wiki: sync 2026-08-13 00:56 UTC — 2 file(s) updated

This commit is contained in:
2026-08-13 00:56:24 +00:00
parent 0afedae540
commit 4cf6f3fcff
2 changed files with 40 additions and 3 deletions
+5 -3
View File
@@ -1,6 +1,6 @@
# vssa-storm
_Last sync: 2026-08-12 20:51 UTC_
_Last sync: 2026-08-13 00:10 UTC_
## Purpose
@@ -12,7 +12,7 @@ VSSA client investigation and evidence gathering.
- Repository: <https://gitea.lego-cloud.eu/vssa-v1/documentation>
- Repository worktree: `/opt/data/vssa-documentation`
- Published Docusaurus site: <https://pages.apps.lego-cloud.eu/vssa-v1/documentation/>
- Client navigation has first-level **Overview** and an expanded **Registry** group containing 290 ordered client dossiers. System navigation follows the same hierarchy with 421 ordered system dossiers. Contractors are now a separate top-level collection with the same **Overview → Registry** hierarchy and 57 generated contractor/provider dossiers. Systems Dossiers are generated from canonical client system-table rows; the latest validated registry contains 421 unique systems from 626 observations, with conservative alias rules in `data/system-aliases.json` and machine-readable outputs at `/data/systems-registry.json` and `/data/contractors-registry.json`.
- Client navigation has first-level **Overview** and an expanded **Registry** group containing 290 ordered client dossiers. System navigation follows the same hierarchy with 421 ordered system dossiers. Contractors are now a separate top-level collection with the same **Overview → Registry** hierarchy and 58 generated contractor/provider dossiers. Systems Dossiers are generated from canonical client system-table rows; the latest validated registry contains 421 unique systems from 626 observations, with conservative alias rules in `data/system-aliases.json` and machine-readable outputs at `/data/systems-registry.json` and `/data/contractors-registry.json`.
- Each generated Systems Dossier now includes canonical system-level analysis for production cloud/on-premises/hybrid hosting, original delivery kickoff, and latest production release. The source is `data/system-analysis.json`; known values require direct system-level URLs and supporting quotes, while missing evidence remains explicit rather than inferred.
- Overview, Clients, Systems, Contractors, Methodology, and Data now use separate Docusaurus docs-plugin instances and dedicated sidebars. Generated system relationships use reusable React evidence cards, and every generated client/system dossier has a de-duplicated References index. `SYS-*` and `CTR-*` IDs are deterministic internal registry IDs, not public-source identifiers.
- Every generated client system table has a **System dossier** column. Each of the 626 client observations displays its canonical `SYS-*` ID and links directly to one of the 421 internal system dossiers; generation fails if any observation is unlinked.
@@ -31,10 +31,12 @@ VSSA client investigation and evidence gathering.
- CVP IS also has a validated organization-first discovery route: search the exact client at `https://viesiejipirkimai.lt/epps/viewOrganisations.do`, identity-check and open `prepareViewCAOrganisation.do?id=<organizationId>`, then follow **PERŽIŪRĖTI VISUS PASKELBTUS SKELBIMUS** to `viewPublishedNotices.do?authorityId=<authorityId>&orgGroupId=<orgGroupId>`. Both IDs must be extracted from the actual profile link. Notice-type links can be direct PDF downloads; preserve their identifiers/metadata, extract the body, and classify procurement stage before mapping evidence. This route is additional and not assumed complete.
- The job workdir and remote now target `/opt/data/vssa-documentation` and `vssa-v1/documentation`; it must not edit generated Docusaurus output.
- The recurring job explicitly treats a dated official announcement that says a named system started operating/launched/went live as direct production-release evidence at the announcement's stated precision, while distinguishing this from generic webpage metadata. It maintains contractor dossiers as exact client-system-role-evidence relationships and does not conflate development, hosting, support, licensing, or other roles.
- **Latest rotation (2026-08-12 20:07 UTC):** clients 181–190 were reviewed and their check dates advanced. The official National Sports Agency announcement dated `2024-10-02` explicitly says the **Sporto registras** was starting operation, so canonical system `SYS-514B74308F` now records `2024-10-02` as a directly evidenced production release. Original delivery kickoff, production hosting, developer, implementation supplier, and current support remain unknown. CPVA exact client/system searches were noisy or unrelated, and no other defensible new client-system or contractor claims were found. No new CVP IS instructor guidance appeared after the existing organization-first procedure. Commit `7a83f65315e9dd10577371f1492ea862e44490fe` and Actions run `2353` were verified successful, including LEGO Cloud Pages publication; authenticated source readback, rendered system marker/date checks, and the expected public Keycloak `302` passed. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; the registry remains 421 systems, 626 observations, and 57 normalized contractor/provider entities. Next rotation: clients 191–200.
