MediawikiCIT - User contributions [en]

Main Page

2026-08-28T15:42:51Z

Justinaquino: Move Nextcloud workshop link to System Administration & Self-Hosting section

__NOTOC__
<div style="background:#f8f9fa; border:1px solid #ddd; border-radius:4px; padding:12px 16px; margin-bottom:20px;">
Welcome to the '''Comfac IT Knowledge Base'''. Use the sections below to find guides, SOPs, and references organized by topic.
</div>

== New Articles ==

Recent additions to this wiki, newest first — each is also filed in its permanent topic section below. '''Keep this list to the 10 most recent''' and prune as new pages are added; nothing is deleted, entries just roll off the feed.
* 2026-08-28 — '''[[Nextcloud App Development Workshop 260825]]''' — Beginner workshop (Anna Larch, Nextcloud DevRel): OCP vs OC, request lifecycle, entities/migrations/indices, events, background jobs, app-store submission — ''Filed under: System Administration & Self-Hosting''

* 2026-08-09 — '''[[SOP: Third-Party Software Security Review]]''' — due-diligence workflow for GitHub/OSS code (data-leak focus) + first review result: offline-browser-translate, CLEAN WITH CONDITIONS — ''Filed under: IT Operations & SOPs''
* 2026-08-02 — '''[[Hugging Face Practical Guide 260802]]''' — Spaces, local app builds, the Model Hub / dataset viewer, and the enterprise compute tier; the route from stock models to tailored ones and to training on our own data — ''Filed under: AI & Machine Learning''
* 2026-08-01 — '''[[Audio Learning]]''' — Converting research and study material into scripts written to be listened to rather than read; shared Comfac tool — ''Filed under: Tools & Productivity''
* 2026-07-31 — '''[[Resume CV Renamer Pipeline]]''' — CV intake → OCR / vision-OCR → AI field extraction → date-stamped rename + VCF export — ''Filed under: Tools & Productivity''
* 2026-07-15 — '''[[De-Risk: Sovereign Training Data v0.1]]''' — Frontier-Token Quarantine and the ToS-clean path to owned model weights, prompted by the June 2026 Fable 5 export-control suspension — ''Filed under: AI & Machine Learning''
* 2026-07-15 — '''[[Directed Execution: Token-Efficient Agent Development Process]]''' — Director/Executor/Checker loop and skill distillation for token-efficient agent development — ''Filed under: AI & Machine Learning''
* 2026-07-11 — '''[[Tutorial: Exposing a Dockerized Web App via NPM Direct DB Config]]''' — Expose a Dockerized web app by editing Nginx Proxy Manager's database directly — ''Filed under: System Administration & Self-Hosting''
* 2026-05-02 — '''[[Organizing Coder Terminals]]''' — Tmux + dynamic titles for managing multiple AI agent terminals — ''Filed under: System Administration & Self-Hosting''
* 2026-04-28 — '''[[Forgejo Pages]]'''
* 2026-04-24 — '''[[Buzz Transcription]]''' — Offline audio/meeting transcription via Whisper (whisper.cpp), Flatpak + Vulkan GPU acceleration — ''Filed under: Tools & Productivity''

== Newest Pages (auto) ==

The 10 most recently created pages — maintains itself.

{{Special:NewPages/10}}

== ERPNext / Frappe ==
<div style="column-count:2; column-gap:2em;">
* [[Frappe HRMS]] — '''HR & Payroll''' (with Philippine Localization)
* [[Frappe ERPNext/Webshop]] — '''E-Commerce Webshop''' (setup, architecture, chapters)
* [[Manufacturing v16 260125]]
* [[ERpnext Asset Management Procedure 260113]]
* [[ERPNext HR Module Outline]]
* [[ERPNEXT Payroll POC 251212]]
* [[Comfac ERPNext Strategy Canvas (Expanded)]]
* [[PAD-Driven ERPNext Strategy 260303]] — PAD/AI-agentic implementation strategy for Frappe ERPNext
* [[ERPNext v15 Docker Setup Guide]] — Local Docker setup for evaluation, testing, and student use
* [[Frappe Links and References]]
* [[Using Frappe Wiki]]
* [https://docs.frappe.io/cloud/guidelines-for-contributing-regional-compliance-app Guidelines for Contributing Regional Compliance App]
* [https://docs.frappe.io/cloud/what-are-benches-and-bench-groups What are Benches?]
</div>

== System Administration & Self-Hosting ==
<div style="column-count:2; column-gap:2em;">
* [[Nextcloud App Development Workshop 260825]] — Beginner workshop (Anna Larch, Nextcloud DevRel, 2026-08-25)
* [[Networking PfSense Index]] — Consolidated index of all networking, pfSense, DNS, and infrastructure guides
* [[System Hardening Strategy: Win2Lin Migration & Infrastructure 251129]]
* [[Controller Systems 251213-01]]
* [[Power Distribution Tree 251213]]
* [[Introduction: Why Self-Host Your Email?]]
* [[Mailcow + Thunderbird Setup Guide (Email + Calendar)]]
* [[Mailcow SOGo: Creating Filters for Events, Approvals, and Organizational Emails]]
* [[Spoof Timezone Extension – Setup Guide for Comfac Staff]]
* [[Viber Focus-Stealing]]
* [[🌐 WordPress Website — *You Own Everything, Learn Everything*]]
* [[Portainer to Docker Compose Migration Guide]]
* [[Organizing Coder Terminals]] — Tmux + dynamic titles for managing multiple AI agent terminals
* [[Editing Mastodon Docker Deployment Guide 260402]]
</div>

== Storage & Hardware ==
<div style="column-count:2; column-gap:2em;">
* [[TrueNAS Configuration Options & Scale Options 251130]]
* [[TrueNAS Business Plan: Project 251212]]
* [[Comparison: TrueNAS Mini X+ vs Dell Precision 3680 Tower (2025)]]
* [[Backblaze Drive Stats for Server and Storage Qualification]]
* [[Industrial Controllers and Water Utilities 251011]]
</div>

== AI & Machine Learning ==
<div style="column-count:2; column-gap:2em;">
* [[OpenWebUI - 251128-justin]]
* [[Comfac GPU Scaling and AI Research Goals]]
* [[🧠 Process: Selecting and Installing the Right Ollama Model for Your Hardware]]
* [[Ollama GNOME System Tray Panel 260401]] — GNOME system tray toggle to start/stop Ollama and reclaim VRAM
* [[Proceedural Agentic Development Methodology 260304]] — Methodology for systematic agent use
* [[Project OpenCoder: AI Independence Initiative]] — Strategic roadmap for manufacturing intelligence
* [[OpenCoder Qwen35 Agentic Setup 260330]] — Qwen3.5 Modelfile fix for tool calling in OpenCode; thinking mode suppression; HDD vs SSD findings
* [[OpenCode Multi-Provider Configuration Guide 260401]] — Dual-mode AI coding setup with Kimi cloud + Ollama local models via Distrobox
* [[PAD-Driven ERPNext Strategy 260303]] — Procedural Agentic Development for Frappe/ERPNext configuration and deployment
* [[Directed Execution: Token-Efficient Agent Development Process]] — Director/Executor/Checker loop and skill distillation for token-efficient agent development (v0.1, 2026-07-15)
* [[De-Risk: Sovereign Training Data v0.1]] — Frontier-Token Quarantine and the ToS-clean path to owned model weights, prompted by the June 2026 Fable 5 export-control suspension (v0.1, 2026-07-15)
* [[Hugging Face Practical Guide 260802]] — Spaces, local app builds, the Model Hub / dataset viewer, and the enterprise compute tier; the route from stock models to tailored ones and to training on our own data (2026-08-02)
</div>

== Job Descriptions ==
<div style="column-count:2; column-gap:2em;">
* [[Job Descriptions]] — Index of all official job descriptions (IT, Engineering, Sales)
* [[JD IT Project Staff]] — IT Project Staff
* [[JD Security Compliance Assistant 260224]] — Security and Compliance Assistant (SCA)
* [[JD Engineering Designer 260108]] — Engineering Designer
* [[JD Engineering Supervisor 260109]] — Engineering Supervisor
* [[JD Technical Sales 260112]] — Technical Sales Engineer
* [[JD Marketing Assistant 251119]] — Marketing Assistant
</div>

== IT Operations & SOPs ==
<div style="column-count:2; column-gap:2em;">
* [[SOP: Third-Party Software Security Review]] — vet GitHub/OSS code for data leakage and exploits before install; workflow, criteria, and review log
* [[SCA Program Plan 260320]] — Security & Compliance Assistant Program Plan v3 (ISO 9001/27001, PDCA, distributed audit model)
* [[SOP: Inter-Company Ordering and Production Process 260203]] — Ordering and production workflow between Sister Companies and the Cabuyao Plant
* [[Memo: Team Roles & Reporting Process Clarification 260320]] — Role boundaries, data ownership, and the new ERPNext-driven reporting paradigm
* [[Standard Operating Procedure: Distributed Minute Taking & Task Ownership 251208]]
* [[Business Continuity]]
* [[Procedure: CC-Blast Data Breach Prevention]]
* [[8D (Eight Discipline) Problem Solving Procedure]]
* [[Offline Malware Remediation & Data Recovery]]
* [[Troubleshooting: Access & Permission Issues]]
* [[Steps to Repair and OCR a Scanned or Corrupted PDF in Ubuntu]]
* [[IT IMPORTS PROCESSES]]
* [[IT Purchase Requests 241126]]
* [[IT REQUEST (OP-ERP-ITR) - EDITED 250801]]
</div>

== Sales & Business ==
<div style="column-count:2; column-gap:2em;">
* [[Comfac Sales Knowledge Base]]
* [[Comfac CRM – Customer Qualification & Conversion Process]]
* [[Partner Reseller Pricing 251109]]
* [[Biz Analysis Methodology 251109]]
* [[2026 MIS IT KRA KPI Biz Plan]]
* [[SALES INVOICE TAX OUTPUT 250829]]
* [[Projects in Process Report 251023]]
</div>

== Tools & Productivity ==
<div style="column-count:2; column-gap:2em;">
* [[Excel Description Filler Tool 📝]]
* [[Resume CV Renamer Pipeline|Resume / CV Renamer Pipeline]] — CV intake → OCR / vision-OCR → AI field extraction → date-stamped rename + VCF export
* [https://github.com/Comfac-Global-Group/comfac-studies Comfac Studies - Spaced Repetiton Active Recall]
* [[LibreOffice / Nextcloud Office – "Due Tasks" Conditional Formatting]]
* [[Google Drive and Shared Drive Training]]
* [[260108 CGG- GitHub Administration Guide]]
</div>

== Wiki & Documentation ==
<div style="column-count:2; column-gap:2em;">
* [[Mediawiki Setting Up Guide]]
* [[Contributing to Only Office 260307]]
* [[Mediawiki Additional Configuration]]
* [[Mediawiki Docker Migration Guide]]
* [[Home]]
</div>

