93 lines
35 KiB
Markdown
93 lines
35 KiB
Markdown
# vssa-storm
|
||
|
||
_Last sync: 2026-08-13 12:00 UTC_
|
||
|
||
## Purpose
|
||
|
||
VSSA client investigation and evidence gathering.
|
||
|
||
## Current assets
|
||
|
||
- Gitea organization: `vssa-v1`
|
||
- Repository: <https://gitea.lego-cloud.eu/vssa-v1/documentation>
|
||
- Repository worktree: `/opt/data/vssa-documentation`
|
||
- Published Docusaurus site: <https://pages.apps.lego-cloud.eu/vssa-v1/documentation/>
|
||
- Client navigation has first-level **Overview** and an expanded **Registry** group containing 290 ordered client dossiers. System navigation follows the same hierarchy with 425 ordered system dossiers. Contractors are now a separate top-level collection with the same **Overview → Registry** hierarchy and 65 generated contractor/provider dossiers. Systems Dossiers are generated from canonical client system-table rows; the latest validated registry contains 425 unique systems from 630 observations, with conservative alias rules in `data/system-aliases.json` and machine-readable outputs at `/data/systems-registry.json` and `/data/contractors-registry.json`.
|
||
- Each generated Systems Dossier now includes canonical system-level analysis for production cloud/on-premises/hybrid hosting, original delivery kickoff, and latest production release. The source is `data/system-analysis.json`; known values require direct system-level URLs and supporting quotes, while missing evidence remains explicit rather than inferred.
|
||
- Overview, Clients, Systems, Contractors, Methodology, and Data now use separate Docusaurus docs-plugin instances and dedicated sidebars. Generated system relationships use reusable React evidence cards, and every generated client/system dossier has a de-duplicated References index. `SYS-*` and `CTR-*` IDs are deterministic internal registry IDs, not public-source identifiers.
|
||
- Every generated client system table has a **System dossier** column. Each of the 630 client observations displays its canonical `SYS-*` ID and links directly to one of the 425 internal system dossiers; generation fails if any observation is unlinked.
|
||
- Gitea Actions workflow: `.gitea/workflows/pages.yml`; successful `main` builds publish through the mounted LEGO Cloud Pages root.
|
||
- Source registry: `source/message.txt`, containing 290 numbered clients.
|
||
- Required output: one concise Markdown dossier per client with exact name, one-sentence purpose, systems/clouds, plain-language system meaning, precise client relationship, identified contractor/company and role, direct evidence, confidence, and short gaps.
|
||
- Investigation skill: `client-investigator`; recurring runs must deepen contractor research and patch the skill only with validated reusable practices.
|
||
|
||
## Automation
|
||
|
||
- Cron job `88833e00b4a2` (`VSSA documentation continuous research`) runs at `0 */2 * * *` and reports to this channel.
|
||
- Each run audits all 290 records, deeply researches up to 10 missing/weak/stale dossiers, continuously improves client/system/contractor evidence and documentation, reviews conservative system identity rules, validates the complete Docusaurus build, pushes evidence-backed changes, verifies Actions, and checks the deployed Pages backend.
|
||
- Research must prefer primary sources and must not infer providers/systems without corroborating evidence.
|
||
- Every run explicitly searches CPVA's official search portal for exact client/system names and relevant projects, treating result pages as discovery only until an opened CPVA source proves the claim. It also maintains per-record References indexes and preserves dedicated sidebars and evidence cards.
|
||
- Discord user `476287310627864587` is the designated CVP IS instructor for `https://viesiejipirkimai.lt/epps/viewCFTSAction.do`. Every run reads that user’s new channel guidance, validates reusable portal mechanics, patches `client-investigator`, and searches procurement stages from RFI/market consultation through tender, award, contract, amendment, and completion. Records are mapped to exact clients and canonical systems only when supported; stage semantics prevent an RFI/RFP/bid from being presented as an award, supplier engagement, implementation, production use, hosting, or completion.
