knowledge-wiki/channels/1532415849762127902.md

vssa-storm

Last sync: 2026-08-13 00:10 UTC

Purpose

VSSA client investigation and evidence gathering.

Current assets

• Gitea organization: vssa-v1
• Repository: https://gitea.lego-cloud.eu/vssa-v1/documentation
• Repository worktree: /opt/data/vssa-documentation
• Published Docusaurus site: https://pages.apps.lego-cloud.eu/vssa-v1/documentation/
• Client navigation has first-level Overview and an expanded Registry group containing 290 ordered client dossiers. System navigation follows the same hierarchy with 421 ordered system dossiers. Contractors are now a separate top-level collection with the same Overview → Registry hierarchy and 58 generated contractor/provider dossiers. Systems Dossiers are generated from canonical client system-table rows; the latest validated registry contains 421 unique systems from 626 observations, with conservative alias rules in data/system-aliases.json and machine-readable outputs at /data/systems-registry.json and /data/contractors-registry.json.
• Each generated Systems Dossier now includes canonical system-level analysis for production cloud/on-premises/hybrid hosting, original delivery kickoff, and latest production release. The source is data/system-analysis.json; known values require direct system-level URLs and supporting quotes, while missing evidence remains explicit rather than inferred.
• Overview, Clients, Systems, Contractors, Methodology, and Data now use separate Docusaurus docs-plugin instances and dedicated sidebars. Generated system relationships use reusable React evidence cards, and every generated client/system dossier has a de-duplicated References index. SYS-* and CTR-* IDs are deterministic internal registry IDs, not public-source identifiers.
• Every generated client system table has a System dossier column. Each of the 626 client observations displays its canonical SYS-* ID and links directly to one of the 421 internal system dossiers; generation fails if any observation is unlinked.
• Gitea Actions workflow: .gitea/workflows/pages.yml; successful main builds publish through the mounted LEGO Cloud Pages root.
• Source registry: source/message.txt, containing 290 numbered clients.
• Required output: one concise Markdown dossier per client with exact name, one-sentence purpose, systems/clouds, plain-language system meaning, precise client relationship, identified contractor/company and role, direct evidence, confidence, and short gaps.
• Investigation skill: client-investigator; recurring runs must deepen contractor research and patch the skill only with validated reusable practices.

Automation

• Cron job 88833e00b4a2 (VSSA documentation continuous research) runs at 0 */2 * * * and reports to this channel.
• Each run audits all 290 records, deeply researches up to 10 missing/weak/stale dossiers, continuously improves client/system/contractor evidence and documentation, reviews conservative system identity rules, validates the complete Docusaurus build, pushes evidence-backed changes, verifies Actions, and checks the deployed Pages backend.
• Research must prefer primary sources and must not infer providers/systems without corroborating evidence.
• Every run explicitly searches CPVA's official search portal for exact client/system names and relevant projects, treating result pages as discovery only until an opened CPVA source proves the claim. It also maintains per-record References indexes and preserves dedicated sidebars and evidence cards.
• Discord user 476287310627864587 is the designated CVP IS instructor for https://viesiejipirkimai.lt/epps/viewCFTSAction.do. Every run reads that user’s new channel guidance, validates reusable portal mechanics, patches client-investigator, and searches procurement stages from RFI/market consultation through tender, award, contract, amendment, and completion. Records are mapped to exact clients and canonical systems only when supported; stage semantics prevent an RFI/RFP/bid from being presented as an award, supplier engagement, implementation, production use, hosting, or completion.
• CVP IS also has a validated organization-first discovery route: search the exact client at https://viesiejipirkimai.lt/epps/viewOrganisations.do, identity-check and open prepareViewCAOrganisation.do?id=<organizationId>, then follow PERŽIŪRĖTI VISUS PASKELBTUS SKELBIMUS to viewPublishedNotices.do?authorityId=<authorityId>&orgGroupId=<orgGroupId>. Both IDs must be extracted from the actual profile link. Notice-type links can be direct PDF downloads; preserve their identifiers/metadata, extract the body, and classify procurement stage before mapping evidence. This route is additional and not assumed complete.
• The job workdir and remote now target /opt/data/vssa-documentation and vssa-v1/documentation; it must not edit generated Docusaurus output.
• The recurring job explicitly treats a dated official announcement that says a named system started operating/launched/went live as direct production-release evidence at the announcement's stated precision, while distinguishing this from generic webpage metadata. It maintains contractor dossiers as exact client-system-role-evidence relationships and does not conflate development, hosting, support, licensing, or other roles.
• Latest rotation (2026-08-13 00:10 UTC): clients 201–210 were reviewed. The CVP IS organization-first route identity-matched clients 201–209 and exposed profile/notice-list pairs 12830/29932, 13905/36656, 2137/2149, 1522/1525, 4500/4906, 2329/2359, 5766/7188, 4344/4699, and 1516/1519; an exact current organization match was not found for client 210. The NMA list yielded a direct award PDF for ŽŪPAIS Informacinio portalo palaikymas ir vystymas (resourceId=6504564, documentId=8110181, noticeId=8110157, procedure 32350071-7198-4af1-a61e-f26a6efd8eba): UAB „iTree Lietuva“ won a EUR 104,060, 36-month maintenance/development contract signed 2026-05-28. Client 204 and the generated NMA system/contractor dossiers now preserve this bounded role. Exact client/system CPVA searches, reopened official sources, contractor query ladders, and the remaining organization notice lists produced no other defensible system, contractor, production-hosting, delivery-kickoff, or production-release claim. No new CVP IS instructor guidance was available through the runtime's latest accessible channel export. Commit 5cc1b2c8bbf14cc967017a50ca5bb7ee9c3f080c and Actions run 2363 (job 3339) were verified successful, including Pages publication, authenticated source readback, generated client/system/contractor markers, and the expected public Keycloak 302. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; the registry remains 421 systems and 626 observations, while normalized contractor/provider entities increased to 58. Next rotation: clients 211–220.

