S4S Server4Sale · Third-Party Monitoring & Evaluation

NAVTTC M&E Portal

Digitising third-party monitoring of NAVTTC-funded training partner institutes — field capture on a phone, server-side audit trail, and a submission package that survives scrutiny by the Director (M&E).

Workflow: pre-visit → visit → QA → approval → packet → claim Platform: Laravel 12 / PHP 8.4 / MariaDB 11.4 Status: baseline verified, field build next
The brief

What this system is for

NAVTTC commissions independent third-party firms to inspect the private institutes delivering its funded training. Server4Sale holds that mandate for the PMYSDP Skills of Tomorrow (Batch-I) programme under work order F.139/2025-26/Proc-S4S-SOT-B1. This portal is the instrument that turns a field visit into a defensible, payable claim.

The problem

Paper forms, re-keyed

Officers complete a printed NAVTTC form at the institute, then it is transcribed, reviewed, approved and packaged for NAVTTC HQ. Every hand-off is a place for data loss, delay and error — against a five-day approval clock with penalties attached.

The approach

Capture once, on site

The same form, captured on the officer's phone at the institute: per-course/per-shift scope, evidence photographed at the point of observation, and incremental server-side autosave that survives a dropped connection. One record, from the visit through to the report.

The standard

Defensible, not fast

NAVTTC's own SOP places QA and completeness responsibility on the firm, and states the M&E Section is not expected to complete missing documentation or perform basic quality assurance. The portal is therefore built to make the firm's own record provable, not merely quick.

Scope. One programme (Skills of Tomorrow Batch-I) across Sindh, delivered in two packages. The work order and the official allocation define the institute set; the portal's catalogue mirrors it rather than restating it. Cohort identifiers, candidate identities and national-ID values are deliberately outside the platform's reporting boundary.
The workflow

From work order to payment

The full monitoring lifecycle as NAVTTC specifies it, and where the portal acts at each stage. Stages 1, 2, 4 and 6 are governed by the official commencement SOP of 12 October 2026; stages 3 and 5 are the firm's internal controls. Items marked immediate reporting are conditions NAVTTC requires reported without delay.

1

Pre-visit readiness

Field Supervisor & Programme Coordinator
  • Submit names, contact details and qualifications of enumerators to NAVTTC; selection and onboarding must follow the HR Selection & Onboarding Framework of 7 September 2026.
  • Submit a monitoring schedule stating the planned start and end dates of visits.
  • Reconcile institute data across email, Work Orders and the M&E App — any difference in number or names is reported to the M&E Section immediately, not silently resolved.
  • Review the contract, work order, scope of work and TORs before monitoring begins.
Portal acts hereProgramme and package catalogue with held-allocation protection · schedule register (generated → independently reviewed → manually submitted → acknowledgement recorded) · enumerator and programme membership assignment.
2

The monitoring visit

Field enumerator / Monitoring Officer
  • Tools, equipment & consumables — checked against the Standard Manual of Tools and Equipment for TVET labs and workshops and the prescribed trade requirements; list attached with pictures; missing items identified in remarks. For IT, one computer or laptop per student, minimum Intel Core i5 6th generation or equivalent, with mixed specifications stated explicitly.
  • Biometric registration & attendance — marks only after confirming all students are registered on the PMS biometric machine and reflected on the PMS portal, with records maintained for the full programme duration. Evidence is the visit-day attendance downloaded from the machine and signed by both the Monitoring Officer and the institute representative. A photograph of the machine is not sufficient; TLMS attendance is not a substitute.
  • CCTV — availability and functioning verified, footage recorded and backed up for the full programme duration. A camera photograph alone is insufficient: pictures showing CCTV footage of each relevant classroom and lab are attached to the respective trade form. NSIS connectivity verified and any absence recorded.
  • Trainer — qualifications and experience of the trainer actually teaching verified against supporting documents, never from a CV alone; actual teacher matched against the PMS-registered trainer, with any discrepancy recorded; substitute and acting-trainer circumstances checked.
  • Student performance & portfolio — progress against prescribed curriculum and required tasks, with pictorial evidence of student work and portfolio progress, and significant gaps in completed tasks or TLMS uploads recorded.
  • Assessments — conducted against applicable curriculum and programme requirements, with pictorial evidence attached to the relevant form.
  • Industry linkages — MoU with relevant industry, job fair or industry engagement plan, and documentary proof of OJT or internship, each attached as applicable.
Portal acts hereMobile field capture with per-course/per-shift scope · signed attendance reconciled against the denominator rule · evidence uploaded as a private original, hash-verified and quarantined until a security scan clears it · GPS captured only on explicit consent, with denial and manual states preserved · equipment inventory tied to the manual version and page.
3

