Files
0pt/services/api
admin 6befaa7be7
CI (SIAX Cloud) / security (pull_request) Successful in 14s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 16s
Security Scan (SIAX Cloud) / security (push) Successful in 17s
CI (SIAX Cloud) / security (push) Successful in 29s
CI (SIAX Cloud) / integration (pull_request) Failing after 31s
CI (SIAX Cloud) / integration (push) Failing after 32s
CI (SIAX Cloud) / quality (pull_request) Successful in 36s
CI (SIAX Cloud) / quality (push) Successful in 38s
Python Engine CI (SIAX Cloud) / python-engine (push) Successful in 9m31s
Python Engine CI (SIAX Cloud) / python-engine (pull_request) Successful in 9m32s
test(er): resolv-determinism — match-pairs behöver hard-rule decided_by
_apply_matches ignorerar medvetet decided_by=score (defence in depth:
score/fuzzy får aldrig skapa canonical identity-länkar) — testernas
stub-bridge returnerade score-pairs och förväntade ändå merge → CI-fail var
implementationen som hade rätt. Pairs är nu decided_by=stable-identifiers.v3.

Verifierat: pytest services/api/tests 6+14 pass, full unit 945/945,
typecheck EXIT 0, real-Postgres 5/5.
2026-09-07 19:50:02 +02:00
..

0pt data engine (services/api)

The legal data motor (docs/06). FastAPI orchestrator + worker pipeline that turn compliant sources into delivered, provenance-tagged data. Runs on a VPS via ../../infra/docker-compose.yml — not on Vercel (long jobs).

Sourcing boundary (CLAUDE.md §1 — non-negotiable)

Per field × market, in strict order: official API/bulk → authorized public web (robots + rate limits) → licensed partner data → otherwise level 0 "ej tillgänglig". We never invent values.

Deliberately excluded (never add here): WAF/bot-detection bypass, FlareSolverr, stealth/undetected browsers, proxy/fingerprint rotation to evade bans, scraping behind login walls, automated fake-account creation. This is the honest-accuracy moat.

Layout

  • sources/connectors.py — compliant connectors (GLEIF, Brønnøysund, Companies House live; PRH/CVR/Bolagsverket gated on verified terms → level 0 until wired).
  • sources/sources.yaml — source registry (access/licence/cadence; VERIFY terms).
  • orchestrator/main.py — REST API (health, sources, estimates, orders, jobs) per docs/04.
  • workers/adaptive_router.py — picks the cheapest compliant method per market (api > bulk > authorized_web > licensed). No bypass tiers.
  • workers/pipeline.py — sourcing → extraction → structuring (dedup) → enrichment/fusion → QA (drops rows below the order's confidence target). Writes provenance per field.

Run locally

pip install -r requirements.txt
uvicorn orchestrator.main:app --reload          # API on :8000
python -m workers.run                            # run one demo job

Reconciliation note

Supersedes the earlier nordic-eu-data-platform backend: the compliant connectors + pipeline are migrated here; the FlareSolverr/stealth/proxy/fake-account paths and the test_bypass_chain/test_proxy_pool examples are intentionally not carried over.