10 KiB
10 KiB
🧠 Knowledge Wiki — Brain Summary
Last updated: 2026-08-12 12:48 UTC
Workstreams & Status
| # | Workstream | Open Items | Priority |
|---|---|---|---|
| 🔵 | VSSA — DPVP | 15 active, 1 opportunity, 1 waiting | Apptio AWS connection, Phase 2 opportunity, multi-cloud organization scanning, mandatory staging approvals, Atea/TFE OIDC role assumption |
| 🟡 | VSSA — Enterprise Architect | 4 active | Scope decision, Gytis outreach, Atea & IBM institution engagement, Government Developer Portal |
| 🟢 | Cognitive Architect | 7 active (1 ASAP) | IBMid cert update; Oleg follow-up; ArchiMate investigation; Texture/Jenny integration follow-up; cogarch backlog |
| 🟣 | SAP Delivery Powered By AI | 1 active | Michael Martine material review |
| 🏅 | Distinguished Engineer | 3 active | Elizabeth docs + summary; FutureNow/Baltic AI/client-relations upskilling with Jurgis |
Total open: 32 items | Completed: 5 (env vars deployed; CA-01, CA-03, CA-04, and CA-B01 completed)
Atea Cooperation
#atea-stormis the continuity ledger for Atea-related contracts, opportunities, audits, and RFPs.- Current tracked workstreams: VSSA AWS contract; VSSA DPVP contract and Phase 2 opportunity; Valstybės duomenų agentūra AWS portal audit; Lietuvos Geležinkeliai RFP; and two early Atea & IBM items (the user-provided title “Let's go to institutions” and a Government Developer Portal). Details for the two Atea & IBM items are not yet specified.
- DPVP Phase 2 discussion scope covers the portal, backend execution migration, VSSA on-premises onboarding, complex hybrid services, and organization scanning across AWS, Azure, and GCP. Ownership, prioritisation, estimates, dependencies, dates, scan baselines, and commercial route remain unconfirmed.
- VSSA AWS: an AWS Well-Architected Framework review has been proposed, not approved; workload/account scope, authorization, access, schedule, and remediation ownership remain open.
- DPVP follow-up: check with Atea about role assumption for the TFE OIDC setup; the intended role/account and implementation details are not yet recorded.
- The portal audit is an opportunity only; active testing requires explicit written authorization and agreed scope.
- A consolidated executive summary was requested on 2026-07-29 and is maintained in
wiki/channels/1531661088209371198.md.
VSSA Client Investigation
- Current delivery (2026-08-12): repository
vssa-v1/documentationpublishes the Keycloak-protected VSSA - Clients & Systems Docusaurus site. It contains 290 client dossiers, dedicated Overview/Registry navigation, native local search, and a conservatively resolved registry of 420 systems from 622 evidence observations. Continuous-research job88833e00b4a2runs every two hours; latest coverage is 79 researched, 193 partial, 18 no-public-evidence, and 0 pending, with clients 171–180 next. - Content organization (confirmed 2026-08-12): after Lego requested an immediate research-led overall-page improvement cycle, commit
1542674reorganized the portal around researched user tasks. Navigation is Overview, Clients, Systems, Methodology, and Data; deployment was validated by successful Actions run2335and representative HTTP-200 backend/browser checks. - Evidence/navigation requirements (confirmed 2026-08-12): Overview, Clients, Systems, Methodology, and Data have dedicated sidebars; Clients and Systems each expose Overview plus an expanded Registry. Internally generated
SYS-*identifiers are documented, all client/system dossiers have References indexes, relationship evidence uses reusable cards, and every client system observation links to its canonical system dossier. - Procurement research (confirmed directive, 2026-08-12): Discord user
476287310627864587is the designated instructor for the CVP IS portal. Job88833e00b4a2must validate and retain taught procedures, map supported procurement records to exact clients/systems, and keep RFI/RFP/specification/bid stages distinct from award, implementation, production use, hosting, and completion.