== Tutorials ==
<div style="column-count:2; column-gap:2em;">
* [[Claude Code Isolation and Burner Workflow 260211]] — Secure AI development environment setup
* [[Opencode isolation and burner workflow 260216]] — OpenCode CLI isolation procedures
* [[LibreOffice Calc NumToWords Extension Complete Guide]] — Extension development
* [[ERPNext v15 Docker Setup Guide]] — ERPNext v15 local Docker setup (students, evaluators, thin-client demos)
* [[Erpnextv15-SSH-setup-241111]] — ERPNext v15 SSH/Portainer production setup
* [[Git-Mediawiki Local Editing 260223]] — Wiki editing with Git
* [[Understanding & Fixing Kernel Panics 260212]] — System debugging
* [[OpenCode in Android Termux 260303]] — OpenCode in Android
* [[OpenCoder Qwen35 Agentic Setup 260330]] — Qwen3.5 agentic setup: Modelfile, tool calling fix, storage impact
* [[Lora Basics 260304]] — LORA research
* [https://github.com/anomalyco/opencode/issues/4283#issuecomment-4083399210 Opencode Copy-paste Clipboard doesnt Work - Solution] https://github.com/anomalyco/opencode/issues/4283#issuecomment-4083399210
</div>

== Research ==
<div style="column-count:2; column-gap:2em;">
* [[Ladybird Browser]] — Browser engine development
* [[Computing Architecture]] — System design principles
* [[Backblaze Drive Stats for Server and Storage Qualification 260219]] — Drive reliability analysis
</div>

----

== For Users Only ==
* [[Private:Private Ngani]]
* [[Private:Private Nganipart2]]

== CIT-OJT Project Documentations ==
* [[OJTDocs: For OJTs only]]

== Need Help? ==
<div style="column-count:2; column-gap:2em;">
* [[Troubleshooting: Access & Permission Issues]]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents MediaWiki User's Guide]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Configuration settings]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ]
</div>

Main Page

2026-08-28T15:42:34Z

Justinaquino: Topic link: Nextcloud App Development Workshop 260825

__NOTOC__
<div style="background:#f8f9fa; border:1px solid #ddd; border-radius:4px; padding:12px 16px; margin-bottom:20px;">
Welcome to the '''Comfac IT Knowledge Base'''. Use the sections below to find guides, SOPs, and references organized by topic.
</div>

== New Articles ==

Recent additions to this wiki, newest first — each is also filed in its permanent topic section below. '''Keep this list to the 10 most recent''' and prune as new pages are added; nothing is deleted, entries just roll off the feed.
* 2026-08-28 — '''[[Nextcloud App Development Workshop 260825]]''' — Beginner workshop (Anna Larch, Nextcloud DevRel): OCP vs OC, request lifecycle, entities/migrations/indices, events, background jobs, app-store submission — ''Filed under: System Administration & Self-Hosting''

* 2026-08-09 — '''[[SOP: Third-Party Software Security Review]]''' — due-diligence workflow for GitHub/OSS code (data-leak focus) + first review result: offline-browser-translate, CLEAN WITH CONDITIONS — ''Filed under: IT Operations & SOPs''
* 2026-08-02 — '''[[Hugging Face Practical Guide 260802]]''' — Spaces, local app builds, the Model Hub / dataset viewer, and the enterprise compute tier; the route from stock models to tailored ones and to training on our own data — ''Filed under: AI & Machine Learning''
* 2026-08-01 — '''[[Audio Learning]]''' — Converting research and study material into scripts written to be listened to rather than read; shared Comfac tool — ''Filed under: Tools & Productivity''
* 2026-07-31 — '''[[Resume CV Renamer Pipeline]]''' — CV intake → OCR / vision-OCR → AI field extraction → date-stamped rename + VCF export — ''Filed under: Tools & Productivity''
* 2026-07-15 — '''[[De-Risk: Sovereign Training Data v0.1]]''' — Frontier-Token Quarantine and the ToS-clean path to owned model weights, prompted by the June 2026 Fable 5 export-control suspension — ''Filed under: AI & Machine Learning''
* 2026-07-15 — '''[[Directed Execution: Token-Efficient Agent Development Process]]''' — Director/Executor/Checker loop and skill distillation for token-efficient agent development — ''Filed under: AI & Machine Learning''
* 2026-07-11 — '''[[Tutorial: Exposing a Dockerized Web App via NPM Direct DB Config]]''' — Expose a Dockerized web app by editing Nginx Proxy Manager's database directly — ''Filed under: System Administration & Self-Hosting''
* 2026-05-02 — '''[[Organizing Coder Terminals]]''' — Tmux + dynamic titles for managing multiple AI agent terminals — ''Filed under: System Administration & Self-Hosting''
* 2026-04-28 — '''[[Forgejo Pages]]'''
* 2026-04-24 — '''[[Buzz Transcription]]''' — Offline audio/meeting transcription via Whisper (whisper.cpp), Flatpak + Vulkan GPU acceleration — ''Filed under: Tools & Productivity''

== Newest Pages (auto) ==

The 10 most recently created pages — maintains itself.

{{Special:NewPages/10}}

== ERPNext / Frappe ==
<div style="column-count:2; column-gap:2em;">
* [[Nextcloud App Development Workshop 260825]] — Beginner workshop (Anna Larch, Nextcloud DevRel, 2026-08-25)
* [[Frappe HRMS]] — '''HR & Payroll''' (with Philippine Localization)
* [[Frappe ERPNext/Webshop]] — '''E-Commerce Webshop''' (setup, architecture, chapters)
* [[Manufacturing v16 260125]]
* [[ERpnext Asset Management Procedure 260113]]
* [[ERPNext HR Module Outline]]
* [[ERPNEXT Payroll POC 251212]]
* [[Comfac ERPNext Strategy Canvas (Expanded)]]
* [[PAD-Driven ERPNext Strategy 260303]] — PAD/AI-agentic implementation strategy for Frappe ERPNext
* [[ERPNext v15 Docker Setup Guide]] — Local Docker setup for evaluation, testing, and student use
* [[Frappe Links and References]]
* [[Using Frappe Wiki]]
* [https://docs.frappe.io/cloud/guidelines-for-contributing-regional-compliance-app Guidelines for Contributing Regional Compliance App]
* [https://docs.frappe.io/cloud/what-are-benches-and-bench-groups What are Benches?]
</div>

== System Administration & Self-Hosting ==
<div style="column-count:2; column-gap:2em;">
* [[Networking PfSense Index]] — Consolidated index of all networking, pfSense, DNS, and infrastructure guides
* [[System Hardening Strategy: Win2Lin Migration & Infrastructure 251129]]
* [[Controller Systems 251213-01]]
* [[Power Distribution Tree 251213]]
* [[Introduction: Why Self-Host Your Email?]]
* [[Mailcow + Thunderbird Setup Guide (Email + Calendar)]]
* [[Mailcow SOGo: Creating Filters for Events, Approvals, and Organizational Emails]]
* [[Spoof Timezone Extension – Setup Guide for Comfac Staff]]
* [[Viber Focus-Stealing]]
* [[🌐 WordPress Website — *You Own Everything, Learn Everything*]]
* [[Portainer to Docker Compose Migration Guide]]
* [[Organizing Coder Terminals]] — Tmux + dynamic titles for managing multiple AI agent terminals
* [[Editing Mastodon Docker Deployment Guide 260402]]
</div>

== Storage & Hardware ==
<div style="column-count:2; column-gap:2em;">
* [[TrueNAS Configuration Options & Scale Options 251130]]
* [[TrueNAS Business Plan: Project 251212]]
* [[Comparison: TrueNAS Mini X+ vs Dell Precision 3680 Tower (2025)]]
* [[Backblaze Drive Stats for Server and Storage Qualification]]
* [[Industrial Controllers and Water Utilities 251011]]
</div>

== AI & Machine Learning ==
<div style="column-count:2; column-gap:2em;">
* [[OpenWebUI - 251128-justin]]
* [[Comfac GPU Scaling and AI Research Goals]]
* [[🧠 Process: Selecting and Installing the Right Ollama Model for Your Hardware]]
* [[Ollama GNOME System Tray Panel 260401]] — GNOME system tray toggle to start/stop Ollama and reclaim VRAM
* [[Proceedural Agentic Development Methodology 260304]] — Methodology for systematic agent use
* [[Project OpenCoder: AI Independence Initiative]] — Strategic roadmap for manufacturing intelligence
* [[OpenCoder Qwen35 Agentic Setup 260330]] — Qwen3.5 Modelfile fix for tool calling in OpenCode; thinking mode suppression; HDD vs SSD findings
* [[OpenCode Multi-Provider Configuration Guide 260401]] — Dual-mode AI coding setup with Kimi cloud + Ollama local models via Distrobox
* [[PAD-Driven ERPNext Strategy 260303]] — Procedural Agentic Development for Frappe/ERPNext configuration and deployment
* [[Directed Execution: Token-Efficient Agent Development Process]] — Director/Executor/Checker loop and skill distillation for token-efficient agent development (v0.1, 2026-07-15)
* [[De-Risk: Sovereign Training Data v0.1]] — Frontier-Token Quarantine and the ToS-clean path to owned model weights, prompted by the June 2026 Fable 5 export-control suspension (v0.1, 2026-07-15)
* [[Hugging Face Practical Guide 260802]] — Spaces, local app builds, the Model Hub / dataset viewer, and the enterprise compute tier; the route from stock models to tailored ones and to training on our own data (2026-08-02)
</div>

== Job Descriptions ==
<div style="column-count:2; column-gap:2em;">
* [[Job Descriptions]] — Index of all official job descriptions (IT, Engineering, Sales)
* [[JD IT Project Staff]] — IT Project Staff
* [[JD Security Compliance Assistant 260224]] — Security and Compliance Assistant (SCA)
* [[JD Engineering Designer 260108]] — Engineering Designer
* [[JD Engineering Supervisor 260109]] — Engineering Supervisor
* [[JD Technical Sales 260112]] — Technical Sales Engineer
* [[JD Marketing Assistant 251119]] — Marketing Assistant
</div>

== IT Operations & SOPs ==
<div style="column-count:2; column-gap:2em;">
* [[SOP: Third-Party Software Security Review]] — vet GitHub/OSS code for data leakage and exploits before install; workflow, criteria, and review log
* [[SCA Program Plan 260320]] — Security & Compliance Assistant Program Plan v3 (ISO 9001/27001, PDCA, distributed audit model)
* [[SOP: Inter-Company Ordering and Production Process 260203]] — Ordering and production workflow between Sister Companies and the Cabuyao Plant
* [[Memo: Team Roles & Reporting Process Clarification 260320]] — Role boundaries, data ownership, and the new ERPNext-driven reporting paradigm
* [[Standard Operating Procedure: Distributed Minute Taking & Task Ownership 251208]]
* [[Business Continuity]]
* [[Procedure: CC-Blast Data Breach Prevention]]
* [[8D (Eight Discipline) Problem Solving Procedure]]
* [[Offline Malware Remediation & Data Recovery]]
* [[Troubleshooting: Access & Permission Issues]]
* [[Steps to Repair and OCR a Scanned or Corrupted PDF in Ubuntu]]
* [[IT IMPORTS PROCESSES]]
* [[IT Purchase Requests 241126]]
* [[IT REQUEST (OP-ERP-ITR) - EDITED 250801]]
</div>