|
||
- CVP IS also has a validated organization-first discovery route: search the exact client at `https://viesiejipirkimai.lt/epps/viewOrganisations.do`, identity-check and open `prepareViewCAOrganisation.do?id=<organizationId>`, then follow **PERŽIŪRĖTI VISUS PASKELBTUS SKELBIMUS** to `viewPublishedNotices.do?authorityId=<authorityId>&orgGroupId=<orgGroupId>`. Both IDs must be extracted from the actual profile link. Notice-type links can be direct PDF downloads; preserve their identifiers/metadata, extract the body, and classify procurement stage before mapping evidence. This route is additional and not assumed complete.
|
||
- The job workdir and remote now target `/opt/data/vssa-documentation` and `vssa-v1/documentation`; it must not edit generated Docusaurus output.
|
||
- The recurring job explicitly treats a dated official announcement that says a named system started operating/launched/went live as direct production-release evidence at the announcement's stated precision, while distinguishing this from generic webpage metadata. It maintains contractor dossiers as exact client-system-role-evidence relationships and does not conflate development, hosting, support, licensing, or other roles.
|
||
- **Latest rotation (2026-08-13):** clients 271–280 were reviewed through authoritative identity recovery, official sources, CPVA exact-name searches, contractor queries, and CVP IS organization-first profiles/notices. Exact CVP IS identities were confirmed for clients 272–280 (organization/profile IDs 2868, 1067, 1203, 1965, 12934, 4839, 7603, 5900, and 1763); client 271 had no exact result and was not mapped to a near name. Direct award PDFs added two high-confidence VRKIS supplier roles for client 279: UAB „iTree Lietuva“ won VRKIS maintenance, development and support under a EUR 1,736,000 contract signed 2026-01-02; UAB „IO projects“ won VRKIS modernization technical supervision under a EUR 79,000 contract signed 2025-07-21. A VRK voluntary ex-ante notice also established dependency on an intelligent chatbot whose support includes rental and operation of the production cloud infrastructure in which it runs; the notice does not name the supplier or cloud provider. Other notices were tender-stage, unrelated, or did not support a distinct client-system claim; CPVA searches yielded no additional defensible claim. No new CVP IS instructor guidance was present after message `1537121770707091537`. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; registry counts are now 430 systems, 635 observations, and 68 normalized contractor/provider entities. Next rotation: clients 281–290. Commits `256011fc76c857ec1aa74b1df982ea8699f3eda6` and `fcd7781dedd5d06d408443d46fb7f066ed4f6830` were pushed; the second conservatively scoped the generic chatbot identity to VRK before attaching its production-cloud evidence. Authenticated source readback passed; final Actions run `2388`, task `625`, succeeded including Pages publication. Public Pages returned the expected Keycloak `302`; direct backend verification was unavailable from this runtime.
|
||
- **Previous rotation (2026-08-13 14:00 UTC):** clients 261–270 were reviewed through exact identity checks, official client/system sources, CPVA exact searches, contractor searches, and CVP IS organization-first profiles/notices. Exact CVP IS identities were found for clients 261–263, 266, and 268–270 (organization IDs 1007, 8353, 1107, 7928, 5391, 1258, and 5708); exact byte-level matches were absent for clients 264, 265, and 267 and were not forced to near-name records. A direct Žemės ūkio agentūra award PDF (`resourceId=3904100`, `documentId=6586911`, `noticeId=6586102`, procedure `e698e26b-25bd-4bae-b4f0-e7c365b7fcf1`) added two high-confidence system observations: its import/export licences, quotas and export-compensation administration IS, and its market-regulation-measures administration IS. UAB „Novian PRO“ won their maintenance/support, updates, new-function/change development and consulting contract for EUR 78,840, signed 2025-10-17. The award does not prove original development, hosting, acceptance or production release. Other notice lists yielded tender-stage or unrelated leads only; exact CPVA searches produced no additional defensible claim. No new CVP IS instructor guidance was present after message `1537121770707091537`. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; registry counts are now 428 systems, 633 observations, and 68 normalized contractor/provider entities. Commit `2143cc9b81aee5371f1924500d0bb3fa98adb15e` was pushed and authenticated source readback passed; Actions run `2378`, task `615`, succeeded including Pages publication. Public Pages returned the expected Keycloak `302`; direct backend verification was unavailable from this runtime.