Availability continuity

• On 2026-08-13, rotation 201–210 added direct CVP IS award evidence that UAB „iTree Lietuva“ won the NMA ŽŪPAIS Informacinio portalo 36-month maintenance/development contract for EUR 104,060, signed 2026-05-28. The award PDF is resourceId=6504564, documentId=8110181, noticeId=8110157, procedure 32350071-7198-4af1-a61e-f26a6efd8eba. Validation and the full build passed with 290 clients, 421 systems, 626 observations, and 58 contractor/provider dossiers. Commit 5cc1b2c was pushed and read back; Actions run 2363, job 3339, succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak 302.
• On 2026-08-12, scheduled rotation 191–200 completed with conservative no-new-claim outcomes. corepack pnpm validate, the full production build (290 client, 421 system and 57 contractor routes; 626 observations; 296 raw artifacts), and git diff --check passed. Commit 7c1f68f was pushed, authenticated read back, and published by successful Actions run 2357; public Pages retained the intended Keycloak 302. The host did not expose the runner Pages dataset mount, so no direct backend-file readback was available from this runtime.
• On 2026-08-12, commit d0c828a added the first-class Contractors collection: top navigation, dedicated Docusaurus plugin/sidebar, Overview → Registry, 58 generated contractor/provider dossiers, stable internal CTR-* IDs, a machine-readable registry, exact client/system/evidence relationships, and generated contractor sections on system dossiers. INVESTIS now displays ATEA with its bounded evidenced role. The same change recorded 2023-10-02 as INVESTIS's production release because CPVA's dated official announcement explicitly says the system started operating; the 2023-10-03 Inovacijų agentūra announcement is retained as corroboration. Delivery kickoff remains unknown because neither announcement establishes when delivery began. Focused tests, registry validation, the full production build, local browser checks, authenticated Gitea source readback, and Actions run 2351 succeeded; public Pages correctly returns the expected Keycloak 302 for the new routes. Recurring job 88833e00b4a2 and client-investigator now preserve this release-date rule and contractor-registry semantics.
• On 2026-08-12, three live organization-first CVP IS trials produced exact, PDF-backed system procurements. (1) Vyriausybės kanceliarija: organization 2076, orgGroupId=2088, 40 notices; a 2025 PPVIS maintenance/improvement tender (resourceId=3325946) explicitly names PPVIS, EUR 110,000 excluding VAT, 36 months, and has a later contract-award notice, which must be opened separately before supplier attribution. (2) Inovacijų agentūra: organization 1679, orgGroupId=1681; the IAVV IS creation/support award (resourceId=16691) names UAB DevOcean LT, EUR 576,250, winner selection 2025-02-27, and contract date 2025-03-21. This maps to a newly evidenced IAVV IS, not INVESTIS; separate AIS, IAVVIS technical-supervision, project/portfolio-platform, and B2Lithuania notices also appeared. (3) CPVA: organization 1253, orgGroupId=1254, 224 notices; a 2026 tender (resourceId=9090393) explicitly covers development, maintenance, and warranty services for VSFSVVP IS, an electronic data-exchange system for Internal Security Fund / Border Management and Visa Policy financial support. It proves intended procurement only, not award or supplier. Direct notice endpoints returned valid PDF attachments and extracted text.
• On 2026-08-12, instructor guidance established the CVP IS organization-first route. Live validation confirmed that the organization search exposes exact organization rows; example profile id=1297 links to published notices with distinct authorityId=1297 and orgGroupId=1298; the notice list exposes type, title, upload/publication dates, language, and status; and a notice-type link returned HTTP 200 application/pdf with an attachment filename and stable resource/document/notice identifiers. Browser navigation can abort on this legitimate download. The validated mechanics and PDF/stage safeguards were added to client-investigator and recurring job 88833e00b4a2.