- **Latest rotation (2026-08-13 00:10 UTC):** clients 201–210 were reviewed. The CVP IS organization-first route identity-matched clients 201–209 and exposed profile/notice-list pairs `12830/29932`, `13905/36656`, `2137/2149`, `1522/1525`, `4500/4906`, `2329/2359`, `5766/7188`, `4344/4699`, and `1516/1519`; an exact current organization match was not found for client 210. The NMA list yielded a direct award PDF for **ŽŪPAIS Informacinio portalo palaikymas ir vystymas** (`resourceId=6504564`, `documentId=8110181`, `noticeId=8110157`, procedure `32350071-7198-4af1-a61e-f26a6efd8eba`): UAB „iTree Lietuva“ won a EUR 104,060, 36-month maintenance/development contract signed 2026-05-28. Client 204 and the generated NMA system/contractor dossiers now preserve this bounded role. Exact client/system CPVA searches, reopened official sources, contractor query ladders, and the remaining organization notice lists produced no other defensible system, contractor, production-hosting, delivery-kickoff, or production-release claim. No new CVP IS instructor guidance was available through the runtime's latest accessible channel export. Commit `5cc1b2c8bbf14cc967017a50ca5bb7ee9c3f080c` and Actions run `2363` (job `3339`) were verified successful, including Pages publication, authenticated source readback, generated client/system/contractor markers, and the expected public Keycloak `302`. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; the registry remains 421 systems and 626 observations, while normalized contractor/provider entities increased to 58. Next rotation: clients 211–220.
## Availability continuity
- On 2026-08-13, rotation 201–210 added direct CVP IS award evidence that UAB „iTree Lietuva“ won the NMA ŽŪPAIS Informacinio portalo 36-month maintenance/development contract for EUR 104,060, signed 2026-05-28. The award PDF is `resourceId=6504564`, `documentId=8110181`, `noticeId=8110157`, procedure `32350071-7198-4af1-a61e-f26a6efd8eba`. Validation and the full build passed with 290 clients, 421 systems, 626 observations, and 58 contractor/provider dossiers. Commit `5cc1b2c` was pushed and read back; Actions run `2363`, job `3339`, succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak `302`.
- On 2026-08-12, scheduled rotation 191–200 completed with conservative no-new-claim outcomes. `corepack pnpm validate`, the full production build (290 client, 421 system and 57 contractor routes; 626 observations; 296 raw artifacts), and `git diff --check` passed. Commit `7c1f68f` was pushed, authenticated read back, and published by successful Actions run `2357`; public Pages retained the intended Keycloak `302`. The host did not expose the runner Pages dataset mount, so no direct backend-file readback was available from this runtime.
- On 2026-08-12, commit `d0c828a` added the first-class Contractors collection: top navigation, dedicated Docusaurus plugin/sidebar, **Overview → Registry**, 58 generated contractor/provider dossiers, stable internal `CTR-*` IDs, a machine-readable registry, exact client/system/evidence relationships, and generated contractor sections on system dossiers. INVESTIS now displays ATEA with its bounded evidenced role. The same change recorded **2023-10-02** as INVESTIS's production release because CPVA's dated official announcement explicitly says the system started operating; the 2023-10-03 Inovacijų agentūra announcement is retained as corroboration. Delivery kickoff remains unknown because neither announcement establishes when delivery began. Focused tests, registry validation, the full production build, local browser checks, authenticated Gitea source readback, and Actions run `2351` succeeded; public Pages correctly returns the expected Keycloak `302` for the new routes. Recurring job `88833e00b4a2` and `client-investigator` now preserve this release-date rule and contractor-registry semantics.
- On 2026-08-12, three live organization-first CVP IS trials produced exact, PDF-backed system procurements. (1) Vyriausybės kanceliarija: organization `2076`, `orgGroupId=2088`, 40 notices; a 2025 PPVIS maintenance/improvement tender (`resourceId=3325946`) explicitly names PPVIS, EUR 110,000 excluding VAT, 36 months, and has a later contract-award notice, which must be opened separately before supplier attribution. (2) Inovacijų agentūra: organization `1679`, `orgGroupId=1681`; the IAVV IS creation/support award (`resourceId=16691`) names UAB `DevOcean LT`, EUR 576,250, winner selection 2025-02-27, and contract date 2025-03-21. This maps to a newly evidenced IAVV IS, not INVESTIS; separate AIS, IAVVIS technical-supervision, project/portfolio-platform, and B2Lithuania notices also appeared. (3) CPVA: organization `1253`, `orgGroupId=1254`, 224 notices; a 2026 tender (`resourceId=9090393`) explicitly covers development, maintenance, and warranty services for VSFSVVP IS, an electronic data-exchange system for Internal Security Fund / Border Management and Visa Policy financial support. It proves intended procurement only, not award or supplier. Direct notice endpoints returned valid PDF attachments and extracted text.
- On 2026-08-12, instructor guidance established the CVP IS organization-first route. Live validation confirmed that the organization search exposes exact organization rows; example profile `id=1297` links to published notices with distinct `authorityId=1297` and `orgGroupId=1298`; the notice list exposes type, title, upload/publication dates, language, and status; and a notice-type link returned HTTP 200 `application/pdf` with an attachment filename and stable resource/document/notice identifiers. Browser navigation can abort on this legitimate download. The validated mechanics and PDF/stage safeguards were added to `client-investigator` and recurring job `88833e00b4a2`.