== Sales & Business ==
<div style="column-count:2; column-gap:2em;">
* [[Comfac Sales Knowledge Base]]
* [[Comfac CRM – Customer Qualification & Conversion Process]]
* [[Partner Reseller Pricing 251109]]
* [[Biz Analysis Methodology 251109]]
* [[2026 MIS IT KRA KPI Biz Plan]]
* [[SALES INVOICE TAX OUTPUT 250829]]
* [[Projects in Process Report 251023]]
</div>

== Tools & Productivity ==
<div style="column-count:2; column-gap:2em;">
* [[Excel Description Filler Tool 📝]]
* [[Resume CV Renamer Pipeline|Resume / CV Renamer Pipeline]] — CV intake → OCR / vision-OCR → AI field extraction → date-stamped rename + VCF export
* [https://github.com/Comfac-Global-Group/comfac-studies Comfac Studies - Spaced Repetiton Active Recall]
* [[LibreOffice / Nextcloud Office – "Due Tasks" Conditional Formatting]]
* [[Google Drive and Shared Drive Training]]
* [[260108 CGG- GitHub Administration Guide]]
</div>

== Wiki & Documentation ==
<div style="column-count:2; column-gap:2em;">
* [[Mediawiki Setting Up Guide]]
* [[Contributing to Only Office 260307]]
* [[Mediawiki Additional Configuration]]
* [[Mediawiki Docker Migration Guide]]
* [[Home]]
</div>

== Tutorials ==
<div style="column-count:2; column-gap:2em;">
* [[Claude Code Isolation and Burner Workflow 260211]] — Secure AI development environment setup
* [[Opencode isolation and burner workflow 260216]] — OpenCode CLI isolation procedures
* [[LibreOffice Calc NumToWords Extension Complete Guide]] — Extension development
* [[ERPNext v15 Docker Setup Guide]] — ERPNext v15 local Docker setup (students, evaluators, thin-client demos)
* [[Erpnextv15-SSH-setup-241111]] — ERPNext v15 SSH/Portainer production setup
* [[Git-Mediawiki Local Editing 260223]] — Wiki editing with Git
* [[Understanding & Fixing Kernel Panics 260212]] — System debugging
* [[OpenCode in Android Termux 260303]] — OpenCode in Android
* [[OpenCoder Qwen35 Agentic Setup 260330]] — Qwen3.5 agentic setup: Modelfile, tool calling fix, storage impact
* [[Lora Basics 260304]] — LORA research
* [https://github.com/anomalyco/opencode/issues/4283#issuecomment-4083399210 Opencode Copy-paste Clipboard doesnt Work - Solution] https://github.com/anomalyco/opencode/issues/4283#issuecomment-4083399210
</div>

== Research ==
<div style="column-count:2; column-gap:2em;">
* [[Ladybird Browser]] — Browser engine development
* [[Computing Architecture]] — System design principles
* [[Backblaze Drive Stats for Server and Storage Qualification 260219]] — Drive reliability analysis
</div>

----

== For Users Only ==
* [[Private:Private Ngani]]
* [[Private:Private Nganipart2]]

== CIT-OJT Project Documentations ==
* [[OJTDocs: For OJTs only]]

== Need Help? ==
<div style="column-count:2; column-gap:2em;">
* [[Troubleshooting: Access & Permission Issues]]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents MediaWiki User's Guide]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Configuration settings]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ]
</div>

Main Page

2026-08-28T15:42:29Z

Justinaquino: Feed: Nextcloud App Development Workshop 260825

__NOTOC__
<div style="background:#f8f9fa; border:1px solid #ddd; border-radius:4px; padding:12px 16px; margin-bottom:20px;">
Welcome to the '''Comfac IT Knowledge Base'''. Use the sections below to find guides, SOPs, and references organized by topic.
</div>

== New Articles ==

Recent additions to this wiki, newest first — each is also filed in its permanent topic section below. '''Keep this list to the 10 most recent''' and prune as new pages are added; nothing is deleted, entries just roll off the feed.
* 2026-08-28 — '''[[Nextcloud App Development Workshop 260825]]''' — Beginner workshop (Anna Larch, Nextcloud DevRel): OCP vs OC, request lifecycle, entities/migrations/indices, events, background jobs, app-store submission — ''Filed under: System Administration & Self-Hosting''

* 2026-08-09 — '''[[SOP: Third-Party Software Security Review]]''' — due-diligence workflow for GitHub/OSS code (data-leak focus) + first review result: offline-browser-translate, CLEAN WITH CONDITIONS — ''Filed under: IT Operations & SOPs''
* 2026-08-02 — '''[[Hugging Face Practical Guide 260802]]''' — Spaces, local app builds, the Model Hub / dataset viewer, and the enterprise compute tier; the route from stock models to tailored ones and to training on our own data — ''Filed under: AI & Machine Learning''
* 2026-08-01 — '''[[Audio Learning]]''' — Converting research and study material into scripts written to be listened to rather than read; shared Comfac tool — ''Filed under: Tools & Productivity''
* 2026-07-31 — '''[[Resume CV Renamer Pipeline]]''' — CV intake → OCR / vision-OCR → AI field extraction → date-stamped rename + VCF export — ''Filed under: Tools & Productivity''
* 2026-07-15 — '''[[De-Risk: Sovereign Training Data v0.1]]''' — Frontier-Token Quarantine and the ToS-clean path to owned model weights, prompted by the June 2026 Fable 5 export-control suspension — ''Filed under: AI & Machine Learning''
* 2026-07-15 — '''[[Directed Execution: Token-Efficient Agent Development Process]]''' — Director/Executor/Checker loop and skill distillation for token-efficient agent development — ''Filed under: AI & Machine Learning''
* 2026-07-11 — '''[[Tutorial: Exposing a Dockerized Web App via NPM Direct DB Config]]''' — Expose a Dockerized web app by editing Nginx Proxy Manager's database directly — ''Filed under: System Administration & Self-Hosting''
* 2026-05-02 — '''[[Organizing Coder Terminals]]''' — Tmux + dynamic titles for managing multiple AI agent terminals — ''Filed under: System Administration & Self-Hosting''
* 2026-04-28 — '''[[Forgejo Pages]]'''
* 2026-04-24 — '''[[Buzz Transcription]]''' — Offline audio/meeting transcription via Whisper (whisper.cpp), Flatpak + Vulkan GPU acceleration — ''Filed under: Tools & Productivity''

== Newest Pages (auto) ==

The 10 most recently created pages — maintains itself.

{{Special:NewPages/10}}

== ERPNext / Frappe ==
<div style="column-count:2; column-gap:2em;">
* [[Frappe HRMS]] — '''HR & Payroll''' (with Philippine Localization)
* [[Frappe ERPNext/Webshop]] — '''E-Commerce Webshop''' (setup, architecture, chapters)
* [[Manufacturing v16 260125]]
* [[ERpnext Asset Management Procedure 260113]]
* [[ERPNext HR Module Outline]]
* [[ERPNEXT Payroll POC 251212]]
* [[Comfac ERPNext Strategy Canvas (Expanded)]]
* [[PAD-Driven ERPNext Strategy 260303]] — PAD/AI-agentic implementation strategy for Frappe ERPNext
* [[ERPNext v15 Docker Setup Guide]] — Local Docker setup for evaluation, testing, and student use
* [[Frappe Links and References]]
* [[Using Frappe Wiki]]
* [https://docs.frappe.io/cloud/guidelines-for-contributing-regional-compliance-app Guidelines for Contributing Regional Compliance App]
* [https://docs.frappe.io/cloud/what-are-benches-and-bench-groups What are Benches?]
</div>

== System Administration & Self-Hosting ==
<div style="column-count:2; column-gap:2em;">
* [[Networking PfSense Index]] — Consolidated index of all networking, pfSense, DNS, and infrastructure guides
* [[System Hardening Strategy: Win2Lin Migration & Infrastructure 251129]]
* [[Controller Systems 251213-01]]
* [[Power Distribution Tree 251213]]
* [[Introduction: Why Self-Host Your Email?]]
* [[Mailcow + Thunderbird Setup Guide (Email + Calendar)]]
* [[Mailcow SOGo: Creating Filters for Events, Approvals, and Organizational Emails]]
* [[Spoof Timezone Extension – Setup Guide for Comfac Staff]]
* [[Viber Focus-Stealing]]
* [[🌐 WordPress Website — *You Own Everything, Learn Everything*]]
* [[Portainer to Docker Compose Migration Guide]]
* [[Organizing Coder Terminals]] — Tmux + dynamic titles for managing multiple AI agent terminals
* [[Editing Mastodon Docker Deployment Guide 260402]]
</div>

== Storage & Hardware ==
<div style="column-count:2; column-gap:2em;">
* [[TrueNAS Configuration Options & Scale Options 251130]]
* [[TrueNAS Business Plan: Project 251212]]
* [[Comparison: TrueNAS Mini X+ vs Dell Precision 3680 Tower (2025)]]
* [[Backblaze Drive Stats for Server and Storage Qualification]]
* [[Industrial Controllers and Water Utilities 251011]]
</div>

== AI & Machine Learning ==
<div style="column-count:2; column-gap:2em;">
* [[OpenWebUI - 251128-justin]]
* [[Comfac GPU Scaling and AI Research Goals]]
* [[🧠 Process: Selecting and Installing the Right Ollama Model for Your Hardware]]
* [[Ollama GNOME System Tray Panel 260401]] — GNOME system tray toggle to start/stop Ollama and reclaim VRAM
* [[Proceedural Agentic Development Methodology 260304]] — Methodology for systematic agent use
* [[Project OpenCoder: AI Independence Initiative]] — Strategic roadmap for manufacturing intelligence
* [[OpenCoder Qwen35 Agentic Setup 260330]] — Qwen3.5 Modelfile fix for tool calling in OpenCode; thinking mode suppression; HDD vs SSD findings
* [[OpenCode Multi-Provider Configuration Guide 260401]] — Dual-mode AI coding setup with Kimi cloud + Ollama local models via Distrobox
* [[PAD-Driven ERPNext Strategy 260303]] — Procedural Agentic Development for Frappe/ERPNext configuration and deployment
* [[Directed Execution: Token-Efficient Agent Development Process]] — Director/Executor/Checker loop and skill distillation for token-efficient agent development (v0.1, 2026-07-15)
* [[De-Risk: Sovereign Training Data v0.1]] — Frontier-Token Quarantine and the ToS-clean path to owned model weights, prompted by the June 2026 Fable 5 export-control suspension (v0.1, 2026-07-15)
* [[Hugging Face Practical Guide 260802]] — Spaces, local app builds, the Model Hub / dataset viewer, and the enterprise compute tier; the route from stock models to tailored ones and to training on our own data (2026-08-02)
</div>