|
||
- **Previous rotation (2026-08-13 12:00 UTC):** clients 251–260 were reviewed through exact identity checks, official client-system pages, CPVA exact searches, contractor/vendor searches, and CVP IS organization-first profiles/notices. All ten clients identity-matched in CVP IS (organization IDs 10152, 3359, 3851, 4239, 1022, 8182, 1480, 3838, 1349, and 1707); current organization lists produced only tender-stage or unrelated leads and no new award/contractor claim. One official Police completion page materially deepened DI.POLIS: implementation began in September 2023, the production version moved from Vytautas Magnus University's experimental environment into the Informatikos ir ryšių departamentas production environment, was integrated into ePolicija, accepted for operation, and opened to external users. The canonical system analysis now records kickoff at month precision and preserves the production-environment statement while leaving cloud/on-premises/hybrid and latest release explicitly unknown. The existing IRD contractor identity was reused, yielding 68 normalized contractor/provider entities without fragmentation. Exact CPVA searches produced no additional defensible claim. No new CVP IS instructor guidance was present after message `1537121770707091537`. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; registry counts remain 426 systems and 631 observations. Commit `ed851725b68866d749d8d5924f7ed66f5cb9ec8c` was pushed and authenticated source readback passed; Actions run `2371`, task `608`, succeeded including Pages publication. Public Pages returned the expected Keycloak `302`; direct backend verification was unavailable from this runtime.
|
||
- **Previous rotation (2026-08-13 10:08 UTC):** clients 241–250 were reviewed. The CVP IS organization-first route identity-matched nine clients; no exact organization result was found for client 241. Two direct award PDFs added high-confidence contractor evidence: AB „Via Lietuva“ awarded Starkodas maintenance/modification of its public EV-charging-operator/access-point registration system for EUR 98,920 under a contract signed 2026-07-13; Lietuvos probacijos tarnyba awarded Buddi Limited rental of electronic-monitoring devices and software for EUR 2,196,000 under a contract signed 2026-01-06. A „Plačiajuostis internetas“ network-equipment award was reviewed but not mapped as a distinct software/system observation. Exact CPVA searches produced no additional defensible claim. No new CVP IS instructor guidance was present in the latest accessible channel export. Commit `7273c63676ad36d79178e40abc44327e9c49e171` was pushed and authenticated source readback passed; Actions run `2369`, task `606`, succeeded including Pages publication. Public Pages returned the expected Keycloak `302`; the Pages dataset mount was unavailable from this runtime. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; the registry now contains 426 systems, 631 observations, and 67 normalized contractor/provider entities. Next rotation: clients 251–260.
|
||
- **Previous rotation (2026-08-13 08:08 UTC):** clients 231–240 were reviewed. Direct CVP IS award PDFs added four high-confidence system/contractor observations: Inovacijų agentūra awarded UAB „DevOcean LT“ IAVV IS creation/support for EUR 576,250 under a contract signed 2025-03-21; CPVA awarded ECM studija DVS IS support/development for EUR 392,040 under a 36-month contract signed 2026-02-27; and CPVA awarded UAB „NRD Systems“ VSFSVVP IS development/support for EUR 198,347 under a contract signed 2024-12-16, with UAB „Etronika“ explicitly named as a 10% / EUR 18,997 subcontractor. Awards are not presented as acceptance, production release, hosting, or completion evidence. Exact CPVA searches for all ten clients produced no additional defensible claim. No new CVP IS instructor guidance was present in the latest accessible channel export. Commit `cf311bbbd2ae07a49ff88d2f54782ac6f2725665` was pushed and authenticated source readback passed; Actions run `2367`, task `604`, succeeded including Pages publication. Public Pages returned the expected Keycloak `302`; direct backend verification was unavailable from this runtime. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; the registry contained 425 systems, 630 observations, and 65 normalized contractor/provider entities.