• On 2026-08-12, an exhaustive CPVA sweep queried all 421 then-current canonical system names through the live validated https://cpva.lt/paieska?_sf_s=<phrase> mechanism with zero request failures. CPVA uses broad token matching, so raw search-card hits are noisy and require opened-body verification. The first defensible case was INVESTIS: CPVA's 2023-10-02 production-launch notice explicitly describes INVESTIS/DMS, its production start and functions, and ATEA as the service provider collaborating on system creation. Client 236 (Inovacijų agentūra) and client 240 (CPVA) were updated with the bounded historical supplier role in commit 18751f6; local validation/build, authenticated readback, Actions run 2350, and Pages publication succeeded. The client-investigator CPVA procedure was corrected from ineffective POST assumptions to the confirmed _sf_s URL and now warns that broad token matches are discovery only.
• On 2026-08-12, Lego designated Discord user 476287310627864587 to teach Hermes use of the CVP IS procurement portal (https://viesiejipirkimai.lt/epps/viewCFTSAction.do) for finding and mapping RFIs, RFPs, specifications, awards, contracts/amendments, and completion records to VSSA clients and systems. This is a CONFIRMED process directive; exact portal procedures remain UNKNOWN until taught and validated. Recurring job 88833e00b4a2 was configured to ingest the instructor's channel guidance and preserve procurement-stage semantics.
• On 2026-08-12, commit 15020a8 added one defensible Mano dienynas observation for client 167, increasing the registry to 622 observations while retaining 420 canonical systems. Validation, deployed-content checks, authenticated remote readback, and Gitea Actions run 2344 succeeded. CPVA exact-name searches for clients 161–170 returned no applicable findings.
• On 2026-08-12, commit 4756f0d added a generated System dossier column to every client “Cloud services and systems”/structured systems table. All 621 observations link by displayed SYS-* ID to valid canonical system routes covering 420 systems. Local validation/build passed, authenticated source readback succeeded, and Gitea Actions run 2343 completed successfully including Pages publication. Public access continues to return the intended Keycloak 302 redirect.
• On 2026-08-12, commit d3b833b reorganized both Clients and Systems sidebars into exactly two first-level entries: Overview and an expanded Registry group containing the ordered individual dossiers (290 clients and 420 systems). Local validation/build and rendered sidebar checks passed, authenticated Gitea readback confirmed both sidebar files, and Actions run 2342 completed successfully including the Pages publish step. Public access continues to return the intended Keycloak 302 redirect.
• On 2026-08-12, commit 95d2a9c split Overview, Clients, Systems, Methodology, and Data into dedicated Docusaurus sidebars; documented that SYS-* values are deterministic internal IDs generated from canonical identity keys rather than public identifiers; replaced system relationship tables with reusable React evidence cards; added de-duplicated References indexes to all 290 client and 420 system dossiers; and updated recurring job 88833e00b4a2 to search CPVA's official https://cpva.lt/paieska endpoint for client/system mentions while retaining only verified evidence. Validation/build and representative rendered-route checks passed, Gitea Actions run 2341 succeeded, and public Pages retained its expected Keycloak 302 protection.
• On 2026-08-12, commit a6ca8ab added infrastructure/lifecycle analysis fields to all 420 then-current unique system records, updated the machine-readable registry to schema version 2, added identity-safe validation/bootstrap handling, and updated the recurring research job to investigate these fields continuously. Initial values remain unknown until direct evidence is found; no hosting or dates were fabricated from existing client observations. Validation/build passed, Gitea Actions run 2340 succeeded, and the Pages backend returned HTTP 200 with the three fields, schema-v2 registry, and raw canonical analysis file. Public access remains Keycloak-protected (302).
