This release focuses on improving timer accuracy, login/logout stability, synchronization between Web and Desktop platforms, server performance, export reliability, and reporting discrepancies.

Additionally, AI failover handling has been enhanced to improve overall system resilience and operational continuity.

Enhancements

1.1 AI Failover Capabilities

To improve system reliability during AI service interruptions:

• Implemented exponential backoff retry mechanism for LLM calls (up to 4 retry attempts).
• Added fallback LLM instances per node for improved fault tolerance.
• Ensures continued operation during primary model unavailability.
• Significantly reduces downtime risk during AI service disruptions.

1.2 Export Functionality Improvements

Export handling has been optimized for better reliability and performance:

• All reports now download directly, regardless of file size.
• Email delivery for exported reports has been discontinued.
• Verified exports with up to 32,000 records.
• No noticeable load spikes observed on:
• Application Server
• RDS Database
• Immediate file download confirmed across environments.

Fixed Issues

A. Member Timesheet

• Corrected timezone display discrepancies.
• Times now accurately reflect the employee’s selected timezone.

Tickets:

#AIITSupport-1778, #AIITSupport-1798, #AIITSupport-1800

B. AVA Profile – Timezone Selection

• Streamlined timezone options.
• Aligned timezone naming with Microsoft standards for easier selection.

Tickets:

#AIITSupport-1779

C. VA Vision Desktop Timer Issues

Fixes Implemented:

• Corrected incorrect daily total time display.
• Timer now displays accurate hours after app refresh.
• Timer properly resets at the start of new sessions.
• Timer resumes correctly after break completion and refresh.
• Resolved timer reduction issues after break.
• Eliminated timer conflicts between Web and Desktop.
• Fixed punch-out freezing issues.
• Corrected dashboard timer discrepancies.
• Resolved timezone-based timer inconsistencies.

Tickets Covered:

#AIITSupport-1786, #1785, #1850, #1802, #1804, #1805, #1791, #1832, #1823, #1824, #1825, #1828, #1829, #1873,

#1917, #1933, #1934, #1951, #1972, #1948, #1949, #2003, #2061, #2060, #1970

D. Web & Desktop Time Synchronization

• Resolved timestamp discrepancies between:
• AVA Web Portal
• VA Vision Desktop App
• Ensured complete timer synchronization across platforms.

Tickets:

#AIITSupport-1799, #AIITSupport-1801, #AIITSupport-1787

E. Login / Logout Stability

Web Portal:

• Resolved logout blockages caused by pending punchout prompts.
• Fixed missing sign-in options.
• Resolved login access issues across UAT and Live.
• Eliminated logout errors.

Desktop App:

• Users can now log in directly without first accessing Web Portal.
• Fixed login dependency and authentication sync issues.

Tickets Covered:

#AIITSupport-1914, #1919, #1920, #1936, #1937, #1942, #1943, #1944, #1945, #1946, #1957, #1958, #1961, #1962, #1966, #1973, #1975, #1977, #1978, #1979, #1980, #1981, #1983, #1984

F. Punchout & Break Handling

• Punchout sessions now close correctly.
• No unexpected logout after punchout.
• Break time now recorded accurately.
• Timer resumes correctly after break.
• Fixed inability to punch out and submit reports.
• Resolved auto punchout inconsistencies.

Tickets:

#AIITSupport-1807, #1877, #1988, #1989, #1991, #1997, #2064

G. Task Menu Date Filter

• Date filter now strictly limits results to selected date range.

Tickets:

#AIITSupport-1797

H. Reporting & Productivity Issues

• Fixed productivity percentage display issues.
• Resolved screenshot activity percentage issues.
• Corrected discrepancies between:
• Productivity %
• Activity %
• Worked Time
• Fixed screenshot visibility issues.
• Export email issues resolved (feature now removed).

Tickets:

#AIITSupport-1892, #1909, #1897, #1931, #1932, #1998

I. Server & Performance Improvements

Resolved multiple server instability and timeout issues across UAT and Production:

• Addressed 502 errors.
• Fixed Bad Gateway errors.
• Resolved web timeouts.
• Eliminated severe slow-loading issues.
• Restored server availability during downtime incidents.
• Improved overall response time and stability.

Tickets:

#AIITSupport-1891, #1910, #1915, #1916, #1925, #1926, #1954, #1956, #2014

J. Role / Settings / Configuration

• Processed role change requests.
• Clarified and addressed 2FA configuration queries for new employees.

Tickets:

#AIITSupport-1999, #2002

Production Tickets Addressed (Post-UAT)

All UAT-identified issues were validated and resolved in Production.