Immediate reporting triggers

Monitoring Officer → Supervisor → M&E Section

Report without delay

  • The institute is locked, or there is insufficient evidence that classes have commenced.
  • Classes are conducted at a location different from the NAVTTC-approved location, without approval.
  • The institute has withdrawn from the programme — a copy of the withdrawal letter submitted to the Regional Office must be obtained.
  • Average student attendance is below 10%.
  • Essential tools, equipment or consumables are missing.
  • The institute scores below 5 marks in Trainer, or in Tools, Equipment and Consumables, or both.
Portal acts hereEscalation capture requires an actual recipient, time, source and recorded response — a claim that escalation happened is never inferred. Low-visit-attendance cases force review of prior biometric records and CCTV before submission can proceed.
4

Quality assurance and approval

Field Supervisor → QA reviewer → Programme reviewer → Management
Five days. All submitted M&E forms must undergo thorough quality assurance and be approved by the firm's management on the M&E App within five days of the respective visit. NAVTTC processes monitoring records in parallel to avoid delays in payment to monitoring firms.
  • No form is approved or forwarded to NAVTTC until the firm's QA team confirms it is complete, accurate and fully supported by evidence.
  • QA checks every required field, identity, date, remark, attachment and score; compares totals against source evidence; resolves inconsistencies before approval.
  • Photographic and documentary evidence must be relevant, clear and sufficient; marks must be consistent with the recorded remarks and evidence.
  • Pictorial evidence must be provided separately for each trade and must reflect actual conditions observed — NAVTTC has noted identical pictures being repeated across trades.
  • Every deficiency, deduction and reportable case is clearly explained and documented.
  • Field submission is not QA approval; QA approval is not official App approval. Each is a separate, separately evidenced event.
Portal acts hereOfficer submission → supervisor review → return with a specific, explained correction → programme reviewer's independent internal approval → frozen PDF snapshot with an immutable hash. Any later edit invalidates the current approval while preserving the historical snapshot. Self-review is prevented; an admin cannot fabricate an officer's observation.
5

Submission packet and claim

Programme Coordinator, Management, Finance
  • Consolidated Excel scoring sheets — not only a PDF report — with consolidated reporting kept consistent with those sheets.
  • Financial invoices reconciled to authorised and evidenced visits.
  • Monitoring letter covering penalty scoring or uncertain cases, as requested.
  • Receiving letter and actual acknowledgement evidence, tracked separately from dispatch.
  • Whole-programme records and documents retained online and physically.
  • Claims submitted with the completion certificate to the Director (M&E); M&E verifies the claims before processing payment.
Portal acts hereConsolidated attendance summary and per-visit complete findings PDFs · protected export packets with frozen sources and hashes · schedule register carrying manual-submission and acknowledgement evidence separately. Packet component count and naming remain a management decision, recorded rather than assumed.
6

