f8cd37ac8c
Includes: API (Express/TypeScript), Astro site, Python workers, document generators, FCC compliance tools, Canada CRTC formation, Ansible infrastructure, and deployment scripts. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
289 lines
11 KiB
Python
289 lines
11 KiB
Python
"""
|
|
Generate the FCC CPNI Annual Certification Letter — IXC (Facilities) variant.
|
|
|
|
Tailors the generic CPNI certification under 47 CFR § 64.2009(e) for an
|
|
Interexchange Carrier (IXC) focused on toll-call record handling. Key
|
|
variant differences:
|
|
|
|
* CPNI scope centered on toll call records, PIC-change verification,
|
|
and interexchange account authentication.
|
|
* Customer approval for CPNI usage follows written/oral opt-in,
|
|
documented in the toll-account record.
|
|
* The CPNI Protection Officer's duties include PIC / LIDB / CDR
|
|
access governance and fraud-management system controls.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
import logging
|
|
from datetime import datetime
|
|
from pathlib import Path
|
|
from typing import Optional
|
|
|
|
LOG = logging.getLogger("document_gen.cpni_ixc")
|
|
|
|
try:
|
|
from docx import Document
|
|
from docx.shared import Pt, Inches, RGBColor
|
|
from docx.enum.text import WD_ALIGN_PARAGRAPH
|
|
except ImportError:
|
|
LOG.warning("python-docx not installed — CPNI IXC generation unavailable")
|
|
Document = None # type: ignore[assignment,misc]
|
|
|
|
_NAVY = RGBColor(0x1A, 0x27, 0x44) if Document else None
|
|
|
|
VARIANT_ID = "ixc"
|
|
VARIANT_LABEL = "Interexchange Carrier (IXC)"
|
|
|
|
MAX_FORFEITURE_PER_VIOLATION = "$251,322"
|
|
MAX_FORFEITURE_CAP = "$2,513,215"
|
|
|
|
|
|
def _sp(p, after=6, before=0):
|
|
p.paragraph_format.space_after = Pt(after)
|
|
if before:
|
|
p.paragraph_format.space_before = Pt(before)
|
|
|
|
|
|
def _h(doc, text):
|
|
p = doc.add_paragraph()
|
|
r = p.add_run(text)
|
|
r.font.size = Pt(12); r.bold = True; r.font.color.rgb = _NAVY
|
|
_sp(p, after=4, before=8)
|
|
|
|
|
|
def _b(doc, text, bold=False, size=10):
|
|
p = doc.add_paragraph()
|
|
p.alignment = WD_ALIGN_PARAGRAPH.LEFT
|
|
r = p.add_run(text); r.font.size = Pt(size); r.bold = bold
|
|
_sp(p, after=6)
|
|
|
|
|
|
def _cb(doc, text, checked=True):
|
|
mark = "\u2611" if checked else "\u2610"
|
|
p = doc.add_paragraph()
|
|
r = p.add_run(f" {mark} {text}")
|
|
r.font.size = Pt(10)
|
|
_sp(p, after=3)
|
|
|
|
|
|
def generate_cpni_ixc(
|
|
output_path: str,
|
|
entity_name: str,
|
|
frn: str = "",
|
|
filer_id_499: str = "",
|
|
officer_name: str = "",
|
|
officer_title: str = "Chief Executive Officer",
|
|
complaints_count: int = 0,
|
|
complaints_description: str = "",
|
|
has_data_broker_inquiries: bool = False,
|
|
data_broker_description: str = "",
|
|
reporting_year: int = 0,
|
|
address_street: str = "",
|
|
address_city: str = "",
|
|
address_state: str = "",
|
|
address_zip: str = "",
|
|
contact_email: str = "",
|
|
contact_phone: str = "",
|
|
breaches: list[dict] | None = None,
|
|
**_: dict,
|
|
) -> Optional[str]:
|
|
if Document is None:
|
|
LOG.error("python-docx not installed")
|
|
return None
|
|
if reporting_year == 0:
|
|
reporting_year = datetime.now().year - 1
|
|
breaches = breaches or []
|
|
|
|
doc = Document()
|
|
for s in doc.sections:
|
|
s.top_margin = Inches(1); s.bottom_margin = Inches(1)
|
|
s.left_margin = Inches(1.25); s.right_margin = Inches(1.25)
|
|
|
|
today = datetime.now().strftime("%B %d, %Y")
|
|
signer = officer_name or "Authorized Officer"
|
|
title = officer_title or "Officer"
|
|
|
|
tp = doc.add_paragraph(); tp.alignment = WD_ALIGN_PARAGRAPH.CENTER
|
|
t = tp.add_run("CPNI Annual Certification Letter")
|
|
t.font.size = Pt(14); t.bold = True; t.font.color.rgb = _NAVY
|
|