|
||
- **Previous rotation (2026-08-13 04:08 UTC):** clients 221–230 were reviewed. The CVP IS organization-first route identity-matched all ten exact legal names. Direct award PDFs added two high-confidence findings: (1) Valstybinė duomenų apsaugos inspekcija awarded UAB „Lexita“ both 2025 project lots—new information-system creation for EUR 265,000 and statistics-tool creation for EUR 53,000—under contracts signed 2025-07-31; (2) Viešųjų pirkimų tarnyba awarded MB „Nordic plum“ the CVP IS subsystem maintenance/development contract for EUR 287,200, signed 2025-11-30. The records explicitly retain acceptance, production release, and hosting as unknown. Exact CPVA searches and the other identity-checked organization notice lists produced no defensible new claim. No new CVP IS instructor guidance was present in the latest accessible channel export. Commit `1980408a29173679122dd9b34e2c9ce1ad75749e` was pushed and authenticated source readback passed; Actions run `2366`, job `3342`, succeeded including Pages publication. Public Pages returned the expected Keycloak `302`; backend verification was unavailable because this runtime has no resolvable Kubernetes control-plane host. Coverage remains 79 researched, 195 partial, 16 no-public-evidence, and 0 pending; the registry contained 422 systems, 627 observations, and 61 normalized contractor/provider entities.
|
||
- **Previous rotation (2026-08-13 02:14 UTC):** clients 211–220 were reviewed. The CVP IS organization-first route identity-matched clients 211–214 and 216–220; no exact organization result was found for 215. The direct award PDFs established that UAB „Asseco Lietuva“ received three bounded E-kinas contracts from the Lithuanian Central State Archives: modernization/deployment signed 2025-02-10 for EUR 93,800, plus maintenance/development signed 2025-05-13 and 2026-03-31 for EUR 165,000 each. A separate award established UAB „Asseco Lietuva“ as the Lithuanian Chief Archivist’s Office EAIS modernization contractor under a EUR 660,000 contract signed 2025-02-24 for the E-kultūros platform project. Client 213 and 219 dossiers now cite the exact CVP IS award PDFs and explicitly retain production hosting, acceptance, and go-live dates as unknown. Other exact client/system CPVA searches, official sources, and procurement lists produced no defensible additional system, contractor, production-hosting, delivery-kickoff, or production-release claim. No new CVP IS instructor guidance was available through the runtime's latest accessible channel export. Commits `0220ccfc71f97950e61457eb636eee8ac3d8a6a1` and `f5574bc01fb7aba20b9c6f77cf3a8e524f177460` were pushed; Actions runs `2364` and `2365` succeeded, including Pages publication.
|
||
|
||
## Availability continuity
|
||
|
||
- On 2026-08-13, rotation 231–240 added direct CVP IS award evidence for IAVV IS (UAB „DevOcean LT“, EUR 576,250), CPVA DVS IS (ECM studija, EUR 392,040), and VSFSVVP IS (UAB „NRD Systems“, EUR 198,347; UAB „Etronika“ as the explicitly named 10% subcontractor). Validation and the production build passed with 290 clients, 425 systems, 630 observations, and 65 contractor/provider dossiers. Commit `cf311bb` was pushed and read back; Actions run `2367`, task `604`, succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak `302`.
|
||
- On 2026-08-13, rotation 221–230 added direct CVP IS award evidence that UAB „Lexita“ received VDAI's new information-system and statistics-tool creation contracts (EUR 265,000 and EUR 53,000; signed 2025-07-31), and MB „Nordic plum“ received VPT's CVP IS subsystem maintenance/development contract (EUR 287,200; signed 2025-11-30). Validation and the production build passed with 290 clients, 422 systems, 627 observations, and 61 contractor/provider dossiers. Commit `1980408` was pushed and read back; Actions run `2366`, job `3342`, succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak `302`.
|
||
- On 2026-08-13, rotation 211–220 added direct CVP IS award evidence for three E-kinas contracts awarded to UAB „Asseco Lietuva“ (EUR 93,800 modernization/deployment and two EUR 165,000 maintenance/development contracts) and a EUR 660,000 EAIS modernization contract awarded to the same company. Validation and the production build passed with 290 clients, 421 systems, 626 observations, and 59 contractor/provider dossiers. Commits `0220ccf` and `f5574bc` were pushed and read back; Actions runs `2364` and `2365` succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak `302`.