Additional live environment discrepancies were corrected to ensure:

• Timer consistency
• Accurate break calculations
• Stable authentication
• Server reliability
• Export stability

Resolution Summary

After deployment:

• VA Vision Web & Desktop timers are fully synchronized.
• Login/logout processes are stable across platforms.
• Punchout operations record time accurately.
• Breaks, productivity, and screenshots are accurately recorded.
• Server performance significantly improved.
• Export functionality works reliably with large datasets.
• AI failover ensures better uptime and stability.

The following release notes summarize the updates, enhancements, and fixes included in Release 25.10, now successfully deployed to the Production Environment. This release emphasizes system stability, accurate time tracking, enhanced security, AI chatbot improvements, global timezone standardization, and infrastructure upgrades.

1. Core Stability & Time Tracking Enhancements

Multiple critical issues identified during UAT and earlier releases have been resolved to ensure reliable synchronization between Web and Desktop applications.

Fixes and Improvements

• Fixed login issues for VAs on the Desktop application.
• Improved timer synchronization between Web and Desktop platforms.
• Corrected offline sync failures to restore activities upon internet reconnection.
• Resolved incorrect idle hour calculations in reports.
• Fixed timer rollback issues when tracking was stopped.
• Addressed time deduction issues on re-login or application restart.
• Enhanced screenshot capture intervals with configurable or randomized durations.
• Fixed full-screen resolution issues to ensure consistent screenshot captures.
• Added sleep and lock detection to prevent time difference discrepancies.

Impact

• Consistent time tracking, accurate reporting, and stable performance across all devices.

2. Security & Authentication Enhancements

This release significantly strengthens authentication and access control mechanisms.

Enhancements

• Implemented Two-Factor Authentication (2FA) on Web.
• 2FA codes are delivered via email.
• Deployed Single Sign-On (SSO) integration with HRMS and CSV export API.
• Added token-based authorization for API-level validation.
• Improved password strength validation during registration and password changes.
• Enabled secure admin access (“Login as User”) under monitored conditions for troubleshooting.

Impact

• Enhanced account security and a unified authentication flow across integrated systems.

3. Global Timezone Standardization (UTC Conversion)

• All date and time values are now stored in UTC and dynamically converted to each user’s local timezone.
• Applied across Tasks, Projects, Members, and related modules.
• Agency Client timezone is standardized to UTC.

Impact

• Consistent and accurate time-based reporting and activity tracking across all geographic regions.

4. HRMS Synchronization & User Management

Enhancements

• Introduced SSO-based synchronization between HRMS and AgencyVA.
• User creation from HRMS into AgencyVA requires the creator to already be registered in AgencyVA.
• Added APIs for user detail viewing and real-time updates between both systems.
• Integrated HRMS user role management for cross-module consistency.

Impact

• Simplified user administration and improved data consistency between platforms.

5. AVA-AI Chatbot Enhancements

The AVA-AI Chatbot received major architectural, functional, and UI upgrades.

Architecture & APIs

• Implemented a new database and schema for conversations and messages.
• Added APIs for:
• File upload and download
• Chat history retrieval
• Session persistence
• Integrated LangGraph for real-time streaming and contextual conversation handling.
• Enabled session-based chat memory to maintain context across interactions.

UI & Experience

• Enhanced chat interface with:
• Sidebar for multiple chat sessions
• Welcome cards for new users
• Improved loaders, error handling, and dialog designs
• Removed redundant disclaimer messages.
• Optimized overall widget performance.

Impact

• A faster, smarter, and more contextual AI assistant experience.

6. Infrastructure & Deployment Improvements

Enhancements

• Implemented Bastion Host setup for secure SSH access during internal database maintenance.
• Aligned Development, Staging, and Production environments with the latest stable builds.
• Released a new Windows Production Installer with automatic desktop shortcut creation.

Impact

• Improved deployment reliability, stronger production security, and faster maintenance workflows.

7. UI/UX and General Improvements

Fixes and Enhancements

• Added loaders and spinners to login and forgot password screens in the Desktop App.
• Replaced icons to improve accessibility and visual clarity.
• Fixed incorrect total record counts on the Member Reports page.
• Corrected records-per-page display issues.
• Resolved pagination issues when navigating between pages.

Impact

• A cleaner, faster, and more user-friendly experience across all modules.

The following release notes summarize the updates, enhancements, and fixes for Release 25.9 of the VAVision ecosystem, encompassing the AVA AI Chatbot, the VAVision Desktop application, and general system infrastructure.

1. AVA AI Chatbot Enhancements

A significant portion of this release focuses on the architecture and functionality of the AVA AI Agent to provide more accurate, real-time, and domain-aware responses.

Advanced Agent Orchestration

Introduced a Supervisor Agent to act as a central orchestrator, routing queries between:

• RAG Agent (insurance-specific knowledge)
• General Response Agent (general knowledge)

Implemented Guardrails to detect and block prohibited or unsafe queries, including politics, religion, and hate speech.