== Job Descriptions ==
<div style="column-count:2; column-gap:2em;">
* [[Job Descriptions]] — Index of all official job descriptions (IT, Engineering, Sales)
* [[JD IT Project Staff]] — IT Project Staff
* [[JD Security Compliance Assistant 260224]] — Security and Compliance Assistant (SCA)
* [[JD Engineering Designer 260108]] — Engineering Designer
* [[JD Engineering Supervisor 260109]] — Engineering Supervisor
* [[JD Technical Sales 260112]] — Technical Sales Engineer
* [[JD Marketing Assistant 251119]] — Marketing Assistant
</div>

== IT Operations & SOPs ==
<div style="column-count:2; column-gap:2em;">
* [[SOP: Third-Party Software Security Review]] — vet GitHub/OSS code for data leakage and exploits before install; workflow, criteria, and review log
* [[SCA Program Plan 260320]] — Security & Compliance Assistant Program Plan v3 (ISO 9001/27001, PDCA, distributed audit model)
* [[SOP: Inter-Company Ordering and Production Process 260203]] — Ordering and production workflow between Sister Companies and the Cabuyao Plant
* [[Memo: Team Roles & Reporting Process Clarification 260320]] — Role boundaries, data ownership, and the new ERPNext-driven reporting paradigm
* [[Standard Operating Procedure: Distributed Minute Taking & Task Ownership 251208]]
* [[Business Continuity]]
* [[Procedure: CC-Blast Data Breach Prevention]]
* [[8D (Eight Discipline) Problem Solving Procedure]]
* [[Offline Malware Remediation & Data Recovery]]
* [[Troubleshooting: Access & Permission Issues]]
* [[Steps to Repair and OCR a Scanned or Corrupted PDF in Ubuntu]]
* [[IT IMPORTS PROCESSES]]
* [[IT Purchase Requests 241126]]
* [[IT REQUEST (OP-ERP-ITR) - EDITED 250801]]
</div>

== Sales & Business ==
<div style="column-count:2; column-gap:2em;">
* [[Comfac Sales Knowledge Base]]
* [[Comfac CRM – Customer Qualification & Conversion Process]]
* [[Partner Reseller Pricing 251109]]
* [[Biz Analysis Methodology 251109]]
* [[2026 MIS IT KRA KPI Biz Plan]]
* [[SALES INVOICE TAX OUTPUT 250829]]
* [[Projects in Process Report 251023]]
</div>

== Tools & Productivity ==
<div style="column-count:2; column-gap:2em;">
* [[Excel Description Filler Tool 📝]]
* [[Resume CV Renamer Pipeline|Resume / CV Renamer Pipeline]] — CV intake → OCR / vision-OCR → AI field extraction → date-stamped rename + VCF export
* [https://github.com/Comfac-Global-Group/comfac-studies Comfac Studies - Spaced Repetiton Active Recall]
* [[LibreOffice / Nextcloud Office – "Due Tasks" Conditional Formatting]]
* [[Google Drive and Shared Drive Training]]
* [[260108 CGG- GitHub Administration Guide]]
</div>

== Wiki & Documentation ==
<div style="column-count:2; column-gap:2em;">
* [[Mediawiki Setting Up Guide]]
* [[Contributing to Only Office 260307]]
* [[Mediawiki Additional Configuration]]
* [[Mediawiki Docker Migration Guide]]
* [[Home]]
</div>

== Tutorials ==
<div style="column-count:2; column-gap:2em;">
* [[Claude Code Isolation and Burner Workflow 260211]] — Secure AI development environment setup
* [[Opencode isolation and burner workflow 260216]] — OpenCode CLI isolation procedures
* [[LibreOffice Calc NumToWords Extension Complete Guide]] — Extension development
* [[ERPNext v15 Docker Setup Guide]] — ERPNext v15 local Docker setup (students, evaluators, thin-client demos)
* [[Erpnextv15-SSH-setup-241111]] — ERPNext v15 SSH/Portainer production setup
* [[Git-Mediawiki Local Editing 260223]] — Wiki editing with Git
* [[Understanding & Fixing Kernel Panics 260212]] — System debugging
* [[OpenCode in Android Termux 260303]] — OpenCode in Android
* [[OpenCoder Qwen35 Agentic Setup 260330]] — Qwen3.5 agentic setup: Modelfile, tool calling fix, storage impact
* [[Lora Basics 260304]] — LORA research
* [https://github.com/anomalyco/opencode/issues/4283#issuecomment-4083399210 Opencode Copy-paste Clipboard doesnt Work - Solution] https://github.com/anomalyco/opencode/issues/4283#issuecomment-4083399210
</div>

== Research ==
<div style="column-count:2; column-gap:2em;">
* [[Ladybird Browser]] — Browser engine development
* [[Computing Architecture]] — System design principles
* [[Backblaze Drive Stats for Server and Storage Qualification 260219]] — Drive reliability analysis
</div>

----

== For Users Only ==
* [[Private:Private Ngani]]
* [[Private:Private Nganipart2]]

== CIT-OJT Project Documentations ==
* [[OJTDocs: For OJTs only]]

== Need Help? ==
<div style="column-count:2; column-gap:2em;">
* [[Troubleshooting: Access & Permission Issues]]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents MediaWiki User's Guide]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Configuration settings]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ]
</div>

Nextcloud App Development Workshop 260825

2026-08-28T15:41:38Z

Justinaquino: Create: Nextcloud app dev beginner workshop 260825 (video BQlm71K1AVM)

[https://youtu.be/BQlm71K1AVM '''Building your first Nextcloud app (beginner workshop)''' — watch on YouTube] (Nextcloud channel, 2026-08-25, 56 min)

Presented by Anna Larch (Nextcloud Developer Relations, ex-Talk developer; security team), with Marcel Müller answering chat. Foundations of Nextcloud app development: where your code sits, what it may call, and how it talks to the rest of the server. Every example comes from a real app — Nextcloud Talk, Dashboard, Theming, and Files reminders.

== Summary ==
* '''Public vs private API''' — build against <code>OCP\</code> (stable, documented); <code>OC\</code> is internal/legacy and can be removed between versions. Breaking changes to public APIs are announced ~5 major versions ahead. If it isn't in the developer manual, assume it can change.
* '''Request lifecycle''' — <code>index.php → routes → controller → service → mapper/DB → response</code>. Auth, CSRF, and rate limiting run before the controller; brute-force throttling runs inside it. Controllers translate HTTP; business logic belongs in services.
* '''Dependency injection''' — type-hint interfaces (<code>private IStorage $storage</code>); the container resolves what the instance actually uses. The <code>?string $userId</code> pattern is a nullable, immutable, cheap-to-filter user identifier resolved from the login.
* '''Entities & type casting''' — cast entity fields explicitly (bool, DateTime) because MariaDB/MySQL/Oracle/PostgreSQL disagree on tinyint/boolean and datetime handling.
* '''Migrations''' — <code>preSchemaChange</code> / <code>changeSchema</code> / <code>postSchemaChange</code>. Heavy data work goes into a one-time background job, never inline in an upgrade (her example: a 6–7 hour system-address-book update).
* '''Indices''' — add at table creation when possible; for existing large tables register a missing-index listener so the admin applies it via <code>occ</code> in a maintenance window. Debug slow queries with <code>EXPLAIN</code>.
* '''Event system''' — apps integrate by listening to core events (file created/modified/deleted, node updated), never by calling another app's code. Files reminders has no dependency on the Files app.
* '''Background jobs''' — extend <code>TimedJob</code>; cron flavors are cron / webcron / ajax (ajax gives no time guarantee). Use the maintenance window with time-insensitive jobs for heavy syncs.
* '''Scale traps''' — use folder search with limit/offset instead of full tree loads; chunk <code>IN</code> queries to 1,000 items (Oracle's limit); avoid N+1 queries; test on current + previous majors; profile with Blackfire.
* '''App store''' — validate info.xml, sign last, tarball = one top-level folder named the app ID, certificate request takes 2–4 days. Common rejections: CN/app-ID mismatch, bad archive structure, files changed after signing, invalid category.

== Key takeaways ==
# Use only <code>OCP\</code>; anything not in the developer manual can change.
# Controllers translate HTTP; services do the work; entities/mappers own the data — with type casting.
# Heavy work (migrations, tree walks, per-user loops) belongs in background jobs.
# Integrate via events, never by calling another app's code.
# Chunk <code>IN</code> queries to 1,000 for Oracle; test against the previous major too.
# Sign last; the tarball must contain exactly one top-level folder named the app ID.

== Resources ==
* Video: https://youtu.be/BQlm71K1AVM
* Nextcloud developer program and resources: https://nextcloud.com/developer/
* Developer documentation: https://docs.nextcloud.com
* Local transcript + study notes: <code>work/comfac-nextcloud/Audio Video/</code> — <code>BQlm71K1AVM-structured.md</code>, <code>BQlm71K1AVM-questions-details-needed.md</code>

Main Page

2026-08-09T06:23:58Z

Justinaquino: Feature SOP: Third-Party Software Security Review in New Articles and IT Operations & SOPs

__NOTOC__
<div style="background:#f8f9fa; border:1px solid #ddd; border-radius:4px; padding:12px 16px; margin-bottom:20px;">
Welcome to the '''Comfac IT Knowledge Base'''. Use the sections below to find guides, SOPs, and references organized by topic.
</div>

== New Articles ==

Recent additions to this wiki, newest first — each is also filed in its permanent topic section below. '''Keep this list to the 10 most recent''' and prune as new pages are added; nothing is deleted, entries just roll off the feed.

