were reviewed. The CVP IS organization-first route identity-matched all ten exact legal names. Direct award PDFs added two high-confidence findings: (1) Valstybinė duomenų apsaugos inspekcija awarded UAB „Lexita“ both 2025 project lots—new information-system creation for EUR 265,000 and statistics-tool creation for EUR 53,000—under contracts signed 2025-07-31; (2) Viešųjų pirkimų tarnyba awarded MB „Nordic plum“ the CVP IS subsystem maintenance/development contract for EUR 287,200, signed 2025-11-30. The records explicitly retain acceptance, production release, and hosting as unknown. Exact CPVA searches and the other identity-checked organization notice lists produced no defensible new claim. No new CVP IS instructor guidance was present in the latest accessible channel export. Commit `1980408a29173679122dd9b34e2c9ce1ad75749e` was pushed and authenticated source readback passed; Actions run `2366`, job `3342`, succeeded including Pages publication. Public Pages returned the expected Keycloak `302`; backend verification was unavailable because this runtime has no resolvable Kubernetes control-plane host. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; the registry now contains 422 systems, 627 observations, and 61 normalized contractor/provider entities. Next rotation: clients 231–240.
- **Previous rotation (2026-08-13 02:14 UTC):** clients 211–220 were reviewed. The CVP IS organization-first route identity-matched clients 211–214 and 216–220; no exact organization result was found for 215. The direct award PDFs established that UAB „Asseco Lietuva“ received three bounded E-kinas contracts from the Lithuanian Central State Archives: modernization/deployment signed 2025-02-10 for EUR 93,800, plus maintenance/development signed 2025-05-13 and 2026-03-31 for EUR 165,000 each. A separate award established UAB „Asseco Lietuva“ as the Lithuanian Chief Archivist’s Office EAIS modernization contractor under a EUR 660,000 contract signed 2025-02-24 for the E-kultūros platform project. Client 213 and 219 dossiers now cite the exact CVP IS award PDFs and explicitly retain production hosting, acceptance, and go-live dates as unknown. Other exact client/system CPVA searches, official sources, and procurement lists produced no defensible additional system, contractor, production-hosting, delivery-kickoff, or production-release claim. No new CVP IS instructor guidance was available through the runtime's latest accessible channel export. Commits `0220ccfc71f97950e61457eb636eee8ac3d8a6a1` and `f5574bc01fb7aba20b9c6f77cf3a8e524f177460` were pushed; Actions runs `2364` and `2365` succeeded, including Pages publication.
## Availability continuity
- On 2026-08-13, rotation 221–230 added direct CVP IS award evidence that UAB „Lexita“ received VDAI's new information-system and statistics-tool creation contracts (EUR 265,000 and EUR 53,000; signed 2025-07-31), and MB „Nordic plum“ received VPT's CVP IS subsystem maintenance/development contract (EUR 287,200; signed 2025-11-30). Validation and the production build passed with 290 clients, 422 systems, 627 observations, and 61 contractor/provider dossiers. Commit `1980408` was pushed and read back; Actions run `2366`, job `3342`, succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak `302`.
- On 2026-08-13, rotation 211–220 added direct CVP IS award evidence for three E-kinas contracts awarded to UAB „Asseco Lietuva“ (EUR 93,800 modernization/deployment and two EUR 165,000 maintenance/development contracts) and a EUR 660,000 EAIS modernization contract awarded to the same company. Validation and the production build passed with 290 clients, 421 systems, 626 observations, and 59 contractor/provider dossiers. Commits `0220ccf` and `f5574bc` were pushed and read back; Actions runs `2364` and `2365` succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak `302`.
- On 2026-08-13, rotation 201–210 added direct CVP IS award evidence that UAB „iTree Lietuva“ won the NMA ŽŪPAIS Informacinio portalo 36-month maintenance/development contract for EUR 104,060, signed 2026-05-28. The award PDF is `resourceId=6504564`, `documentId=8110181`, `noticeId=8110157`, procedure `32350071-7198-4af1-a61e-f26a6efd8eba`. Validation and the full build passed with 290 clients, 421 systems, 626 observations, and 58 contractor/provider dossiers. Commit `5cc1b2c` was pushed and read back; Actions run `2363`, job `3339`, succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak `302`.
- On 2026-08-12, scheduled rotation 191–200 completed with conservative no-new-claim outcomes. `corepack pnpm validate`, the full production build (290 client, 421 system and 57 contractor routes; 626 observations; 296 raw artifacts), and `git diff --check` passed. Commit `7c1f68f` was pushed, authenticated read back, and published by successful Actions run `2357`; public Pages retained the intended Keycloak `302`. The host did not expose the runner Pages dataset mount, so no direct backend-file readback was available from this runtime.
- On 2026-08-12, commit `d0c828a` added the first-class Contractors collection: top navigation, dedicated Docusaurus plugin/sidebar, **Overview → Registry**, 58 generated contractor/provider dossiers, stable internal `CTR-*` IDs, a machine-readable registry, exact client/system/evidence relationships, and generated contractor sections on system dossiers. INVESTIS now displays ATEA with its bounded evidenced role. The same change recorded **2023-10-02** as INVESTIS's production release because CPVA's dated official announcement explicitly says the system started operating; the 2023-10-03 Inovacijų agentūra announcement is retained as corroboration. Delivery kickoff remains unknown because neither announcement establishes when delivery began. Focused tests, registry validation, the full production build, local browser checks, authenticated Gitea source readback, and Actions run `2351` succeeded; public Pages correctly returns the expected Keycloak `302` for the new routes. Recurring job `88833e00b4a2` and `client-investigator` now preserve this release-date rule and contractor-registry semantics.