• On 2026-08-12, commit 1542674 reorganized the portal around researched user tasks after reviewing GOV.UK content-design/writing guidance, W3C WAI design guidance, and USWDS card/table guidance. Global navigation is now Overview, Clients, Systems, Methodology, and Data; the homepage prioritizes client browsing, system exploration, and evidence search; scope metrics distinguish clients, systems, and observations; generated overview/directory/system-registry guidance explains ordering, statuses, counts, and safe interpretation; provenance documents the machine-readable registry. The rationale is recorded in docs/content-organization-research.md. Validation/build passed, desktop visual and browser checks found no clipping/JS errors, Gitea Actions run 2335 succeeded, and the Pages backend returned HTTP 200 for all representative routes and search. Public access remains Keycloak-protected (302).
• The first scheduled continuous-research invocation at 22:00 UTC failed because the model provider reported overload. The next invocation completed at 00:12 UTC, validated all 290 clients plus 419 system routes/620 observations, pushed commit b34670484501f0ddd27154c19b7605bf00f3efdd, and verified successful Gitea Actions run 2333. Public Pages correctly redirected unauthenticated traffic to Keycloak (302), while direct backend checks returned HTTP 200 for representative client/system routes and the registry.
• On 2026-08-11, the visible navbar/site label was changed from VSSA Documentation to VSSA - Clients & Systems in commit d062598. Gitea Actions run 2332 succeeded and the Pages backend returned HTTP 200 with the new label.
• On 2026-08-11, commit e0efc31 flattened the Client Dossiers sidebar and added Systems Dossiers: 621 canonical evidence observations consolidated into 421 conservative unique-system records, 421 generated system routes, client/system provenance links, reviewed alias rules, machine-readable JSON, search indexing, and build validation. Gitea Actions run 2331 succeeded. The Pages backend returned HTTP 200 for the homepage, client 001, systems registry, representative centralized-government-IT dossier, registry JSON, and search index. Public Pages became Keycloak-protected concurrently and now correctly returns HTTP 302 to /oauth2/start for unauthenticated requests; this is infrastructure authentication, not a deployment failure.
• On 2026-08-11, the dedicated VSSA-styled Docusaurus landing page and native local search were published in commit d43effe. The design uses the official VSSA navy/blue visual language, locally bundled Public Sans, the official mark, square geometry, a separate /overview/ documentation route, and live registry-derived metrics. Gitea Actions run 2330 completed successfully. The public homepage, overview, directory, local 3 MB search index, and logo returned HTTP 200; a browser query for kanceliarija returned multiple dossier results and opened client 001 successfully. Search is generated and executed inside the static site with no external search service.
• On 2026-08-11, vssa-v1/vssa-clients was renamed to vssa-v1/documentation with history preserved. The main worktree and 20 linked-worktree pointers were repaired and verified. Docusaurus 3.10.2 now renders all 290 dossiers from generated MDX-safe copies, preserves canonical source artifacts, and publishes byte-identical raw artifacts with SHA-256 hashes. Gitea Actions run 2329 completed successfully for commit 0a2144f, and the public LEGO Cloud Pages homepage, directory, representative dossier routes, and raw manifest returned HTTP 200.
• On 2026-08-11, Gitea 1.27.0 initially left web/API healthy while all Git transport operations crashed in the Go runtime during moduledataverify1. Gitea was subsequently updated to 1.27.1; SSH and Smart HTTP recovered. The queued VSSA commit 6fc42ab was pushed and remotely verified, leaving local main synchronized with origin/main.
• CONFIRMED recovery decision/status (2026-08-11 19:05–19:06 UTC): after Lego asked Hermes to recheck, live verification showed Gitea 1.27.1, REST API, SSH Git, and HTTPS Git all healthy. The queued VSSA client-dossier commit 6fc42ab was pushed, remote INDEX.md was read back, and local main matched origin/main. No VSSA delivery blocker remained from this incident.
• On 2026-08-04 at 20:05–20:42 UTC, Lego (root_at_skic) repeatedly asked whether Hermes was alive. These messages are evidence of the broader Hermes availability incident, not a change to the VSSA investigation scope. The incident was subsequently investigated in #jarvis-jr-v1-hermes-setup.