Real-Time Streaming & Feedback

Enhanced API and UI to support sequential streaming, showing step-by-step progress (e.g., “Analyzing query,” “Retrieving documents”).

Added a disclaimer indicating that AVA-AI is in its training phase and may produce incomplete responses.

Comprehensive File Processing Pipeline

Developed a new pipeline for uploading and processing documents:

• Supported formats: .pdf, .docx, .xls, .txt

Features include:

• Automatic data extraction
• Conversion to Markdown for consistent processing
• Summarization agent using recursive chunking for long documents

Updated UI to display uploaded files in a dedicated area above the message box.

Response Quality & Research

• Refined agent instructions to improve response structure (lists, bullets) and accuracy.
• Conducted research on integrating real-time internet search functionality to supplement internal knowledge.

2. VAVision Desktop (Avalonia UI Transition)

The desktop application is transitioning to Avalonia UI to enable a production-ready, cross-platform experience (Windows, Linux, macOS).

New UI Screens

Built a new Projects/Tasks view mirroring the WinForms interface with:

• Interactive start/stop buttons
• MVVM-based data binding

Added:

• Splash Screen with loader on startup
• Dedicated Sync Screen for managing unsynced local records

Designed and implemented Break and Call modals to track user activity locally.

Core Desktop Functionality

Integrated local database storage for sync data.

Implemented periodic screenshot capture with input event monitoring (keyboard/mouse activity).

Implemented a cross-platform auto-update mechanism.

Created installers:

• Windows (.exe)
• Linux (.deb)

Added centralized file-based logging for auditing and debugging.

3. Web Portal & Infrastructure

Integrations & SSO

Implemented Single Sign-On (SSO) between AgencyVA and HRMS.

Integrated NowCerts legacy data with a new tab for viewing and searching imported records.

Added Zoho and Amazon SES service integrations for improved mail handling.

Monitoring & Security

Enforced HTTPS for S3 buckets to ensure encryption in transit.

Configured AWS Backup for production RDS instances with a 10-day retention period.

Set up Grafana and Prometheus monitoring on Ubuntu, including:

• Real-time metrics
• Automated CPU utilization alerts via AWS Lambda and SNS

Modified GoAccess reports to display timestamps in Karachi Time (UTC+5).

Resource Optimization

Downgraded specific AWS RDS instance types and removed unused instances.

Updated logging to stream in real time instead of persisting to disk, reducing disk I/O overhead.

4. Bug Fixes

AI Chatbot

• Resolved LangGraph StreamWriter incompatibility related to Python versions.
• Fixed validation error where the RAG Agent crashed when search results returned a string instead of a dictionary.
• Addressed RateLimitErrors (429) by implementing retry logic with exponential backoff for OpenAI API calls.

Desktop App

• Fixed application hang on invalid credentials with continuous loading screen.
• Resolved “Forgot Password” feedback issue where no success/error message was displayed.
• Corrected timer discrepancies showing negative values after stopping tasks.

General

• Disabled excessive email notifications for task and project creation, limiting notifications to essential “Forgot Password” alerts.
• Fixed a bug in the call tracker toggle that incorrectly sent “STOP” signals to the API.

1. Task Management Enhancements

1.1 Change in Task Type Field (Task Creation)

• Updated the Task Type field behavior during task creation.
• Improved classification logic for better task categorization.
• Ensures more accurate reporting and filtering.

1.2 Extended Character Limit – Title Field

• Increased the character limit of the Task Title field.
• Allows users to enter more descriptive task titles.
• Prevents truncation issues previously faced by users.

1.3 Added “Agency Name” Dropdown

• Introduced a new dropdown field labeled “Agency Name” in Task Creation.
• Enables structured selection instead of manual text entry.
• Improves data consistency and reporting accuracy.

1.4 Added “Insured Name” Text Field

• Added a new short text field labeled “Insured Name”.
• Allows capturing additional relevant client information.
• Supports better traceability and documentation.

2. Chatbot Experience Improvement

2.1 Typing Animation for Instant Chatbot

• Implemented real-time typing animation.
• Creates a natural, conversational feel.
• Enhances overall user experience.
• Improves perceived response time.

3. UI & Functional Improvements

• Multiple backend optimizations for improved stability.
• Form validations improved to prevent incorrect data submissions.
• Minor UI enhancements for better usability.
• Field-level refinements for cleaner data handling.

4. System & Infrastructure Updates

4.1 SSL Certificate Auto-Renewal Configuration

• Configured a scheduled cron job for automatic SSL certificate renewal.
• Reduces risk of downtime due to certificate expiry.
• Improves system reliability and security.