|
||
- On 2026-08-13, rotation 201–210 added direct CVP IS award evidence that UAB „iTree Lietuva“ won the NMA ŽŪPAIS Informacinio portalo 36-month maintenance/development contract for EUR 104,060, signed 2026-05-28. The award PDF is `resourceId=6504564`, `documentId=8110181`, `noticeId=8110157`, procedure `32350071-7198-4af1-a61e-f26a6efd8eba`. Validation and the full build passed with 290 clients, 421 systems, 626 observations, and 58 contractor/provider dossiers. Commit `5cc1b2c` was pushed and read back; Actions run `2363`, job `3339`, succeeded including LEGO Cloud Pages publication, and public Pages retained the expected Keycloak `302`.
|
||
- On 2026-08-12, scheduled rotation 191–200 completed with conservative no-new-claim outcomes. `corepack pnpm validate`, the full production build (290 client, 421 system and 57 contractor routes; 626 observations; 296 raw artifacts), and `git diff --check` passed. Commit `7c1f68f` was pushed, authenticated read back, and published by successful Actions run `2357`; public Pages retained the intended Keycloak `302`. The host did not expose the runner Pages dataset mount, so no direct backend-file readback was available from this runtime.
|
||
- On 2026-08-12, commit `d0c828a` added the first-class Contractors collection: top navigation, dedicated Docusaurus plugin/sidebar, **Overview → Registry**, 58 generated contractor/provider dossiers, stable internal `CTR-*` IDs, a machine-readable registry, exact client/system/evidence relationships, and generated contractor sections on system dossiers. INVESTIS now displays ATEA with its bounded evidenced role. The same change recorded **2023-10-02** as INVESTIS's production release because CPVA's dated official announcement explicitly says the system started operating; the 2023-10-03 Inovacijų agentūra announcement is retained as corroboration. Delivery kickoff remains unknown because neither announcement establishes when delivery began. Focused tests, registry validation, the full production build, local browser checks, authenticated Gitea source readback, and Actions run `2351` succeeded; public Pages correctly returns the expected Keycloak `302` for the new routes. Recurring job `88833e00b4a2` and `client-investigator` now preserve this release-date rule and contractor-registry semantics.
|
||
- On 2026-08-12, three live organization-first CVP IS trials produced exact, PDF-backed system procurements. (1) Vyriausybės kanceliarija: organization `2076`, `orgGroupId=2088`, 40 notices; a 2025 PPVIS maintenance/improvement tender (`resourceId=3325946`) explicitly names PPVIS, EUR 110,000 excluding VAT, 36 months, and has a later contract-award notice, which must be opened separately before supplier attribution. (2) Inovacijų agentūra: organization `1679`, `orgGroupId=1681`; the IAVV IS creation/support award (`resourceId=16691`) names UAB `DevOcean LT`, EUR 576,250, winner selection 2025-02-27, and contract date 2025-03-21. This maps to a newly evidenced IAVV IS, not INVESTIS; separate AIS, IAVVIS technical-supervision, project/portfolio-platform, and B2Lithuania notices also appeared. (3) CPVA: organization `1253`, `orgGroupId=1254`, 224 notices; a 2026 tender (`resourceId=9090393`) explicitly covers development, maintenance, and warranty services for VSFSVVP IS, an electronic data-exchange system for Internal Security Fund / Border Management and Visa Policy financial support. It proves intended procurement only, not award or supplier. Direct notice endpoints returned valid PDF attachments and extracted text.
|
||
- On 2026-08-12, instructor guidance established the CVP IS organization-first route. Live validation confirmed that the organization search exposes exact organization rows; example profile `id=1297` links to published notices with distinct `authorityId=1297` and `orgGroupId=1298`; the notice list exposes type, title, upload/publication dates, language, and status; and a notice-type link returned HTTP 200 `application/pdf` with an attachment filename and stable resource/document/notice identifiers. Browser navigation can abort on this legitimate download. The validated mechanics and PDF/stage safeguards were added to `client-investigator` and recurring job `88833e00b4a2`.