* 2026-08-09 — '''[[SOP: Third-Party Software Security Review]]''' — due-diligence workflow for GitHub/OSS code (data-leak focus) + first review result: offline-browser-translate, CLEAN WITH CONDITIONS — ''Filed under: IT Operations & SOPs''
* 2026-08-02 — '''[[Hugging Face Practical Guide 260802]]''' — Spaces, local app builds, the Model Hub / dataset viewer, and the enterprise compute tier; the route from stock models to tailored ones and to training on our own data — ''Filed under: AI & Machine Learning''
* 2026-08-01 — '''[[Audio Learning]]''' — Converting research and study material into scripts written to be listened to rather than read; shared Comfac tool — ''Filed under: Tools & Productivity''
* 2026-07-31 — '''[[Resume CV Renamer Pipeline]]''' — CV intake → OCR / vision-OCR → AI field extraction → date-stamped rename + VCF export — ''Filed under: Tools & Productivity''
* 2026-07-15 — '''[[De-Risk: Sovereign Training Data v0.1]]''' — Frontier-Token Quarantine and the ToS-clean path to owned model weights, prompted by the June 2026 Fable 5 export-control suspension — ''Filed under: AI & Machine Learning''
* 2026-07-15 — '''[[Directed Execution: Token-Efficient Agent Development Process]]''' — Director/Executor/Checker loop and skill distillation for token-efficient agent development — ''Filed under: AI & Machine Learning''
* 2026-07-11 — '''[[Tutorial: Exposing a Dockerized Web App via NPM Direct DB Config]]''' — Expose a Dockerized web app by editing Nginx Proxy Manager's database directly — ''Filed under: System Administration & Self-Hosting''
* 2026-05-02 — '''[[Organizing Coder Terminals]]''' — Tmux + dynamic titles for managing multiple AI agent terminals — ''Filed under: System Administration & Self-Hosting''
* 2026-04-28 — '''[[Forgejo Pages]]'''
* 2026-04-24 — '''[[Buzz Transcription]]''' — Offline audio/meeting transcription via Whisper (whisper.cpp), Flatpak + Vulkan GPU acceleration — ''Filed under: Tools & Productivity''

== Newest Pages (auto) ==

The 10 most recently created pages — maintains itself.

{{Special:NewPages/10}}

== ERPNext / Frappe ==
<div style="column-count:2; column-gap:2em;">
* [[Frappe HRMS]] — '''HR & Payroll''' (with Philippine Localization)
* [[Frappe ERPNext/Webshop]] — '''E-Commerce Webshop''' (setup, architecture, chapters)
* [[Manufacturing v16 260125]]
* [[ERpnext Asset Management Procedure 260113]]
* [[ERPNext HR Module Outline]]
* [[ERPNEXT Payroll POC 251212]]
* [[Comfac ERPNext Strategy Canvas (Expanded)]]
* [[PAD-Driven ERPNext Strategy 260303]] — PAD/AI-agentic implementation strategy for Frappe ERPNext
* [[ERPNext v15 Docker Setup Guide]] — Local Docker setup for evaluation, testing, and student use
* [[Frappe Links and References]]
* [[Using Frappe Wiki]]
* [https://docs.frappe.io/cloud/guidelines-for-contributing-regional-compliance-app Guidelines for Contributing Regional Compliance App]
* [https://docs.frappe.io/cloud/what-are-benches-and-bench-groups What are Benches?]
</div>

== System Administration & Self-Hosting ==
<div style="column-count:2; column-gap:2em;">
* [[Networking PfSense Index]] — Consolidated index of all networking, pfSense, DNS, and infrastructure guides
* [[System Hardening Strategy: Win2Lin Migration & Infrastructure 251129]]
* [[Controller Systems 251213-01]]
* [[Power Distribution Tree 251213]]
* [[Introduction: Why Self-Host Your Email?]]
* [[Mailcow + Thunderbird Setup Guide (Email + Calendar)]]
* [[Mailcow SOGo: Creating Filters for Events, Approvals, and Organizational Emails]]
* [[Spoof Timezone Extension – Setup Guide for Comfac Staff]]
* [[Viber Focus-Stealing]]
* [[🌐 WordPress Website — *You Own Everything, Learn Everything*]]
* [[Portainer to Docker Compose Migration Guide]]
* [[Organizing Coder Terminals]] — Tmux + dynamic titles for managing multiple AI agent terminals
* [[Editing Mastodon Docker Deployment Guide 260402]]
</div>

== Storage & Hardware ==
<div style="column-count:2; column-gap:2em;">
* [[TrueNAS Configuration Options & Scale Options 251130]]
* [[TrueNAS Business Plan: Project 251212]]
* [[Comparison: TrueNAS Mini X+ vs Dell Precision 3680 Tower (2025)]]
* [[Backblaze Drive Stats for Server and Storage Qualification]]
* [[Industrial Controllers and Water Utilities 251011]]
</div>

== AI & Machine Learning ==
<div style="column-count:2; column-gap:2em;">
* [[OpenWebUI - 251128-justin]]
* [[Comfac GPU Scaling and AI Research Goals]]
* [[🧠 Process: Selecting and Installing the Right Ollama Model for Your Hardware]]
* [[Ollama GNOME System Tray Panel 260401]] — GNOME system tray toggle to start/stop Ollama and reclaim VRAM
* [[Proceedural Agentic Development Methodology 260304]] — Methodology for systematic agent use
* [[Project OpenCoder: AI Independence Initiative]] — Strategic roadmap for manufacturing intelligence
* [[OpenCoder Qwen35 Agentic Setup 260330]] — Qwen3.5 Modelfile fix for tool calling in OpenCode; thinking mode suppression; HDD vs SSD findings
* [[OpenCode Multi-Provider Configuration Guide 260401]] — Dual-mode AI coding setup with Kimi cloud + Ollama local models via Distrobox
* [[PAD-Driven ERPNext Strategy 260303]] — Procedural Agentic Development for Frappe/ERPNext configuration and deployment
* [[Directed Execution: Token-Efficient Agent Development Process]] — Director/Executor/Checker loop and skill distillation for token-efficient agent development (v0.1, 2026-07-15)
* [[De-Risk: Sovereign Training Data v0.1]] — Frontier-Token Quarantine and the ToS-clean path to owned model weights, prompted by the June 2026 Fable 5 export-control suspension (v0.1, 2026-07-15)
* [[Hugging Face Practical Guide 260802]] — Spaces, local app builds, the Model Hub / dataset viewer, and the enterprise compute tier; the route from stock models to tailored ones and to training on our own data (2026-08-02)
</div>

== Job Descriptions ==
<div style="column-count:2; column-gap:2em;">
* [[Job Descriptions]] — Index of all official job descriptions (IT, Engineering, Sales)
* [[JD IT Project Staff]] — IT Project Staff
* [[JD Security Compliance Assistant 260224]] — Security and Compliance Assistant (SCA)
* [[JD Engineering Designer 260108]] — Engineering Designer
* [[JD Engineering Supervisor 260109]] — Engineering Supervisor
* [[JD Technical Sales 260112]] — Technical Sales Engineer
* [[JD Marketing Assistant 251119]] — Marketing Assistant
</div>

== IT Operations & SOPs ==
<div style="column-count:2; column-gap:2em;">
* [[SOP: Third-Party Software Security Review]] — vet GitHub/OSS code for data leakage and exploits before install; workflow, criteria, and review log
* [[SCA Program Plan 260320]] — Security & Compliance Assistant Program Plan v3 (ISO 9001/27001, PDCA, distributed audit model)
* [[SOP: Inter-Company Ordering and Production Process 260203]] — Ordering and production workflow between Sister Companies and the Cabuyao Plant
* [[Memo: Team Roles & Reporting Process Clarification 260320]] — Role boundaries, data ownership, and the new ERPNext-driven reporting paradigm
* [[Standard Operating Procedure: Distributed Minute Taking & Task Ownership 251208]]
* [[Business Continuity]]
* [[Procedure: CC-Blast Data Breach Prevention]]
* [[8D (Eight Discipline) Problem Solving Procedure]]
* [[Offline Malware Remediation & Data Recovery]]
* [[Troubleshooting: Access & Permission Issues]]
* [[Steps to Repair and OCR a Scanned or Corrupted PDF in Ubuntu]]
* [[IT IMPORTS PROCESSES]]
* [[IT Purchase Requests 241126]]
* [[IT REQUEST (OP-ERP-ITR) - EDITED 250801]]
</div>

== Sales & Business ==
<div style="column-count:2; column-gap:2em;">
* [[Comfac Sales Knowledge Base]]
* [[Comfac CRM – Customer Qualification & Conversion Process]]
* [[Partner Reseller Pricing 251109]]
* [[Biz Analysis Methodology 251109]]
* [[2026 MIS IT KRA KPI Biz Plan]]
* [[SALES INVOICE TAX OUTPUT 250829]]
* [[Projects in Process Report 251023]]
</div>

== Tools & Productivity ==
<div style="column-count:2; column-gap:2em;">
* [[Excel Description Filler Tool 📝]]
* [[Resume CV Renamer Pipeline|Resume / CV Renamer Pipeline]] — CV intake → OCR / vision-OCR → AI field extraction → date-stamped rename + VCF export
* [https://github.com/Comfac-Global-Group/comfac-studies Comfac Studies - Spaced Repetiton Active Recall]
* [[LibreOffice / Nextcloud Office – "Due Tasks" Conditional Formatting]]
* [[Google Drive and Shared Drive Training]]
* [[260108 CGG- GitHub Administration Guide]]
</div>

== Wiki & Documentation ==
<div style="column-count:2; column-gap:2em;">
* [[Mediawiki Setting Up Guide]]
* [[Contributing to Only Office 260307]]
* [[Mediawiki Additional Configuration]]
* [[Mediawiki Docker Migration Guide]]
* [[Home]]
</div>

== Tutorials ==
<div style="column-count:2; column-gap:2em;">
* [[Claude Code Isolation and Burner Workflow 260211]] — Secure AI development environment setup
* [[Opencode isolation and burner workflow 260216]] — OpenCode CLI isolation procedures
* [[LibreOffice Calc NumToWords Extension Complete Guide]] — Extension development
* [[ERPNext v15 Docker Setup Guide]] — ERPNext v15 local Docker setup (students, evaluators, thin-client demos)
* [[Erpnextv15-SSH-setup-241111]] — ERPNext v15 SSH/Portainer production setup
* [[Git-Mediawiki Local Editing 260223]] — Wiki editing with Git
* [[Understanding & Fixing Kernel Panics 260212]] — System debugging
* [[OpenCode in Android Termux 260303]] — OpenCode in Android
* [[OpenCoder Qwen35 Agentic Setup 260330]] — Qwen3.5 agentic setup: Modelfile, tool calling fix, storage impact
* [[Lora Basics 260304]] — LORA research
* [https://github.com/anomalyco/opencode/issues/4283#issuecomment-4083399210 Opencode Copy-paste Clipboard doesnt Work - Solution] https://github.com/anomalyco/opencode/issues/4283#issuecomment-4083399210
</div>

== Research ==
<div style="column-count:2; column-gap:2em;">
* [[Ladybird Browser]] — Browser engine development
* [[Computing Architecture]] — System design principles
* [[Backblaze Drive Stats for Server and Storage Qualification 260219]] — Drive reliability analysis
</div>

----

== For Users Only ==
* [[Private:Private Ngani]]
* [[Private:Private Nganipart2]]

== CIT-OJT Project Documentations ==
* [[OJTDocs: For OJTs only]]

== Need Help? ==
<div style="column-count:2; column-gap:2em;">
* [[Troubleshooting: Access & Permission Issues]]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents MediaWiki User's Guide]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Configuration settings]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ]
</div>

SOP: Third-Party Software Security Review

2026-08-09T06:23:57Z

Justinaquino: Create SOP: third-party software security review workflow + first due-diligence result (offline-browser-translate)

= SOP: Third-Party Software Security Review (Due Diligence) =

'''Purpose:''' No third-party code — GitHub repos, browser extensions, open-source tools — is installed or run on Comfac machines without a security review first. The review emphasis is '''data leakage / exfiltration risk''', then permissions vs. purpose, obfuscation, supply chain, and repository history.