5. Testing & Quality Assurance

5.1 Staging Testing

• Full testing conducted on staging environment.
• Verified functional, UI, and integration changes.
• Ensured stability before production deployment.

5.2 Post-Production Testing

• Performed live environment validation.
• Confirmed successful deployment of all enhancements.
• Verified no impact on existing features.

6. Deployment & Data Handling

6.1 Production Deployment

• Successfully deployed Release 25.8 to production.
• All planned features and enhancements implemented.

6.2 Data Restore & Mapping

• Resolved database-related deployment discrepancies.
• Ensured accurate data mapping.
• Restored affected data where necessary.

Overall Impact of Release 25.8

• Improved Task Creation workflow
• Enhanced data structure and reporting readiness
• Better chatbot interaction experience
• Increased system security (SSL automation)
• Stable and verified production deployment

This release marks a significant milestone in the evolution of the AVA platform, focusing on robust security hardening, infrastructure scalability, and critical functional improvements. Below are the detailed notes regarding the updates deployed in Release 25.7.

1. Security Implementations (Penetration Testing Fixes)

A comprehensive security overhaul was conducted following penetration testing to protect against various vulnerabilities and ensure data integrity.

Vulnerability Remediation

Implemented fixes for Mass Assignment Privilege Escalation, preventing users from unauthorized role changes, and resolved several Authorization Bypass vulnerabilities related to user detail modifications and notification management.

Injection Protection

Added middleware and filter hooks to block SQL Injection and Cross-Site Scripting (XSS) vulnerabilities.

Session & Authentication

Configured the Secure flag for session cookies and implemented HTTP Strict-Transport-Security (HSTS) headers to prevent unencrypted communication.

Access Control

Restricted public access to RDS databases, implemented an Account Lockout mechanism to thwart brute-force attacks, and addressed Username Enumeration vulnerabilities.

AWS Hardening

Enabled Multi-Factor Authentication (MFA) and External IDs for cross-account roles, enforced a strong AWS IAM password policy, and updated third-party components like jQuery and Apache to newer, secure versions.

Data Encryption

Enabled EBS and RDS encryption at rest across production and beta environments to ensure compliance with security best practices.

2. Server & Performance Upgrades

To improve application responsiveness and scalability, the following infrastructure upgrades were performed:

Environment Modernization

The new staging/beta server has been established on the latest stable Ubuntu release (Noble 24.04).

Hardware Scaling

EC2 instance types for development, staging, and shadow production were upgraded to t2.xlarge and t2.2xlarge to handle higher loads.

Framework Upgrades

Updated PHP-based applications from PHP 7.3 to PHP 8.3 and upgraded Laravel applications to Laravel 10.

Resource Optimization

Tuned PHP-FPM settings (e.g., increasing pm.max_children) to better utilize server resources and handle simultaneous requests.

Monitoring & Alerting

Installed Grafana and Prometheus on all servers to track CPU, RAM, and disk usage, with integrated AWS Lambda and SNS alerts for real-time performance monitoring.

3. Critical Functional Bug Fixes & Improvements

Enhancements were made to the core Web Portal and Task Modules to improve the user experience:

Task Module Enhancements

Task Category Field Updated

• Changed the name from “Task Type” to “Task Category”.
• Added new dropdown options.

Longer Task Titles Allowed

• Increased the character limit for the Title field to support longer names.

New Field: Agency Name

• Added a new dropdown field called “Agency Name”.
• Only Supervisor users can see and use this field.
• Options are based on the list shared by your team.

New Field: Insured Name

• Added a text field for entering the Insured Name.
• This field accepts special characters such as &, %, #, etc.
• Updated logic to allow duplicate task titles and permitted the same date for both Due Date and Reminder Date.
• Added a “Notes” column to task records for better visibility.
• Fixed page crashes when accessing the “To Be Reviewed” and “Completed” sections in Tasks.

General Web Updates

• Expanded Date of Birth support to allow entries prior to 1950.
• Updated the Premium amount field to accept decimal values (period marks).
• Resolved global SMTP errors that caused misleading “Something went wrong” messages during email-based actions.
• Restricted screenshot visibility so that agents can no longer view their own screenshots, ensuring privacy in accordance with new supervision policies.

4. VAVision Desktop Agent Compatibility

Reliability Fixes

Resolved issues where screenshots were not uploading correctly due to file matching logic errors.

Standalone Installer

Created a new standalone Windows installer using InnoSetup, which includes an automatic check and silent install for SQL Server LocalDB.

Future Readiness

Conducted R&D for a next-generation desktop agent built on a modernized cross-platform .NET framework.

Parallel Support

Both the current and beta desktop agents will remain fully functional during the migration period to ensure no disruption in performance tracking.