|
||
- On 2026-08-12, an exhaustive CPVA sweep queried all 421 then-current canonical system names through the live validated `https://cpva.lt/paieska?_sf_s=<phrase>` mechanism with zero request failures. CPVA uses broad token matching, so raw search-card hits are noisy and require opened-body verification. The first defensible case was INVESTIS: CPVA's 2023-10-02 production-launch notice explicitly describes INVESTIS/DMS, its production start and functions, and ATEA as the service provider collaborating on system creation. Client 236 (Inovacijų agentūra) and client 240 (CPVA) were updated with the bounded historical supplier role in commit `18751f6`; local validation/build, authenticated readback, Actions run `2350`, and Pages publication succeeded. The `client-investigator` CPVA procedure was corrected from ineffective POST assumptions to the confirmed `_sf_s` URL and now warns that broad token matches are discovery only.
|
||
- On 2026-08-12, Lego designated Discord user `476287310627864587` to teach Hermes use of the CVP IS procurement portal (`https://viesiejipirkimai.lt/epps/viewCFTSAction.do`) for finding and mapping RFIs, RFPs, specifications, awards, contracts/amendments, and completion records to VSSA clients and systems. This is a **CONFIRMED process directive**; exact portal procedures remain **UNKNOWN** until taught and validated. Recurring job `88833e00b4a2` was configured to ingest the instructor's channel guidance and preserve procurement-stage semantics.
|
||
- On 2026-08-12, commit `15020a8` added one defensible Mano dienynas observation for client 167, increasing the registry to 622 observations while retaining 420 canonical systems. Validation, deployed-content checks, authenticated remote readback, and Gitea Actions run `2344` succeeded. CPVA exact-name searches for clients 161–170 returned no applicable findings.
|
||
- On 2026-08-12, commit `4756f0d` added a generated **System dossier** column to every client “Cloud services and systems”/structured systems table. All 621 observations link by displayed `SYS-*` ID to valid canonical system routes covering 420 systems. Local validation/build passed, authenticated source readback succeeded, and Gitea Actions run `2343` completed successfully including Pages publication. Public access continues to return the intended Keycloak `302` redirect.
|
||
- On 2026-08-12, commit `d3b833b` reorganized both Clients and Systems sidebars into exactly two first-level entries: **Overview** and an expanded **Registry** group containing the ordered individual dossiers (290 clients and 420 systems). Local validation/build and rendered sidebar checks passed, authenticated Gitea readback confirmed both sidebar files, and Actions run `2342` completed successfully including the Pages publish step. Public access continues to return the intended Keycloak `302` redirect.
|
||
- On 2026-08-12, commit `95d2a9c` split Overview, Clients, Systems, Methodology, and Data into dedicated Docusaurus sidebars; documented that `SYS-*` values are deterministic internal IDs generated from canonical identity keys rather than public identifiers; replaced system relationship tables with reusable React evidence cards; added de-duplicated References indexes to all 290 client and 420 system dossiers; and updated recurring job `88833e00b4a2` to search CPVA's official `https://cpva.lt/paieska` endpoint for client/system mentions while retaining only verified evidence. Validation/build and representative rendered-route checks passed, Gitea Actions run `2341` succeeded, and public Pages retained its expected Keycloak `302` protection.
|
||
- On 2026-08-12, commit `a6ca8ab` added infrastructure/lifecycle analysis fields to all 420 then-current unique system records, updated the machine-readable registry to schema version 2, added identity-safe validation/bootstrap handling, and updated the recurring research job to investigate these fields continuously. Initial values remain `unknown` until direct evidence is found; no hosting or dates were fabricated from existing client observations. Validation/build passed, Gitea Actions run `2340` succeeded, and the Pages backend returned HTTP 200 with the three fields, schema-v2 registry, and raw canonical analysis file. Public access remains Keycloak-protected (`302`).
|
||
- On 2026-08-12, commit `1542674` reorganized the portal around researched user tasks after reviewing GOV.UK content-design/writing guidance, W3C WAI design guidance, and USWDS card/table guidance. Global navigation is now Overview, Clients, Systems, Methodology, and Data; the homepage prioritizes client browsing, system exploration, and evidence search; scope metrics distinguish clients, systems, and observations; generated overview/directory/system-registry guidance explains ordering, statuses, counts, and safe interpretation; provenance documents the machine-readable registry. The rationale is recorded in `docs/content-organization-research.md`. Validation/build passed, desktop visual and browser checks found no clipping/JS errors, Gitea Actions run `2335` succeeded, and the Pages backend returned HTTP 200 for all representative routes and search. Public access remains Keycloak-protected (`302`).
