""" Generate the FCC CPNI Annual Certification Letter — IXC Reseller variant. An IXC reseller buys wholesale toll minutes from an underlying carrier and resells them under its own brand. CPNI obligations therefore extend to both the retail end-user records the reseller maintains directly AND to the toll-CDR flow from the wholesale carrier. Safeguards include contractual flow-down terms with the upstream. """ from __future__ import annotations import logging from datetime import datetime from pathlib import Path from typing import Optional LOG = logging.getLogger("document_gen.cpni_ixc_reseller") try: from docx import Document from docx.shared import Pt, Inches, RGBColor from docx.enum.text import WD_ALIGN_PARAGRAPH except ImportError: LOG.warning("python-docx not installed — CPNI IXC-Reseller generation unavailable") Document = None # type: ignore[assignment,misc] _NAVY = RGBColor(0x1A, 0x27, 0x44) if Document else None VARIANT_ID = "ixc_reseller" VARIANT_LABEL = "Interexchange Carrier — Reseller" MAX_FORFEITURE_PER_VIOLATION = "$251,322" MAX_FORFEITURE_CAP = "$2,513,215" def _sp(p, after=6, before=0): p.paragraph_format.space_after = Pt(after) if before: p.paragraph_format.space_before = Pt(before) def _h(doc, text): p = doc.add_paragraph(); r = p.add_run(text) r.font.size = Pt(12); r.bold = True; r.font.color.rgb = _NAVY _sp(p, after=4, before=8) def _b(doc, text, bold=False, size=10): p = doc.add_paragraph(); p.alignment = WD_ALIGN_PARAGRAPH.LEFT r = p.add_run(text); r.font.size = Pt(size); r.bold = bold _sp(p, after=6) def _cb(doc, text, checked=True): mark = "\u2611" if checked else "\u2610" p = doc.add_paragraph() r = p.add_run(f" {mark} {text}"); r.font.size = Pt(10) _sp(p, after=3) def generate_cpni_ixc_reseller( output_path: str, entity_name: str, frn: str = "", filer_id_499: str = "", officer_name: str = "", officer_title: str = "Chief Executive Officer", complaints_count: int = 0, complaints_description: str = "", has_data_broker_inquiries: bool = False, data_broker_description: str = "", reporting_year: int = 0, upstream_wholesale_provider: str = "", address_street: str = "", address_city: str = "", address_state: str = "", address_zip: str = "", contact_email: str = "", contact_phone: str = "", breaches: list[dict] | None = None, **_: dict, ) -> Optional[str]: if Document is None: LOG.error("python-docx not installed") return None if reporting_year == 0: reporting_year = datetime.now().year - 1 breaches = breaches or [] doc = Document() for s in doc.sections: s.top_margin = Inches(1); s.bottom_margin = Inches(1) s.left_margin = Inches(1.25); s.right_margin = Inches(1.25) today = datetime.now().strftime("%B %d, %Y") signer = officer_name or "Authorized Officer" title = officer_title or "Officer" upstream = upstream_wholesale_provider or "its wholesale underlying carrier(s)" tp = doc.add_paragraph(); tp.alignment = WD_ALIGN_PARAGRAPH.CENTER t = tp.add_run("CPNI Annual Certification Letter") t.font.size = Pt(14); t.bold = True; t.font.color.rgb = _NAVY _sp(tp, after=2) sp = doc.add_paragraph(); sp.alignment = WD_ALIGN_PARAGRAPH.CENTER s = sp.add_run( f"Interexchange Carrier — Reseller \u2014 47 CFR \u00a7 64.2009 " f"\u2014 Calendar Year {reporting_year}" ) s.font.size = Pt(10); s.font.color.rgb = RGBColor(0x55, 0x55, 0x55) _sp(sp, after=8) _h(doc, "1. Provider Information") lines = [f"Company Name: {entity_name}", f"Variant: {VARIANT_LABEL}"] if frn: lines.append(f"FCC Registration Number (FRN): {frn}") if filer_id_499: lines.append(f"FCC Form 499 Filer ID: {filer_id_499}") addr = ", ".join(filter(None, [address_street, address_city])) if address_state or address_zip: addr += f", {address_state} {address_zip}".strip() if addr.strip(", "): lines.append(f"Address: {addr.strip(', ')}") if contact_phone: lines.append(f"Telephone: {contact_phone}") if contact_email: lines.append(f"Email: {contact_email}") lines.append(f"Certifying Officer: {signer}, {title}") lines.append(f"Date of Filing: {today}") lines.append(f"Filing Deadline: March 2, {reporting_year + 1}") _b(doc, "\n".join(lines)) _h(doc, "2. Officer Statement of Personal Knowledge") _b(doc, ( f"I, {signer}, {title} of {entity_name}, state that I have personal " f"knowledge of the matters certified herein. I have reviewed the " f"CPNI operating procedures of {entity_name}, including wholesale " f"CPNI flow-down terms with upstream toll providers, and examined " f"supervisory logs and records covering the reporting period." )) _h(doc, "3. Certification of Compliance") _b(doc, ( f"Pursuant to 47 CFR \u00a7 64.2009(e), {entity_name} hereby submits " f"its annual certification of compliance with the CPNI rules at " f"47 CFR \u00a7\u00a7 64.2001 through 64.2011 for the period " f"January 