justin/new-site
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Initial commit — Performance West telecom compliance platform

Browse source 
Includes: API (Express/TypeScript), Astro site, Python workers,
document generators, FCC compliance tools, Canada CRTC formation,
Ansible infrastructure, and deployment scripts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
justin 2026-04-27 06:54:22 -05:00
commit f8cd37ac8c
1823 changed files with 145167 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

282
scripts/document_gen/templates/cpni_wireless_generator.py Normal file
View file

@ -0,0 +1,282 @@
"""
Generate the FCC CPNI Annual Certification Letter — Wireless (CMRS) variant.
Tailors the CPNI certification for a Commercial Mobile Radio Service
provider that operates its own radio / core network. Key variant
differences:
* Customer approval for CPNI use is frequently obtained through
handset-based (one-tap) mechanisms, in addition to traditional
opt-in.
* CPNI scope includes roaming records, eSIM provisioning / transfer
records, and device-level location data.
* Mobile location information is treated as CPNI and subject to
heightened consent safeguards consistent with the 2020 LocationSmart
Consent Decree (DA 20-299) and the 2024 Notice of Apparent Liability
against the Tier-1 carriers (FCC 24-40) addressing unauthorized
location-data sharing.
"""
from __future__ import annotations
import logging
from datetime import datetime
from pathlib import Path
from typing import Optional
LOG = logging.getLogger("document_gen.cpni_wireless")
try:
from docx import Document
from docx.shared import Pt, Inches, RGBColor
from docx.enum.text import WD_ALIGN_PARAGRAPH
except ImportError:
LOG.warning("python-docx not installed — CPNI Wireless generation unavailable")
Document = None # type: ignore[assignment,misc]
_NAVY = RGBColor(0x1A, 0x27, 0x44) if Document else None
VARIANT_ID = "wireless"
VARIANT_LABEL = "Wireless (CMRS) — Facilities"
MAX_FORFEITURE_PER_VIOLATION = "$251,322"
MAX_FORFEITURE_CAP = "$2,513,215"
def _sp(p, after=6, before=0):
p.paragraph_format.space_after = Pt(after)
if before:
p.paragraph_format.space_before = Pt(before)
def _h(doc, text):
p = doc.add_paragraph(); r = p.add_run(text)
r.font.size = Pt(12); r.bold = True; r.font.color.rgb = _NAVY
_sp(p, after=4, before=8)
def _b(doc, text, bold=False, size=10):
p = doc.add_paragraph(); p.alignment = WD_ALIGN_PARAGRAPH.LEFT
r = p.add_run(text); r.font.size = Pt(size); r.bold = bold
_sp(p, after=6)
def _cb(doc, text, checked=True):
mark = "\u2611" if checked else "\u2610"
p = doc.add_paragraph()
r = p.add_run(f" {mark} {text}"); r.font.size = Pt(10)
_sp(p, after=3)
def generate_cpni_wireless(
output_path: str,
entity_name: str,
frn: str = "",
filer_id_499: str = "",
officer_name: str = "",
officer_title: str = "Chief Executive Officer",
complaints_count: int = 0,
complaints_description: str = "",
has_data_broker_inquiries: bool = False,
data_broker_description: str = "",
reporting_year: int = 0,
address_street: str = "",
address_city: str = "",
address_state: str = "",
address_zip: str = "",
contact_email: str = "",
contact_phone: str = "",
breaches: list[dict] | None = None,
**_: dict,
) -> Optional[str]:
if Document is None:
LOG.error("python-docx not installed")
return None
if reporting_year == 0:
reporting_year = datetime.now().year - 1
breaches = breaches or []
doc = Document()
for s in doc.sections:
s.top_margin = Inches(1); s.bottom_margin = Inches(1)
s.left_margin = Inches(1.25); s.right_margin = Inches(1.25)
today = datetime.now().strftime("%B %d, %Y")
signer = officer_name or "Authorized Officer"