|
||
- The first scheduled continuous-research invocation at 22:00 UTC failed because the model provider reported overload. The next invocation completed at 00:12 UTC, validated all 290 clients plus 419 system routes/620 observations, pushed commit `b34670484501f0ddd27154c19b7605bf00f3efdd`, and verified successful Gitea Actions run `2333`. Public Pages correctly redirected unauthenticated traffic to Keycloak (`302`), while direct backend checks returned HTTP 200 for representative client/system routes and the registry.
|
||
- On 2026-08-11, the visible navbar/site label was changed from `VSSA Documentation` to `VSSA - Clients & Systems` in commit `d062598`. Gitea Actions run `2332` succeeded and the Pages backend returned HTTP 200 with the new label.
|
||
- On 2026-08-11, commit `e0efc31` flattened the Client Dossiers sidebar and added Systems Dossiers: 621 canonical evidence observations consolidated into 421 conservative unique-system records, 421 generated system routes, client/system provenance links, reviewed alias rules, machine-readable JSON, search indexing, and build validation. Gitea Actions run `2331` succeeded. The Pages backend returned HTTP 200 for the homepage, client 001, systems registry, representative centralized-government-IT dossier, registry JSON, and search index. Public Pages became Keycloak-protected concurrently and now correctly returns HTTP 302 to `/oauth2/start` for unauthenticated requests; this is infrastructure authentication, not a deployment failure.
|
||
- On 2026-08-11, the dedicated VSSA-styled Docusaurus landing page and native local search were published in commit `d43effe`. The design uses the official VSSA navy/blue visual language, locally bundled Public Sans, the official mark, square geometry, a separate `/overview/` documentation route, and live registry-derived metrics. Gitea Actions run `2330` completed successfully. The public homepage, overview, directory, local 3 MB search index, and logo returned HTTP 200; a browser query for `kanceliarija` returned multiple dossier results and opened client 001 successfully. Search is generated and executed inside the static site with no external search service.
|
||
- On 2026-08-11, `vssa-v1/vssa-clients` was renamed to `vssa-v1/documentation` with history preserved. The main worktree and 20 linked-worktree pointers were repaired and verified. Docusaurus 3.10.2 now renders all 290 dossiers from generated MDX-safe copies, preserves canonical source artifacts, and publishes byte-identical raw artifacts with SHA-256 hashes. Gitea Actions run `2329` completed successfully for commit `0a2144f`, and the public LEGO Cloud Pages homepage, directory, representative dossier routes, and raw manifest returned HTTP 200.
|
||
- On 2026-08-11, Gitea 1.27.0 initially left web/API healthy while all Git transport operations crashed in the Go runtime during `moduledataverify1`. Gitea was subsequently updated to `1.27.1`; SSH and Smart HTTP recovered. The queued VSSA commit `6fc42ab` was pushed and remotely verified, leaving local `main` synchronized with `origin/main`.
|
||
- **CONFIRMED recovery decision/status (2026-08-11 19:05–19:06 UTC):** after Lego asked Hermes to recheck, live verification showed Gitea `1.27.1`, REST API, SSH Git, and HTTPS Git all healthy. The queued VSSA client-dossier commit `6fc42ab` was pushed, remote `INDEX.md` was read back, and local `main` matched `origin/main`. No VSSA delivery blocker remained from this incident.
|
||
- On 2026-08-04 at 20:05–20:42 UTC, Lego (`root_at_skic`) repeatedly asked whether Hermes was alive. These messages are evidence of the broader Hermes availability incident, not a change to the VSSA investigation scope. The incident was subsequently investigated in `#jarvis-jr-v1-hermes-setup`.
|
||
|
||
## Terminology
|
||
|
||
- In repository and Gitea workflow guidance, **mutation** means an operation that changes data or state (for example editing, committing, pushing, changing settings, or deleting). “Discovery before mutation” means inspect and confirm the target repository and its current state before making changes.