_sp(tp, after=2)
|
|
sp = doc.add_paragraph(); sp.alignment = WD_ALIGN_PARAGRAPH.CENTER
|
|
s = sp.add_run(
|
|
f"Interexchange Carrier \u2014 47 CFR \u00a7 64.2009 "
|
|
f"\u2014 Calendar Year {reporting_year}"
|
|
)
|
|
s.font.size = Pt(10); s.font.color.rgb = RGBColor(0x55, 0x55, 0x55)
|
|
_sp(sp, after=8)
|
|
|
|
_h(doc, "1. Provider Information")
|
|
lines = [f"Company Name: {entity_name}", f"Variant: {VARIANT_LABEL}"]
|
|
if frn: lines.append(f"FCC Registration Number (FRN): {frn}")
|
|
if filer_id_499: lines.append(f"FCC Form 499 Filer ID: {filer_id_499}")
|
|
addr = ", ".join(filter(None, [address_street, address_city]))
|
|
if address_state or address_zip:
|
|
addr += f", {address_state} {address_zip}".strip()
|
|
if addr.strip(", "):
|
|
lines.append(f"Address: {addr.strip(', ')}")
|
|
if contact_phone: lines.append(f"Telephone: {contact_phone}")
|
|
if contact_email: lines.append(f"Email: {contact_email}")
|
|
lines.append(f"Certifying Officer: {signer}, {title}")
|
|
lines.append(f"Date of Filing: {today}")
|
|
lines.append(f"Filing Deadline: March 2, {reporting_year + 1}")
|
|
_b(doc, "\n".join(lines))
|
|
|
|
_h(doc, "2. Officer Statement of Personal Knowledge")
|
|
_b(doc, (
|
|
f"I, {signer}, {title} of {entity_name}, state that I have personal "
|
|
f"knowledge of the matters certified herein. I have reviewed "
|
|
f"{entity_name}'s CPNI operating procedures, including procedures "
|
|
f"governing toll call records, PIC-change verification, and "
|
|
f"interexchange account authentication. I have examined supervisory "
|
|
f"logs and records covering the reporting period. The "
|
|
f"representations herein are based on my personal review and are "
|
|
f"true and correct to the best of my knowledge, information, and "
|
|
f"belief."
|
|
))
|
|
|
|
_h(doc, "3. Certification of Compliance")
|
|
_b(doc, (
|
|
f"Pursuant to 47 CFR \u00a7 64.2009(e), {entity_name} hereby submits "
|
|
f"its annual certification of compliance with the CPNI rules at "
|
|
f"47 CFR \u00a7\u00a7 64.2001 through 64.2011 for the period "
|
|
f"January 1, {reporting_year} through December 31, {reporting_year}."
|
|
))
|
|
|
|
_h(doc, "4. How Our Procedures Ensure Compliance")
|
|
_b(doc, (
|
|
f"As an interexchange carrier, {entity_name}'s principal CPNI "
|
|
f"holdings are toll call detail records (CDRs), PIC-change records, "
|
|
f"and inter-carrier settlement data. Specific procedures include:"
|
|
))
|
|
_cb(doc, (
|
|
"Interexchange account authentication is required before release "
|
|
"of any toll record. Authentication is via pre-established "
|
|
"password or the verification of two non-CPNI account attributes "
|
|
"(47 CFR \u00a7 64.2010)."
|
|
))
|
|
_cb(doc, (
|
|
"PIC changes require affirmative verification under 47 CFR "
|
|
"\u00a7 64.1120 (Third Party Verification, Letter of Agency, or "
|
|
"Internet LOA) and are confirmed to the customer's address of "
|
|
"record before being implemented. Slamming-prevention controls "
|
|
"are integrated with CPNI access logging."
|
|
))
|
|
_cb(doc, (
|
|
"Customer approval for use of toll CPNI beyond the scope of the "
|
|
"subscribed service is obtained through written or oral opt-in "
|
|
"consent, documented in the account record per 47 CFR \u00a7 64.2007."
|
|
))
|
|
_cb(doc, (
|
|
"The CPNI Protection Officer has oversight authority over PIC "
|
|
"administration, LIDB access, CDR archives, and fraud-management "
|
|
"systems. Access attempts to these systems are logged to the named "
|
|
"individual."
|
|
))
|
|
_cb(doc, (
|
|
"Supervisory reviews of CPNI access are conducted at least "
|
|
"quarterly. Retention of access logs meets or exceeds two years "
|
|
"(CPNI) and five years (certification records) per 47 CFR "
|
|
"\u00a7 64.2009."