title = officer_title or "Officer"
tp = doc.add_paragraph(); tp.alignment = WD_ALIGN_PARAGRAPH.CENTER
t = tp.add_run("CPNI Annual Certification Letter")
t.font.size = Pt(14); t.bold = True; t.font.color.rgb = _NAVY
_sp(tp, after=2)
sp = doc.add_paragraph(); sp.alignment = WD_ALIGN_PARAGRAPH.CENTER
s = sp.add_run(
f"Wireless (CMRS) Facilities \u2014 47 CFR \u00a7 64.2009 "
f"\u2014 Calendar Year {reporting_year}"
)
s.font.size = Pt(10); s.font.color.rgb = RGBColor(0x55, 0x55, 0x55)
_sp(sp, after=8)
_h(doc, "1. Provider Information")
lines = [f"Company Name: {entity_name}", f"Variant: {VARIANT_LABEL}"]
if frn: lines.append(f"FCC Registration Number (FRN): {frn}")
if filer_id_499: lines.append(f"FCC Form 499 Filer ID: {filer_id_499}")
addr = ", ".join(filter(None, [address_street, address_city]))
if address_state or address_zip:
addr += f", {address_state} {address_zip}".strip()
if addr.strip(", "):
lines.append(f"Address: {addr.strip(', ')}")
if contact_phone: lines.append(f"Telephone: {contact_phone}")
if contact_email: lines.append(f"Email: {contact_email}")
lines.append(f"Certifying Officer: {signer}, {title}")
lines.append(f"Date of Filing: {today}")
lines.append(f"Filing Deadline: March 2, {reporting_year + 1}")
_b(doc, "\n".join(lines))
_h(doc, "2. Officer Statement of Personal Knowledge")
_b(doc, (
f"I, {signer}, {title} of {entity_name}, state that I have personal "
f"knowledge of the matters certified herein, including procedures "
f"governing device-level location data, roaming records, SIM / eSIM "
f"provisioning, and handset-based customer consent flows. I have "
f"reviewed operating procedures and supervisory logs covering the "
f"reporting period."
))
_h(doc, "3. Certification of Compliance")
_b(doc, (
f"Pursuant to 47 CFR \u00a7 64.2009(e), {entity_name} hereby submits "
f"its annual certification of compliance with the CPNI rules at "
f"47 CFR \u00a7\u00a7 64.2001 through 64.2011 for the period "
f"January 1, {reporting_year} through December 31, {reporting_year}."
))
_h(doc, "4. How Our Procedures Ensure Compliance")
_b(doc, (
f"As a Commercial Mobile Radio Service (CMRS) provider, "
f"{entity_name}'s CPNI holdings include call detail records, "
f"roaming records, SIM/eSIM provisioning and transfer logs, and "
f"device-level location data. Specific procedures include:"
))
_cb(doc, (
"Customer authentication for CPNI disclosures in response to a "
"customer-initiated contact uses a pre-established password, or "
"in-app / on-device verification (biometric or PIN) tied to the "
"authenticated subscriber identity (47 CFR \u00a7 64.2010)."
))
_cb(doc, (
"Customer approval for CPNI use beyond the scope of the subscribed "
"service may be obtained through traditional opt-in (written / oral) "
"OR through a secure one-tap in-app consent flow that meets the "
"FCC's 'knowing consent' standard under 47 CFR \u00a7 64.2007. "
"Consents are timestamped and retained."
))
_cb(doc, (
"Location data consent. Consistent with the 2020 LocationSmart "
"Consent Decree (DA 20-299) and the 2024 NAL addressing unauthorized "
"third-party location disclosure, {entity_name} treats device "
"location data as CPNI and requires separate, express consent for "
"disclosure to any third party. A chain-of-consent audit is "
"performed for each location-data aggregator relationship."
).replace("{entity_name}", entity_name))
_cb(doc, (
"SIM / eSIM transfer (port-out / device-swap) requires multi-factor "
"authentication plus customer notification to the address of record "
"prior to completion \u2014 implementing the anti-SIM-swap rules "
"codified at 47 CFR \u00a7 64.2010(f)\u2013(g)."