The full workflow, criteria, and triage script live in the IT-knowledge repo: <code>IT-knowledge/skills/repo-security-review/</code> (git.gi7b.org). Finished review reports are filed in <code>IT-knowledge/skills/repo-security-review/reports/</code>.

== Workflow ==

# '''Acquire and pin.''' Clone full history into a scratch area (never a synced project folder). Record the exact commit (<code>git rev-parse HEAD</code>) — the verdict covers that commit only.
# '''Automated triage.''' Run the pattern pack:
#: <syntaxhighlight lang="bash">bash IT-knowledge/skills/repo-security-review/scripts/triage-scan.sh <git-url> agent260222/repo-scans</syntaxhighlight>
#: It scans for hardcoded endpoints, network calls, telemetry keywords, obfuscation/dynamic exec, remote code loading, dangerous extension APIs, data-at-rest, injection sinks, IPC/message surfaces, committed secrets, install/CI hooks, binaries, and contributor history. '''A clean triage is not a verdict''' — it finds where to look.
# '''Manual review.''' Read every triage hit in context; read the manifest/permissions and trace the data flow: what user data is read, where does every network call send, what persists. Every egress destination must be user-configured or justified by the feature — anything else is a finding.
# '''Verdict and report.''' File the report under <code>reports/YYMMDD-<repo>.md</code> with target + commit, verdict, data-flow map, findings table (with file:line evidence), and caveats.
# '''Re-review on change.''' A verdict expires on update, permission/manifest change, ownership change, or a dependency adding a binary blob. Diff from the reviewed commit and re-triage the delta.

== Criteria Checklist ==

{| class="wikitable"
! # !! Question !! Fail closed when
|-
| 1 || Can you enumerate every network destination? || Hidden/encoded endpoints
|-
| 2 || Does every egress match the stated purpose? || Data leaves to a party the user didn't configure
|-
| 3 || Is the permission set minimal for the purpose? || Broad grants (<all_urls>, filesystem, exec) without justification
|-
| 4 || Is all executed code readable? || Obfuscation, blobs without source, remote code loading
|-
| 5 || Does anything run before you consent? || postinstall hooks, curl|sh installs, unpinned self-update
|-
| 6 || What user data is read and where is it stored? || Silent persistence of content/credentials
|-
| 7 || Are IPC/message boundaries validated? || Privileged handlers trusting unverified senders
|-
| 8 || Is the supply chain pinned? || Unpinned deps, unsigned release binaries
|-
| 9 || Does history/metadata support trust? || New owner + permission bump, throwaway account
|-
| 10 || Would you notice if an update turned evil? || Auto-update with no hash check
|}

== Verdicts ==

* '''CLEAN''' — install OK.
* '''CLEAN WITH CONDITIONS''' — install OK if the listed configuration conditions are met.
* '''SUSPICIOUS''' — do not install; the report lists what would change the verdict.
* '''MALICIOUS''' — do not install; consider reporting upstream.

Severity: '''Critical''' (exfiltration, RCE, credential theft) · '''High''' (exfiltration capability gated only by config/obscurity, obfuscated payload) · '''Medium''' (over-broad permissions, cleartext transport of user content, missing origin checks) · '''Low''' (privacy footguns, hygiene) · '''Info'''.

== Review Log ==

{| class="wikitable"
! Date !! Target !! Commit !! Verdict !! Report
|-
| 2026-08-09 || [https://github.com/Eldoprano/offline-browser-translate offline-browser-translate] (Firefox extension, local-LLM page translation) || d2b0907 || '''CLEAN WITH CONDITIONS''' || IT-knowledge: <code>skills/repo-security-review/reports/260809-offline-browser-translate.md</code>
|}

=== 2026-08-09 — offline-browser-translate (Local LLM Translator) ===

Static review of all source (60 commits, full history) at commit <code>d2b0907</code>. No exfiltration, no telemetry, no obfuscation, no remote code loading, no dependencies or install hooks. The extension's "your data never leaves your machine" claim is accurate '''for the default configuration''':

* All 7 <code>fetch()</code> call sites send page text only to the user-configured LLM server URL (default <code>localhost:11434/1234</code>). Non-localhost URLs require an explicit per-origin browser permission prompt.
* No third-party endpoints anywhere; declared Firefox data-collection permission is "none", consistent with the code.
* Translations are inserted via <code>textContent</code> only (no XSS sink); all <code>innerHTML</code> uses are static template strings.

'''Conditions (configuration risks, not code defects):'''

# Point it only at localhost or a trusted machine — page text goes to whatever server URL is configured.
# Remote (LAN) server URLs are plain HTTP — translated page content is cleartext on the wire.
# Leave the translation cache at its default (<code>off</code>) for sensitive pages; <code>persistent</code> mode stores translated page text in IndexedDB.
# The optional <code><all_urls></code> permission (floating button) runs the content script on every page — broad, but user-initiated, and data still flows only to the configured endpoint.

'''Caveats:''' static review only (no runtime network capture); the AMO store artifact was not diffed against the repo; verdict covers commit d2b0907 only — updates require a delta re-review.

== Related ==

* [[Open Source Software Analysis]] — architecture/contribution analysis of OSS projects (complementary, not a security review)
* [[Procedure: CC-Blast Data Breach Prevention]]
* [[SCA Program Plan 260320]]

[[Category:Security]]
[[Category:SOP]]
[[Category:IT Operations]]
[[Category:Open Source]]

Buzz Transcription

2026-08-09T06:20:05Z

Justinaquino: Point Taglish audio + report to wiki.gi7b.org copies (mp3 not allowed here; 2 MB upload cap)

Buzz is an open-source, offline-capable audio/meeting transcription tool powered by OpenAI Whisper (via whisper.cpp). On this system it is installed as a Flatpak and runs with Vulkan GPU acceleration on the AMD RX 7600.

== How to Transcribe a Meeting ==

=== Prerequisites ===
* Buzz installed (Flatpak: <code>io.github.chidiwilliams.Buzz</code>)
* A model downloaded — recommended: <code>ggml-large-v3-turbo</code> for quality, <code>ggml-tiny</code> for speed
* Models are stored at <code>~/.var/app/io.github.chidiwilliams.Buzz/cache/Buzz/models/</code>

=== File Transcription (Meeting Recording) ===
# Launch Buzz from the application menu or run: <code>flatpak run io.github.chidiwilliams.Buzz</code>
# Go to '''File → Import Media''' and select your meeting recording (MP3, WAV, M4A, etc.)
# In the transcription dialog:
#* '''Model''': Select <code>large-v3-turbo</code> (best quality for meetings)
#* '''Task''': Transcribe
#* '''Language''': Select your language or leave on Auto
#* '''Extract Speech''': '''Leave unchecked''' for files longer than ~30 minutes (see [[#OOM Crash with Large Files|OOM Crash]] below)
#* '''Output''': SRT, VTT, or TXT depending on your need
# Click '''Transcribe'''
# When complete, the transcript appears in the main window and is saved alongside the source file

=== Live Transcription (Real-Time) ===
# Go to '''File → Record and Transcribe'''
# Select your microphone input
# Choose model and language
# Click '''Record''' — transcription appears live on screen
# Stop recording when done; export via '''File → Export'''

=== Recommended Settings for Meetings ===
{| class="wikitable"
|-
! Setting !! Value !! Reason
|-
| Model || large-v3-turbo || Best accuracy; 1.6 GB VRAM, runs on RX 7600
|-
| Extract Speech || '''Off''' for files >30 min || Demucs uses 8–15 GB RAM for long files (OOM risk)
|-
| Language || Set explicitly || Faster than auto-detect
|-
| Task || Transcribe || Use Translate only if you need English output from another language
|}

=== Before Each Session: Clear Swap ===
Prior transcription sessions can leave stale pages in swap. Run this before starting a long transcription:
<pre>sudo swapoff -a && sudo swapon -a</pre>
This is safe when free RAM exceeds swap used (typical on this system: 15+ GB free, 8 GB swap).

== GPU Acceleration ==

Buzz's Flatpak installation includes a Vulkan-enabled <code>whisper-cli</code>. On this system, GPU inference is automatically active — no configuration needed.

* GPU in use: '''AMD RX 7600 (RDNA3, RADV NAVI33)'''
* Confirmed by: <code>whisper_backend_init_gpu: using Vulkan0 backend</code> in runtime output
* Buzz checks for Vulkan at startup (<code>IS_VULKAN_SUPPORTED</code>) and omits the <code>--no-gpu</code> flag when found

To force CPU inference (for debugging):
<pre>flatpak override --user io.github.chidiwilliams.Buzz --env=BUZZ_FORCE_CPU=true</pre>

To revert:
<pre>flatpak override --user --reset io.github.chidiwilliams.Buzz</pre>

== OOM Crash with Large Files ==

=== Symptom ===
When selecting <code>ggml-large-v3-turbo</code> in Buzz and starting a transcription on a long file, the application crashes. VRAM usage never visibly climbs before the crash.

=== Root Cause ===
The crash is caused by the '''Extract Speech (Demucs)''' pre-processing step, not the large model.

Demucs is a PyTorch-based music source separation model that strips background noise from audio before passing it to the transcription engine. It processes raw PCM audio at full float32 precision entirely in RAM:

{| class="wikitable"
|-
! Audio Duration !! Compressed Size !! RAM Required (Demucs)
|-
| 1 hour MP3 || ~60 MB || 500 MB – 1 GB
|-
| 3–4 hour session || ~220 MB || 8–15 GB peak
|}

The combination that caused the crash:
# Swap already exhausted from previous sessions
# Extract Speech (Demucs) triggered on a ~220 MB MP3 (~3–4 hours of audio)
# Python RAM usage exceeded available RAM + swap ceiling
# OOM killer terminated the process at 22 GB RSS
# <code>whisper-cli</code> was never launched → no VRAM activity observed

=== Why VRAM Never Climbed ===
<code>whisper-cli</code> runs as a subprocess of the Python GUI. The OOM kill happened during Demucs pre-processing — <code>whisper-cli</code> was never started, so no VRAM allocation occurred.

From the Buzz log at crash time:
<pre>~/.var/app/io.github.chidiwilliams.Buzz/.local/state/Buzz/log/logs.txt</pre>
The last entry was <code>Will extract speech</code> — the log never reached <code>Starting whisper file transcription</code>.

=== Fix ===
'''Uncheck "Extract Speech"''' in the Buzz transcription dialog for any file longer than ~30 minutes. The <code>large-v3-turbo</code> model has built-in noise tolerance that makes Demucs pre-processing unnecessary in most cases.