|
|
))
|
|
_cb(doc, (
|
|
"Annual CPNI training is required for all personnel with CPNI "
|
|
"access. Completion is tracked and attested to by the CPNI "
|
|
"Protection Officer."
|
|
))
|
|
_cb(doc, (
|
|
"Breach notification under 47 CFR \u00a7 64.2011 is implemented as "
|
|
"amended by FCC 23-111 \u2014 notice to the Commission within 7 "
|
|
"business days and to customers / law enforcement as soon as "
|
|
"practicable (not later than 30 days after reasonable determination)."
|
|
))
|
|
|
|
_h(doc, "5. Customer Complaints")
|
|
if complaints_count == 0:
|
|
_b(doc, (
|
|
f"{entity_name} has NOT received any customer complaints during "
|
|
f"the reporting period concerning the unauthorized release or "
|
|
f"use of CPNI. Zero (0) complaints were logged."
|
|
))
|
|
else:
|
|
desc = complaints_description or (
|
|
"Each complaint was investigated and resolved."
|
|
)
|
|
_b(doc, (
|
|
f"{entity_name} HAS received {complaints_count} customer "
|
|
f"complaint{'s' if complaints_count != 1 else ''} during the "
|
|
f"reporting period. {desc}"
|
|
))
|
|
|
|
_h(doc, "6. Data Broker Inquiries and Pretexting")
|
|
if not has_data_broker_inquiries:
|
|
_b(doc, (
|
|
f"{entity_name} has NOT received any inquiries, communications, "
|
|
f"or attempts by data brokers or other unauthorized parties "
|
|
f"seeking the unauthorized release of CPNI."
|
|
))
|
|
else:
|
|
desc = data_broker_description or (
|
|
"Each such inquiry was refused, documented, and escalated."
|
|
)
|
|
_b(doc, (
|
|
f"{entity_name} HAS received data broker or pretexting-style "
|
|
f"inquiries during the reporting period. {desc}"
|
|
))
|
|
|
|
_h(doc, "7. Breach Log Summary")
|
|
if not breaches:
|
|
_b(doc, (
|
|
f"{entity_name} experienced no CPNI breaches during the "
|
|
f"reporting period. No 47 CFR \u00a7 64.2011 notifications were "
|
|
f"required."
|
|
))
|
|
else:
|
|
_b(doc, (
|
|
f"{entity_name} experienced {len(breaches)} CPNI breach"
|
|
f"{'es' if len(breaches) != 1 else ''} during the reporting "
|
|
f"period; each was reported within 7 business days."
|
|
))
|
|
|
|
_h(doc, "8. Penalties, Truthfulness, and Perjury Acknowledgment")
|
|
_b(doc, (
|
|
f"{entity_name} and the undersigned acknowledge that CPNI rule "
|
|
f"violations may subject the carrier to forfeitures up to "
|
|
f"{MAX_FORFEITURE_PER_VIOLATION} per violation and up to "
|
|
f"{MAX_FORFEITURE_CAP} for any single act or failure to act "
|
|
f"(adjusted per 47 CFR \u00a7 1.80)."
|
|
))
|
|
_b(doc, (
|
|
"Pursuant to 47 CFR \u00a7 1.17, the undersigned represents that no "
|
|
"material factual information has been withheld and all statements "
|
|
"are truthful, accurate, and complete."
|
|
))
|
|
_b(doc, (
|
|
"The undersigned acknowledges that willful false statements are "
|
|
"punishable under Title 18, U.S.C. \u00a7 1001, and by forfeiture "
|
|
"under 47 U.S.C. \u00a7 503."
|
|
))
|
|
|
|
_h(doc, "9. Signature of Certifying Officer")
|
|
_b(doc, (
|
|
"I declare under penalty of perjury under the laws of the United "
|
|
"States of America that the foregoing is true and correct."
|
|
))
|
|
p = doc.add_paragraph(); _sp(p, after=0)
|
|
sig = doc.add_paragraph(); sig.add_run("_" * 45).font.size = Pt(10)
|
|
_sp(sig, after=2)
|
|
nm = doc.add_paragraph(); nr = nm.add_run(signer); nr.bold = True
|
|
nr.font.size = Pt(10); _sp(nm, after=2)
|
|
tpp = doc.add_paragraph()
|
|
tpp.add_run(f"{title}, {entity_name}").font.size = Pt(10)
|
|
_sp(tpp, after=2)
|
|
dp = doc.add_paragraph(); dp.add_run(f"Date: {today}").font.size = Pt(10)
|
|
_sp(dp, after=2)
|
|
|
|
out = Path(output_path)
|
|
out.parent.mkdir(parents=True, exist_ok=True)
|
|
doc.save(str(out))
|
|
LOG.info("CPNI IXC certification letter generated: %s", out)
|
|
return str(out)
|