))
_cb(doc, (
"Roaming records are protected with the same safeguards as home-"
"network CDRs; access is logged to the named individual and "
"reviewed quarterly by the CPNI Protection Officer."
))
_cb(doc, (
"Access logs are retained for at least two years; certification "
"records for five years; access is reviewed at least quarterly."
))
_cb(doc, (
"Annual CPNI training is mandatory for all personnel with CPNI "
"access; breach notification procedures comply with 47 CFR "
"\u00a7 64.2011 as amended by FCC 23-111."
))
_h(doc, "5. Customer Complaints")
if complaints_count == 0:
_b(doc, (
f"{entity_name} has NOT received any customer complaints during "
f"the reporting period concerning the unauthorized release or "
f"use of CPNI (including unauthorized location-data "
f"disclosures). Zero (0) complaints were logged."
))
else:
desc = complaints_description or "Each complaint was investigated and resolved."
_b(doc, (
f"{entity_name} HAS received {complaints_count} customer "
f"complaint{'s' if complaints_count != 1 else ''} during the "
f"reporting period. {desc}"
))
_h(doc, "6. Data Broker Inquiries and Pretexting")
if not has_data_broker_inquiries:
_b(doc, (
f"{entity_name} has NOT received any inquiries, communications, "
f"or attempts by data brokers or other unauthorized parties "
f"seeking the unauthorized release of CPNI or device location "
f"data."
))
else:
desc = data_broker_description or "Each was refused, documented, and escalated."
_b(doc, (
f"{entity_name} HAS received data broker or pretexting-style "
f"inquiries during the reporting period. {desc}"
))
_h(doc, "7. Breach Log Summary")
if not breaches:
_b(doc, (
f"{entity_name} experienced no CPNI breaches during the "
f"reporting period. No 47 CFR \u00a7 64.2011 notifications were "
f"required."
))
else:
_b(doc, (
f"{entity_name} experienced {len(breaches)} CPNI breach"
f"{'es' if len(breaches) != 1 else ''} during the reporting "
f"period; each was reported within 7 business days."
))
_h(doc, "8. Penalties, Truthfulness, and Perjury Acknowledgment")
_b(doc, (
f"{entity_name} and the undersigned acknowledge that CPNI rule "
f"violations may subject the carrier to forfeitures up to "
f"{MAX_FORFEITURE_PER_VIOLATION} per violation and up to "
f"{MAX_FORFEITURE_CAP} for any single act or failure to act."
))
_b(doc, (
"Pursuant to 47 CFR \u00a7 1.17, the undersigned represents that no "
"material factual information has been withheld and all statements "
"are truthful, accurate, and complete."
))
_b(doc, (
"Willful false statements are punishable under Title 18, U.S.C. "
"\u00a7 1001, and by forfeiture under 47 U.S.C. \u00a7 503."
))
_h(doc, "9. Signature of Certifying Officer")
_b(doc, (
"I declare under penalty of perjury under the laws of the United "
"States of America that the foregoing is true and correct."
))
p = doc.add_paragraph(); _sp(p, after=0)
sig = doc.add_paragraph(); sig.add_run("_" * 45).font.size = Pt(10); _sp(sig, after=2)
nm = doc.add_paragraph(); nr = nm.add_run(signer); nr.bold = True
nr.font.size = Pt(10); _sp(nm, after=2)
tpp = doc.add_paragraph(); tpp.add_run(f"{title}, {entity_name}").font.size = Pt(10)
_sp(tpp, after=2)
dp = doc.add_paragraph(); dp.add_run(f"Date: {today}").font.size = Pt(10)
_sp(dp, after=2)
out = Path(output_path)
out.parent.mkdir(parents=True, exist_ok=True)
doc.save(str(out))
LOG.info("CPNI Wireless certification letter generated: %s", out)
return str(out)