1, {reporting_year} through December 31, {reporting_year}." )) _h(doc, "4. How Our Procedures Ensure Compliance") _b(doc, ( f"As an IXC reseller purchasing wholesale toll minutes from " f"{upstream} and reselling them under its own brand, {entity_name} " f"protects CPNI at two boundaries: (1) the retail end-user toll-" f"account interface, and (2) the CDR and billing-record flow from " f"the underlying toll carrier(s)." )) _cb(doc, ( "Interexchange account authentication is required before release " "of any toll record to a customer-initiated inquiry " "(47 CFR \u00a7 64.2010)." )) _cb(doc, ( "PIC-change verifications (TPV, LOA, or Internet LOA) are performed " "per 47 CFR \u00a7 64.1120 and confirmed to the customer's address " "of record prior to implementation." )) _cb(doc, ( f"Reseller flow-down: {entity_name}'s wholesale agreement with " f"{upstream} expressly requires the upstream toll carrier to " f"protect end-user CPNI received through {entity_name} consistent " f"with 47 CFR \u00a7\u00a7 64.2001\u201364.2011. {entity_name} " f"reviews upstream CPNI attestations annually." )) _cb(doc, ( "The CPNI Protection Officer has oversight authority over both " "retail toll-account records and wholesale CDR handoffs, and " "reviews upstream carrier breach notices per 47 CFR \u00a7 64.2011." )) _cb(doc, ( "Customer approval for CPNI usage beyond the scope of the " "subscribed toll service is obtained through written or oral " "opt-in consent, documented per 47 CFR \u00a7 64.2007." )) _cb(doc, ( "Supervisory review of CPNI access occurs at least quarterly; " "retention meets or exceeds two years (CPNI logs) and five years " "(certification records) per 47 CFR \u00a7 64.2009." )) _cb(doc, ( "Annual CPNI training is mandatory for all personnel with CPNI " "access; breach notification procedures comply with 47 CFR " "\u00a7 64.2011 as amended by FCC 23-111." )) _h(doc, "5. Customer Complaints") if complaints_count == 0: _b(doc, ( f"{entity_name} has NOT received any customer complaints during " f"the reporting period concerning the unauthorized release or " f"use of CPNI. Zero (0) complaints were logged." )) else: desc = complaints_description or "Each complaint was investigated and resolved." _b(doc, ( f"{entity_name} HAS received {complaints_count} customer " f"complaint{'s' if complaints_count != 1 else ''} during the " f"reporting period. {desc}" )) _h(doc, "6. Data Broker Inquiries and Pretexting") if not has_data_broker_inquiries: _b(doc, ( f"{entity_name} has NOT received any inquiries, communications, " f"or attempts by data brokers or other unauthorized parties " f"seeking the unauthorized release of CPNI." )) else: desc = data_broker_description or "Each was refused, documented, and escalated." _b(doc, ( f"{entity_name} HAS received data broker or pretexting-style " f"inquiries during the reporting period. {desc}" )) _h(doc, "7. Breach Log Summary") if not breaches: _b(doc, ( f"{entity_name} experienced no CPNI breaches during the " f"reporting period. No 47 CFR \u00a7 64.2011 notifications " f"were required." )) else: _b(doc, ( f"{entity_name} experienced {len(breaches)} CPNI breach" f"{'es' if len(breaches) != 1 else ''} during the reporting " f"period; each was reported within 7 business days." )) _h(doc, "8. Penalties, Truthfulness, and Perjury Acknowledgment") _b(doc, ( f"{entity_name} and the undersigned officer acknowledge that CPNI " f"rule violations may subject the carrier to forfeitures up to " f"{MAX_FORFEITURE_PER_VIOLATION} per violation and up to " f"{MAX_FORFEITURE_CAP} for any single act or failure to act." )) _b(doc, ( "Pursuant to 47 CFR \u00a7 1.17, the undersigned represents that " "no material factual information has been withheld and that all " "statements are truthful, accurate, and complete." )) _b(doc, ( "The undersigned acknowledges that willful false statements are " "punishable under Title 18, U.S.C. \u00a7 1001, and by forfeiture " "under 47 U.S.C. \u00a7 503." )) _h(doc, "9. Signature of Certifying Officer") _b(doc, ( "I declare under penalty of perjury under the laws of the United " "States of America that the foregoing is true and correct." )) p = doc.add_paragraph(); _sp(p, after=0) sig = doc.add_paragraph(); sig.add_run("_" * 45).font.size = Pt(10); _sp(sig, after=2) nm = doc.add_paragraph(); nr = nm.add_run(signer); nr.bold = True nr.font.size = Pt(10); _sp(nm, after=2) tpp = doc.add_paragraph(); tpp.add_run(f"{title}, {entity_name}").font.size = Pt(10) _sp(tpp, after=2) dp = doc.add_paragraph(); dp.add_run(f"Date: {today}").font.size = Pt(10) _sp(dp, after=2) out = Path(output_path) out.parent.mkdir(parents=True, exist_ok=True) doc.save(str(out)) LOG.info("CPNI IXC-Reseller certification letter generated: %s", out) return str(out)