Key People
- Lego (root_at_skic) — Owner, Enterprise Architect
- MartynasP (w4rl0ck_21) — Hermes migration lead
- Jerry — TrueNAS admin
- Julius Sulcas — DPVP, was on time off
- Rimvydas — Architect, reports to Dimitrian via Edvinas
- Gytis Račiukaitis — E-Gov Gateway contact
- Luis Diego Raga — Pentest senior tester (Sep 1–28)
- Oleg — Cognitive Architect stakeholder
- Andrius — Built cogarch skill
- Elizabeth — Distinguished Engineer track
- Jurgis — FutureNow, Baltic AI, client-relations, and broader upskilling contact
- Jenny — Mentioned Texture integration and other Cognitive Architect items; exact items and role still need clarification
- Michael Martine — SAP material contact
- Arunas Saltis — DNS naming convention (internal hosting)
Pending Reminders
- Follow up with Arunas Saltis — DNS naming convention (internal hosting) — added 2026-07-14
Infrastructure
- TrueNAS SCALE 26.0.0-BETA.2 at lego-cloud.eu ✅
- Gitea: gitea.lego-cloud.eu (org: home-v1) ✅
- General Gitea repository skill: ✅
gitea-repository-operations— reusable API + SSH workflow for any repo; full wiki runbook atwiki/infrastructure/gitea-repository-operations.md - Gitea API credential (confirmed 2026-08-02): use Bitwarden-provided
HL_V1_GITEA_ACCESS_TOKENforgitea.lego-cloud.eu; never useGITHUB_TOKENfor that instance or copy the Gitea token into/opt/data/.env. Bitwarden keys are exported without aliases and gateway restart is required after key changes. - Gitea recovery (confirmed 2026-08-11): Gitea
1.27.0crashed all SSH/Smart-HTTP Git-serving processes despite healthy web/API; upgrade to1.27.1restored API and both Git transports. The queued VSSA commit6fc42abwas pushed and remotely verified. - Gitea Pages pattern (verified 2026-08-11): Actions runners build repositories and publish to
/gondor-v1-gitea-pages/<organization>/<repository>/, exposed athttps://pages.apps.lego-cloud.eu/<organization>/<repository>/. The Pages dataset must be allowed bycontainer.valid_volumesand mounted into job containers.skic-v1-playground/documentationrun 2326 and the live site were verified. - Actions Docker (verified 2026-08-11): use the runner-mounted
/var/run/docker.sockdirectly (client29.6.2-1, Engine29.0.4). DinD is unnecessary and privileged DinD is not currently supported by this runner. - Gondor v1 (2026-08-02): Hermes SSH access as
legois verified to Osgiliath 000 and both Minas Tirith workers; use thegondor-v1-nodesskill. Open ingress incident: Argo CD's hostPort 80/443ingress-nginxconflicts with Osgiliath's system Nginx; repair throughhome-v1/gondor-v1.git, not a transient live patch. - Hermes outage (2026-08-04–11): confirmed Codex quota exhaustion first blocked model responses while Discord/cron remained alive; a separate likely host/container-runtime failure then stopped all gateway, scheduler, log, and health progress after 2026-08-04 14:00:42 UTC. Physical restart at 2026-08-11 00:11:40 restored service without Hermes repair. Exact host-level trigger remains UNKNOWN because previous-boot TrueNAS/kernel/ZFS/runtime/hardware telemetry is unavailable inside the container.
- world-v1/network-v1: ✅ global Internet address book; IP-level mapping now separates registry holder, route origin, operator, and service. Initial records:
0.0.0.0and1.1.1.1; wiki page atwiki/infrastructure/network-v1.md - Keycloak: keycloak.lego-cloud.eu ✅
- Hermes Dashboard: jarvis-jr-v1.lego-cloud.eu ✅
- STT Whisper: 192.168.1.218:39000 🔲
- Piper TTS: 192.168.1.218:39001 🔲
Hermes Migration
- Status: ✅ Live, cron active, backlog ownership officially handed to Hermes role (2026-07-16)
- UPGRADED: Hermes is now sole agent on SKIC Discord server (2026-07-17 07:44 UTC, confirmed by Lego)
- Hermes role ID:
1527260007307935776| Discord permissions: Administrator ✅ - morning-standup cron ✅ first successful fire: 2026-07-17 05:01 UTC; enhanced 2026-07-27 to include drawio-desktop#2499 monitoring (Lego directive: merge into standup, not separate job)
- 🆕 Lego directive (2026-07-27 10:57 UTC): start building a dedicated skill for Hermes itself
- Backlog files:
wiki/vssa-dpvp/action-plan.md,wiki/cognitive-architect/action-plan.md - MartynasP model-access documentation: ⏳ still pending
- Gitea wiki sync ✅ — pushing to skic-v1-playground/knowledge-wiki on every run (started 2026-07-17 09:30 UTC)
- ✅ Gitea push restored — after Lego requested another access check at 11:08 UTC, SSH access to
origin/mainwas verified at 15:08 UTC. Remote and localmainboth pointed to35eb834; all previously queued commits are now on Gitea. - 🔴 Lego directive (2026-07-20 08:49 UTC): "please fix your issues yourself" — Hermes must resolve the Gitea push issue autonomously
- ⚠️ Responsiveness incident (2026-07-20 09:54–11:03 UTC): Lego repeatedly asked whether the issues were fixed and what Hermes was doing; visible progress/status updates are expected during incident resolution.
- Voice behavior (confirmed 2026-07-31): generate clear, human-friendly, conversational responses and let the participant guide with questions; avoid dense written-style delivery in live voice sessions.
Wiki Files
/opt/data/wiki/vssa-dpvp/action-plan.md— DPVP backlog/opt/data/wiki/vssa-enterprise-architect/action-plan.md— EA consultancy/opt/data/wiki/cognitive-architect/action-plan.md— CogArch backlog + pentest/opt/data/wiki/sap-delivery/action-plan.md— SAP track/opt/data/wiki/distinguished-engineer/action-plan.md— DE track/opt/data/wiki/infrastructure/README.md— Services & endpoints/opt/data/wiki/infrastructure/gitea-repository-operations.md— reusable Gitea repository runbook and skill reference/opt/data/wiki/infrastructure/network-v1.md— global Internet address book and IP-level ownership/operation model/opt/data/wiki/discord/README.md— Discord config/opt/data/wiki/hermes-setup/README.md— Migration status/opt/data/wiki/behavior/README.md— Operating rules