Terminology

• In repository and Gitea workflow guidance, mutation means an operation that changes data or state (for example editing, committing, pushing, changing settings, or deleting). “Discovery before mutation” means inspect and confirm the target repository and its current state before making changes.

Source anchor

• Latest processed human message: 1537121770707091537 (2026-08-12 15:33 UTC). Lego clarified that dated official announcements explicitly saying a system started operating can evidence its production release and asked why INVESTIS lacked kickoff/release values; the confirmed release-date rule and deployed INVESTIS result are recorded above, while kickoff remains unknown.
• Previous processed human message: 1537121281529356391 (2026-08-12 15:31 UTC). Lego required system dossiers to expose evidenced contractors and proposed a first-class Contractors registry; commit d0c828a implemented and published that structure.
• Previous processed human message: 1537120485870018662 (2026-08-12 15:28 UTC). Lego requested exact system links to inspect documentation updates; Hermes clarified that the three CVP IS trials had been captured as research leads but had not yet been incorporated into documentation pages.
• Previous processed human messages: 1537116481408466974–1537117840715546624 (2026-08-12 15:12–15:17 UTC). Lego taught and requested live trials of the additional CVP IS organization-first search route; the validated mechanics and three trial results are recorded above.
• Previous processed human message: 1537072799775203358 (2026-08-12 12:18 UTC). Lego designated user 476287310627864587 as the CVP IS instructor and directed the recurring job to learn the procurement portal workflow and map supported procurement records to VSSA clients and systems.
• Previous processed human message: 1537067600998047804 (2026-08-12 11:57 UTC). Lego requested internal system-dossier links in every client cloud-services/systems table; commit 4756f0d implemented and verified the links as recorded above.
• Previous processed human message: 1537058117223972915 (2026-08-12 11:20 UTC). Lego requested Overview/Registry hierarchy for both Clients and Systems sidebars; commit d3b833b implemented it.
• Previous processed human messages: 1537047891309494343–1537049333352894514 (2026-08-12 10:39–10:45 UTC). Lego required recurring infrastructure/lifecycle research, dedicated top-level sidebars, clarification of generated SYS-* IDs, reusable relationship cards, CPVA searching, and per-record reference indexes; commits a6ca8ab and 95d2a9c implemented these requirements.
• Latest processed human message: 1536934392302141461 (2026-08-12). Lego requested an immediate research-led overall page improvement cycle focused on best practices for content organization; the deployed result is recorded above.
• Latest processed human message: 1536859431533281312 (2026-08-11). Lego requested the site label VSSA - Clients & Systems; it was published and verified as recorded above.
• Latest processed human message: 1536847412382015629 (2026-08-11). Lego requested a flat Client Dossiers sidebar, a unique Systems Dossiers registry, and continuous documentation/research automation; all three were implemented and published as recorded above.
• Latest processed human message: 1536845732613591160 (2026-08-11). Lego reported that the new landing page and search were not visible; inspection confirmed the changes had only existed locally. Hermes committed and pushed them, verified successful Actions run 2330, and confirmed the public deployment and search behavior.
• Latest processed human message: 1536835494909055107 (2026-08-11). Lego directed Hermes to rename the repository to documentation, convert it to Docusaurus, add Gitea Actions, and publish through LEGO Cloud Pages; the completed state is recorded above.
• Previous processed human message: 1536812738679021618 (2026-08-11 19:05 UTC). Lego asked Hermes to check Gitea after remediation; the subsequent verified result is recorded above.
• Previous incident message: 1536807021674762261 (2026-08-11 18:42 UTC), asking what was wrong with Gitea and how to resolve it.
• Previous availability message: 1534300468530905170 (2026-08-04 20:42 UTC). Lego asked whether Hermes was alive; no VSSA project scope or status changed.
• Previous terminology message: 1533032343021813930 (2026-08-01 08:43 UTC), requesting clarification of “mutation”.
• Previous durable directive: 1532810727847624884 (2026-07-31 18:02 UTC), confirming the concise one-file-per-client format, plain-language system meaning, contractor/company research, deep public investigation, and iterative improvement of client-investigator.