Optionally, grow the swapfile if you need Extract Speech for shorter files:
<pre>sudo swapoff /swap.img
sudo fallocate -l 16G /swap.img
sudo mkswap /swap.img
sudo swapon /swap.img</pre>

== Environment Variables ==

{| class="wikitable"
|-
! Variable !! Default !! Effect
|-
| <code>BUZZ_FORCE_CPU</code> || false || Set to <code>true</code> to disable GPU inference
|-
| <code>BUZZ_WHISPERCPP_N_THREADS</code> || cpu_count / 2 || Override thread count for whisper-cli
|}

Set via: <code>flatpak override --user io.github.chidiwilliams.Buzz --env=VAR=value</code>

== Key File Paths ==

{| class="wikitable"
|-
! Path !! Description
|-
| <code>/var/lib/flatpak/app/io.github.chidiwilliams.Buzz/.../buzz/whisper_cpp/whisper-cli</code> || Bundled Vulkan whisper-cli (libwhisper 1.8.3)
|-
| <code>~/.var/app/io.github.chidiwilliams.Buzz/cache/Buzz/models/</code> || Buzz model cache (ggml binaries)
|-
| <code>~/.var/app/io.github.chidiwilliams.Buzz/.local/state/Buzz/log/logs.txt</code> || Buzz application log
|-
| <code>~/.var/app/io.github.chidiwilliams.Buzz/config/Buzz.conf</code> || Buzz settings
|-
| <code>~/whisper.cpp/build/bin/whisper-cli</code> || Custom Vulkan-enabled whisper.cpp build
|-
| <code>~/bin/whisper-cli-vulkan</code> || Wrapper script for custom build (sets <code>LD_LIBRARY_PATH</code>)
|-
| <code>~/.local/share/pipx/venvs/buzz-captions/lib/python3.12/site-packages/buzz/whisper_cpp/</code> || pipx install whisper_cpp directory (directly modifiable)
|}

== Investigation Summary ==

{| class="wikitable"
|-
! Question !! Finding
|-
| Is Buzz using the RX 7600? || '''Yes.''' <code>using Vulkan0 backend</code> confirmed inside the Flatpak sandbox.
|-
| Was <code>--no-gpu</code> being added? || '''No.''' <code>IS_VULKAN_SUPPORTED = True</code> in the sandbox; flag is never appended.
|-
| Does the large model load correctly? || '''Yes.''' 1.6 GB to VRAM, transcribes in ~1.25s on a short clip.
|-
| What caused the crash? || '''Extract Speech (Demucs) OOM.''' Python killed at 22 GB RSS before whisper-cli launched.
|-
| Why was VRAM not climbing? || <code>whisper-cli</code> was never started — process died during Demucs pre-processing.
|-
| Fix? || '''Uncheck Extract Speech''' for long files. Clear swap before sessions.
|}

''Investigation date: 2026-04-25. System: Ubuntu 24.04, AMD RX 7600, Buzz 1.4.4 (Flatpak).''

== Folder Watch (Automatic Transcription) ==

<div style="border:1px solid #a00;background:#fee;padding:0.5em 1em;">'''Do not use Folder Watch.''' It is disruptive at default settings: every audio file dropped into the watched folder is transcribed automatically without asking, silently occupying the GPU/CPU and flooding the folder with output files — and with ''Delete processed files'' ticked, the source audio is deleted afterwards. It is disabled by default and should stay that way. Use [[#File Transcription (Meeting Recording)|File → Import Media]] instead. The settings below are documented for reference only (as configured during testing on 2026-08-09).</div>

[[File:Buzz Folder Watch tab.png|thumb|400px|right|Folder Watch tab: whisper.cpp backend, Large-V3, advanced options unchecked]]
[[File:Buzz Folder Watch tab full.png|thumb|400px|right|Folder Watch tab — Enable folder watch with input/output folders set to /home/justin/Music]]

=== Settings ===

In '''Preferences → Folder Watch''':

{| class="wikitable"
|-
! Setting !! Value !! Notes
|-
| Enable folder watch || '''leave unticked''' || ticking it starts auto-transcribing everything dropped into the input folder
|-
| Input folder || <code>/home/justin/Music</code> || drop recordings here
|-
| Output folder || <code>/home/justin/Music</code> || same folder — files stay put
|-
| Delete processed files || '''unchecked''' || '''ticking this deletes the source audio after transcription''' — keep it unticked
|-
| Model || whisper.cpp — Large-V3 || engine choice matters, see below
|-
| Task || Transcribe ||
|-
| Language || Detect Language ||
|-
| Export || TXT || SRT / VTT also available
|-
| Word-level timings || '''unchecked''' ||
|-
| Extract speech || '''unchecked''' || '''do not check — crashes on long files''' (see [[#OOM Crash with Large Files|OOM Crash with Large Files]])
|}

=== Use whisper.cpp instead of the default engine ===

[[File:Buzz model dropdown.png|thumb|400px|right|Model dropdown: whisper.cpp and Faster Whisper]]

The model picker lists two engines: '''whisper.cpp''' and '''Faster Whisper'''. Faster Whisper is the default — switch to '''whisper.cpp''':

* whisper.cpp uses the <code>ggml-*.bin</code> models already cached under <code>~/.var/app/io.github.chidiwilliams.Buzz/cache/Buzz/models/</code> (Flatpak path; <code>~/snap/buzz/…</code> on snap installs) — no extra download
* it runs through the bundled Vulkan <code>whisper-cli</code>, so GPU acceleration applies (see [[#GPU Acceleration|GPU Acceleration]])

[[File:Buzz Models tab whisper.cpp.png|thumb|400px|right|Models tab, whisper.cpp group: Large-V3, Large-V3-Turbo, Medium.en, Large and Large-v2 downloaded]]

In the Models tab, the whisper.cpp group shows the downloaded sizes — Large-V3 and Large-V3-Turbo are the useful ones for meetings (Large-V3-Turbo: best quality/speed trade-off, see [[#How to Transcribe a Meeting|Recommended Settings]]).

=== Leave the advanced options unchecked ===

[[File:Buzz transcription dialog unchecked.png|thumb|400px|right|Transcription dialog: neither Word-level timings nor Extract speech checked]]

In the transcription dialog (shown when folder watch picks up a file) both '''Word-level timings''' and '''Extract speech''' are left unchecked. Checking '''Extract speech''' — the obvious option for a meeting recording — triggers the Demucs pre-processing step that OOM-crashes the app on long files (22 GB RSS kill, [[#OOM Crash with Large Files|see above]]). Keep both unchecked.

=== Result ===

Transcriptions are written next to the source as <code><original name> (transcribed on <date>).txt</code>, e.g. <code>2026-08-08 20-56-20 3rd Apocalypse Bob's ADND1E (transcribed on 09-Aug-2026 01-50-32).txt</code>.

Config verified 2026-08-09 in <code>~/snap/buzz/570/.config/Buzz.conf</code> (snap install): <code>folder_watch\enabled</code> = <code>false</code> (off — recommended), <code>folder_watch\input_folder</code> = <code>/home/justin/Music</code>, <code>folder_watch\output_directory</code> = <code>/home/justin/Music</code>, model Whisper.cpp / large-v3, and <code>delete_processed_files</code>, <code>extract_speech</code>, <code>word_level_timings</code> all <code>false</code>.

== Example: Taglish Test (2026-08-09) ==

A Taglish (Tagalog + English code-switching) test recording, transcribed automatically by Buzz's Folder Watch during testing (now disabled — see the [[#Folder Watch (Automatic Transcription)|Folder Watch]] warning above):

* '''Audio:''' [https://wiki.gi7b.org/index.php/Special:FilePath/Taglish_Test_260809.mp3 Taglish Test 260809.mp3] — hosted on wiki.gi7b.org (this wiki does not allow audio uploads)
* '''Evaluation report:''' [https://wiki.gi7b.org/index.php/Special:FilePath/Taglish_Transcription_and_Evaluation_Report_260809.docx Taglish Transcription and Evaluation Report 260809.docx] — hosted on wiki.gi7b.org (this wiki caps uploads at 2 MB)

The report grades the result '''95/100 (Excellent)''' at ~96 % word accuracy. Code-switching between Filipino and English (EDSA, client, project, presentation, brain cells, lunch, work) is handled seamlessly. Noted deviations are typical ASR behavior: punctuation is collapsed into sentence breaks, "Almost two hours" became "Almost 2 hours", "na-stuck" → "nakastuck", "kailangan nating" → "kailan nating".

Buzz Transcription

2026-08-09T06:10:18Z

Justinaquino: Mirror from wiki.gi7b.org rev 4963 (2026-08-09): Folder Watch warning, Taglish example, screenshots

Buzz is an open-source, offline-capable audio/meeting transcription tool powered by OpenAI Whisper (via whisper.cpp). On this system it is installed as a Flatpak and runs with Vulkan GPU acceleration on the AMD RX 7600.

== How to Transcribe a Meeting ==

=== Prerequisites ===
* Buzz installed (Flatpak: <code>io.github.chidiwilliams.Buzz</code>)
* A model downloaded — recommended: <code>ggml-large-v3-turbo</code> for quality, <code>ggml-tiny</code> for speed
* Models are stored at <code>~/.var/app/io.github.chidiwilliams.Buzz/cache/Buzz/models/</code>

=== File Transcription (Meeting Recording) ===
# Launch Buzz from the application menu or run: <code>flatpak run io.github.chidiwilliams.Buzz</code>
# Go to '''File → Import Media''' and select your meeting recording (MP3, WAV, M4A, etc.)
# In the transcription dialog:
#* '''Model''': Select <code>large-v3-turbo</code> (best quality for meetings)
#* '''Task''': Transcribe
#* '''Language''': Select your language or leave on Auto
#* '''Extract Speech''': '''Leave unchecked''' for files longer than ~30 minutes (see [[#OOM Crash with Large Files|OOM Crash]] below)
#* '''Output''': SRT, VTT, or TXT depending on your need
# Click '''Transcribe'''
# When complete, the transcript appears in the main window and is saved alongside the source file

=== Live Transcription (Real-Time) ===
# Go to '''File → Record and Transcribe'''
# Select your microphone input
# Choose model and language
# Click '''Record''' — transcription appears live on screen
# Stop recording when done; export via '''File → Export'''

=== Recommended Settings for Meetings ===
{| class="wikitable"
|-
! Setting !! Value !! Reason
|-
| Model || large-v3-turbo || Best accuracy; 1.6 GB VRAM, runs on RX 7600
|-
| Extract Speech || '''Off''' for files >30 min || Demucs uses 8–15 GB RAM for long files (OOM risk)
|-
| Language || Set explicitly || Faster than auto-detect
|-
| Task || Transcribe || Use Translate only if you need English output from another language
|}

=== Before Each Session: Clear Swap ===
Prior transcription sessions can leave stale pages in swap. Run this before starting a long transcription:
<pre>sudo swapoff -a && sudo swapon -a</pre>
This is safe when free RAM exceeds swap used (typical on this system: 15+ GB free, 8 GB swap).