|
||
|
||
## Source anchor
|
||
|
||
- Latest processed human message: `1537121770707091537` (2026-08-12 15:33 UTC). Lego clarified that dated official announcements explicitly saying a system started operating can evidence its production release and asked why INVESTIS lacked kickoff/release values; the confirmed release-date rule and deployed INVESTIS result are recorded above, while kickoff remains unknown.
|
||
- Previous processed human message: `1537121281529356391` (2026-08-12 15:31 UTC). Lego required system dossiers to expose evidenced contractors and proposed a first-class Contractors registry; commit `d0c828a` implemented and published that structure.
|
||
- Previous processed human message: `1537120485870018662` (2026-08-12 15:28 UTC). Lego requested exact system links to inspect documentation updates; Hermes clarified that the three CVP IS trials had been captured as research leads but had not yet been incorporated into documentation pages.
|
||
- Previous processed human messages: `1537116481408466974`–`1537117840715546624` (2026-08-12 15:12–15:17 UTC). Lego taught and requested live trials of the additional CVP IS organization-first search route; the validated mechanics and three trial results are recorded above.
|
||
- Previous processed human message: `1537072799775203358` (2026-08-12 12:18 UTC). Lego designated user `476287310627864587` as the CVP IS instructor and directed the recurring job to learn the procurement portal workflow and map supported procurement records to VSSA clients and systems.
|
||
- Previous processed human message: `1537067600998047804` (2026-08-12 11:57 UTC). Lego requested internal system-dossier links in every client cloud-services/systems table; commit `4756f0d` implemented and verified the links as recorded above.
|
||
- Previous processed human message: `1537058117223972915` (2026-08-12 11:20 UTC). Lego requested Overview/Registry hierarchy for both Clients and Systems sidebars; commit `d3b833b` implemented it.
|
||
- Previous processed human messages: `1537047891309494343`–`1537049333352894514` (2026-08-12 10:39–10:45 UTC). Lego required recurring infrastructure/lifecycle research, dedicated top-level sidebars, clarification of generated `SYS-*` IDs, reusable relationship cards, CPVA searching, and per-record reference indexes; commits `a6ca8ab` and `95d2a9c` implemented these requirements.
|
||
- Latest processed human message: `1536934392302141461` (2026-08-12). Lego requested an immediate research-led overall page improvement cycle focused on best practices for content organization; the deployed result is recorded above.
|
||
- Latest processed human message: `1536859431533281312` (2026-08-11). Lego requested the site label `VSSA - Clients & Systems`; it was published and verified as recorded above.
|
||
- Latest processed human message: `1536847412382015629` (2026-08-11). Lego requested a flat Client Dossiers sidebar, a unique Systems Dossiers registry, and continuous documentation/research automation; all three were implemented and published as recorded above.
|
||
- Latest processed human message: `1536845732613591160` (2026-08-11). Lego reported that the new landing page and search were not visible; inspection confirmed the changes had only existed locally. Hermes committed and pushed them, verified successful Actions run `2330`, and confirmed the public deployment and search behavior.
|
||
- Latest processed human message: `1536835494909055107` (2026-08-11). Lego directed Hermes to rename the repository to `documentation`, convert it to Docusaurus, add Gitea Actions, and publish through LEGO Cloud Pages; the completed state is recorded above.
|
||
- Previous processed human message: `1536812738679021618` (2026-08-11 19:05 UTC). Lego asked Hermes to check Gitea after remediation; the subsequent verified result is recorded above.
|
||
- Previous incident message: `1536807021674762261` (2026-08-11 18:42 UTC), asking what was wrong with Gitea and how to resolve it.
|
||
- Previous availability message: `1534300468530905170` (2026-08-04 20:42 UTC). Lego asked whether Hermes was alive; no VSSA project scope or status changed.
|
||
- Previous terminology message: `1533032343021813930` (2026-08-01 08:43 UTC), requesting clarification of “mutation”.
|
||
- Previous durable directive: `1532810727847624884` (2026-07-31 18:02 UTC), confirming the concise one-file-per-client format, plain-language system meaning, contractor/company research, deep public investigation, and iterative improvement of `client-investigator`.
|