09 GOV Regulated sectors Critical

Public Administration — Citizen Portal with ENS

Citizen portal with Cl@ve authentication, ENS medium category, EU AI Act, and Spanish AI Law 15/2024.

◻ intake ★★★

△ architect ★★★

◇ vigil ★★★

⬡ licit ★★★

Architecture diagram

Context

Citizen portal with React, Spring API, Cl@ve authentication, common services (Registry, Notifications, e-Office, e-Signature), and encrypted PostgreSQL. Spanish public administration is doubly regulated: ENS + EU AI Act + AI Law 15/2024.

Flow with 4 tools

◻ Phase 01 — intake

120+ page technical specifications

Processes technical specs, Confluence functional requirements, and ENS regulations.

◻ intake

intake init "Citizen Portal v2" \
  --source docs/pliego-tecnico-portal.pdf \
  --source confluence://ayto/requisitos-funcionales \
  --source docs/ens-categoria-media.pdf \
  --mode enterprise

△ Phase 02 — architect

Spring Boot + React

Implements citizen portal modules with configured pipeline.

△ architect

architect pipeline pipelines/portal-ciudadano.yaml \
  --var module="tramites-electronicos"

◇ Phase 03 — vigil

ENS compliance

Verifies ENS medium category security compliance.

◇ vigil

vigil scan src/ --format sarif --output vigil-portal.sarif

⬡ Phase 04 — licit

Public sector compliance

FRIA for citizen portal with impact on rights to public service access, non-discrimination, and data protection.

⬡ licit

licit init && licit trace
licit fria
licit annex-iv
licit connect vigil --sarif vigil-portal.sarif
licit report --format html --output compliance/portal-compliance.html
licit verify --min-score 85

Why licit is critical here

Spanish public administration is doubly regulated: ENS + EU AI Act + AI Law 15/2024. A citizen portal using AI in its development is a high-risk system affecting fundamental rights.