== GPU Acceleration ==

Buzz's Flatpak installation includes a Vulkan-enabled <code>whisper-cli</code>. On this system, GPU inference is automatically active — no configuration needed.

* GPU in use: '''AMD RX 7600 (RDNA3, RADV NAVI33)'''
* Confirmed by: <code>whisper_backend_init_gpu: using Vulkan0 backend</code> in runtime output
* Buzz checks for Vulkan at startup (<code>IS_VULKAN_SUPPORTED</code>) and omits the <code>--no-gpu</code> flag when found

To force CPU inference (for debugging):
<pre>flatpak override --user io.github.chidiwilliams.Buzz --env=BUZZ_FORCE_CPU=true</pre>

To revert:
<pre>flatpak override --user --reset io.github.chidiwilliams.Buzz</pre>

== OOM Crash with Large Files ==

=== Symptom ===
When selecting <code>ggml-large-v3-turbo</code> in Buzz and starting a transcription on a long file, the application crashes. VRAM usage never visibly climbs before the crash.

=== Root Cause ===
The crash is caused by the '''Extract Speech (Demucs)''' pre-processing step, not the large model.

Demucs is a PyTorch-based music source separation model that strips background noise from audio before passing it to the transcription engine. It processes raw PCM audio at full float32 precision entirely in RAM:

{| class="wikitable"
|-
! Audio Duration !! Compressed Size !! RAM Required (Demucs)
|-
| 1 hour MP3 || ~60 MB || 500 MB – 1 GB
|-
| 3–4 hour session || ~220 MB || 8–15 GB peak
|}

The combination that caused the crash:
# Swap already exhausted from previous sessions
# Extract Speech (Demucs) triggered on a ~220 MB MP3 (~3–4 hours of audio)
# Python RAM usage exceeded available RAM + swap ceiling
# OOM killer terminated the process at 22 GB RSS
# <code>whisper-cli</code> was never launched → no VRAM activity observed

=== Why VRAM Never Climbed ===
<code>whisper-cli</code> runs as a subprocess of the Python GUI. The OOM kill happened during Demucs pre-processing — <code>whisper-cli</code> was never started, so no VRAM allocation occurred.

From the Buzz log at crash time:
<pre>~/.var/app/io.github.chidiwilliams.Buzz/.local/state/Buzz/log/logs.txt</pre>
The last entry was <code>Will extract speech</code> — the log never reached <code>Starting whisper file transcription</code>.

=== Fix ===
'''Uncheck "Extract Speech"''' in the Buzz transcription dialog for any file longer than ~30 minutes. The <code>large-v3-turbo</code> model has built-in noise tolerance that makes Demucs pre-processing unnecessary in most cases.

Optionally, grow the swapfile if you need Extract Speech for shorter files:
<pre>sudo swapoff /swap.img
sudo fallocate -l 16G /swap.img
sudo mkswap /swap.img
sudo swapon /swap.img</pre>

== Environment Variables ==

{| class="wikitable"
|-
! Variable !! Default !! Effect
|-
| <code>BUZZ_FORCE_CPU</code> || false || Set to <code>true</code> to disable GPU inference
|-
| <code>BUZZ_WHISPERCPP_N_THREADS</code> || cpu_count / 2 || Override thread count for whisper-cli
|}

Set via: <code>flatpak override --user io.github.chidiwilliams.Buzz --env=VAR=value</code>

== Key File Paths ==

{| class="wikitable"
|-
! Path !! Description
|-
| <code>/var/lib/flatpak/app/io.github.chidiwilliams.Buzz/.../buzz/whisper_cpp/whisper-cli</code> || Bundled Vulkan whisper-cli (libwhisper 1.8.3)
|-
| <code>~/.var/app/io.github.chidiwilliams.Buzz/cache/Buzz/models/</code> || Buzz model cache (ggml binaries)
|-
| <code>~/.var/app/io.github.chidiwilliams.Buzz/.local/state/Buzz/log/logs.txt</code> || Buzz application log
|-
| <code>~/.var/app/io.github.chidiwilliams.Buzz/config/Buzz.conf</code> || Buzz settings
|-
| <code>~/whisper.cpp/build/bin/whisper-cli</code> || Custom Vulkan-enabled whisper.cpp build
|-
| <code>~/bin/whisper-cli-vulkan</code> || Wrapper script for custom build (sets <code>LD_LIBRARY_PATH</code>)
|-
| <code>~/.local/share/pipx/venvs/buzz-captions/lib/python3.12/site-packages/buzz/whisper_cpp/</code> || pipx install whisper_cpp directory (directly modifiable)
|}

== Investigation Summary ==

{| class="wikitable"
|-
! Question !! Finding
|-
| Is Buzz using the RX 7600? || '''Yes.''' <code>using Vulkan0 backend</code> confirmed inside the Flatpak sandbox.
|-
| Was <code>--no-gpu</code> being added? || '''No.''' <code>IS_VULKAN_SUPPORTED = True</code> in the sandbox; flag is never appended.
|-
| Does the large model load correctly? || '''Yes.''' 1.6 GB to VRAM, transcribes in ~1.25s on a short clip.
|-
| What caused the crash? || '''Extract Speech (Demucs) OOM.''' Python killed at 22 GB RSS before whisper-cli launched.
|-
| Why was VRAM not climbing? || <code>whisper-cli</code> was never started — process died during Demucs pre-processing.
|-
| Fix? || '''Uncheck Extract Speech''' for long files. Clear swap before sessions.
|}

''Investigation date: 2026-04-25. System: Ubuntu 24.04, AMD RX 7600, Buzz 1.4.4 (Flatpak).''

== Folder Watch (Automatic Transcription) ==

<div style="border:1px solid #a00;background:#fee;padding:0.5em 1em;">'''Do not use Folder Watch.''' It is disruptive at default settings: every audio file dropped into the watched folder is transcribed automatically without asking, silently occupying the GPU/CPU and flooding the folder with output files — and with ''Delete processed files'' ticked, the source audio is deleted afterwards. It is disabled by default and should stay that way. Use [[#File Transcription (Meeting Recording)|File → Import Media]] instead. The settings below are documented for reference only (as configured during testing on 2026-08-09).</div>

[[File:Buzz Folder Watch tab.png|thumb|400px|right|Folder Watch tab: whisper.cpp backend, Large-V3, advanced options unchecked]]
[[File:Buzz Folder Watch tab full.png|thumb|400px|right|Folder Watch tab — Enable folder watch with input/output folders set to /home/justin/Music]]

=== Settings ===

In '''Preferences → Folder Watch''':

{| class="wikitable"
|-
! Setting !! Value !! Notes
|-
| Enable folder watch || '''leave unticked''' || ticking it starts auto-transcribing everything dropped into the input folder
|-
| Input folder || <code>/home/justin/Music</code> || drop recordings here
|-
| Output folder || <code>/home/justin/Music</code> || same folder — files stay put
|-
| Delete processed files || '''unchecked''' || '''ticking this deletes the source audio after transcription''' — keep it unticked
|-
| Model || whisper.cpp — Large-V3 || engine choice matters, see below
|-
| Task || Transcribe ||
|-
| Language || Detect Language ||
|-
| Export || TXT || SRT / VTT also available
|-
| Word-level timings || '''unchecked''' ||
|-
| Extract speech || '''unchecked''' || '''do not check — crashes on long files''' (see [[#OOM Crash with Large Files|OOM Crash with Large Files]])
|}

=== Use whisper.cpp instead of the default engine ===

[[File:Buzz model dropdown.png|thumb|400px|right|Model dropdown: whisper.cpp and Faster Whisper]]

The model picker lists two engines: '''whisper.cpp''' and '''Faster Whisper'''. Faster Whisper is the default — switch to '''whisper.cpp''':

* whisper.cpp uses the <code>ggml-*.bin</code> models already cached under <code>~/.var/app/io.github.chidiwilliams.Buzz/cache/Buzz/models/</code> (Flatpak path; <code>~/snap/buzz/…</code> on snap installs) — no extra download
* it runs through the bundled Vulkan <code>whisper-cli</code>, so GPU acceleration applies (see [[#GPU Acceleration|GPU Acceleration]])

[[File:Buzz Models tab whisper.cpp.png|thumb|400px|right|Models tab, whisper.cpp group: Large-V3, Large-V3-Turbo, Medium.en, Large and Large-v2 downloaded]]

In the Models tab, the whisper.cpp group shows the downloaded sizes — Large-V3 and Large-V3-Turbo are the useful ones for meetings (Large-V3-Turbo: best quality/speed trade-off, see [[#How to Transcribe a Meeting|Recommended Settings]]).

=== Leave the advanced options unchecked ===

[[File:Buzz transcription dialog unchecked.png|thumb|400px|right|Transcription dialog: neither Word-level timings nor Extract speech checked]]

In the transcription dialog (shown when folder watch picks up a file) both '''Word-level timings''' and '''Extract speech''' are left unchecked. Checking '''Extract speech''' — the obvious option for a meeting recording — triggers the Demucs pre-processing step that OOM-crashes the app on long files (22 GB RSS kill, [[#OOM Crash with Large Files|see above]]). Keep both unchecked.

=== Result ===

Transcriptions are written next to the source as <code><original name> (transcribed on <date>).txt</code>, e.g. <code>2026-08-08 20-56-20 3rd Apocalypse Bob's ADND1E (transcribed on 09-Aug-2026 01-50-32).txt</code>.

Config verified 2026-08-09 in <code>~/snap/buzz/570/.config/Buzz.conf</code> (snap install): <code>folder_watch\enabled</code> = <code>false</code> (off — recommended), <code>folder_watch\input_folder</code> = <code>/home/justin/Music</code>, <code>folder_watch\output_directory</code> = <code>/home/justin/Music</code>, model Whisper.cpp / large-v3, and <code>delete_processed_files</code>, <code>extract_speech</code>, <code>word_level_timings</code> all <code>false</code>.

== Example: Taglish Test (2026-08-09) ==

A Taglish (Tagalog + English code-switching) test recording, transcribed automatically by Buzz's Folder Watch during testing (now disabled — see the [[#Folder Watch (Automatic Transcription)|Folder Watch]] warning above):

* '''Audio:''' [[:File:Taglish Test 260809.mp3|Taglish Test 260809.mp3]]
* '''Evaluation report:''' [[:File:Taglish Transcription and Evaluation Report 260809.docx|Taglish Transcription and Evaluation Report 260809.docx]]

The report grades the result '''95/100 (Excellent)''' at ~96 % word accuracy. Code-switching between Filipino and English (EDSA, client, project, presentation, brain cells, lunch, work) is handled seamlessly. Noted deviations are typical ASR behavior: punctuation is collapsed into sentence breaks, "Almost two hours" became "Almost 2 hours", "na-stuck" → "nakastuck", "kailangan nating" → "kailan nating".

File:Buzz Folder Watch tab.png

2026-08-09T06:10:17Z