Standing compliance obligations

The firm, and every officer and QA officer it employs
  • Firms are responsible for the accuracy, completeness and timely approval of their M&E forms.
  • Inaccurate scoring, incomplete evidence, failure to report significant deficiencies, inadequate quality assurance, or delays in approval may cause financial loss to the Government or to training institutes.
  • Approval beyond the prescribed five-day period, and inaccurate awarding of marks, attract penalties under the Executive Director's directions of 15 September 2026. The monetary tariff is not specified in the available guidance and must be obtained before liability is quantified.
  • Firms must ensure these instructions are communicated to their enumerators and QA teams, and followed throughout the monitoring process.
Portal acts hereThe audit trail is the firm's evidence of who captured what, when, on what authority, and who reviewed it. This is the record that answers a payment dispute or a NAVTTC audit — and it is why the workflow, not just the screens, is the product.
Two ways to file a visit

Live at the institute, or on paper and transcribed later

The official form is a printed form completed at the institute. The portal accepts the same form either way, and records which way it was captured, so that a reviewer and NAVTTC can tell a contemporaneous record from a transcription.

Mode A

Live capture

The officer has connectivity at the institute and completes the form on the phone as the visit happens.

  • Answers are entered as each observation is made.
  • Photos are captured at the point of observation, against the category they evidence.
  • Drafts are saved to the server incrementally, with revision checks on every save.
  • Interruption and reconnection are handled: the server revision is re-read and a conflicting edit is shown rather than overwritten.
Mode B

Paper form, transcribed

The officer has no connectivity at the institute, completes the printed form by hand, and enters it into the portal afterwards.

  • A blank form is printed for the visit before travelling, with identity pre-filled and an accession strip carrying the visit reference, the officer and the criteria version.
  • The completed form is uploaded as the original record for the visit.
  • The portal entry is the transcription of that original, and records who transcribed it, on what date, and against which accession id.
  • Photos taken at the institute are imported afterwards, and each is linked to its institute, visit, trade and parameter.

How the two are recorded

AspectLive capturePaper and transcribe
Original recordThe portal entry, with its evidence filesThe scanned paper form; the portal entry is the transcription of it
MarkerCaptured liveTranscribed from paper form — shown in the report, the packet and the audit trail
AttestationField declaration that observed facts and missing items are recorded honestlyField declaration, plus the transcription date, transcribing officer and paper accession id
Before approvalSupervisor review, then independent programme approvalSame, and the transcription is compared against the uploaded paper original
EvidencePhotos uploaded as takenPhotos imported afterwards; every category must still be met
ValidationIdentical. Both modes write to the same visit, the same scopes, the same evidence rules and the same approval chain; the mode is the only difference.
Why the distinction is recorded. The official SOP places responsibility for the accuracy, completeness and timely approval of M&E forms on the firm, and states that NAVTTC's M&E Section is not expected to complete missing documentation, rectify avoidable errors, or perform the firm's basic quality assurance checks. Where a record was made on paper and entered afterwards, the report says so, and a reviewer compares the two before approval. The evidence chain is then the firm's own.

The printable form

In paper mode the officer prints the form for each assigned visit before travelling. Identity fields are pre-filled so the wrong institute cannot be transcribed; observational fields are left blank for completion at the institute; and the accession strip travels with the form so it can be matched back to its visit.

Printed

Identity pre-filled

Institute code, name, address, district, package, trade codes, batch and capacity reference are filled from the visit record. Everything observational is blank.

Carried

Accession strip

Visit accession id, visit id, officer name and the criteria and form version in force on the visit date.

Returned

Uploaded as the original

The completed form is scanned and uploaded, and the portal entry is compared against it before approval.

Photos are required in both modes. The official form carries 18 image boxes, and the SOP requires every observation to be supported by documentary or pictorial evidence. An uploaded original is quarantined until the security scan clears it, and only a clean original counts as evidence — so in both modes the visit cannot be submitted until each required category holds clean, correctly-scoped photographs.
Open the interactive walkthrough
Trade and institute reference

The trades and the institutes this programme covers

Taken from the 16 October 2026 work order and the programme's normalised operational data. All six trades are categorised in the source as High-End (Industrial).

The six programme trades

CodeTradeCategoryTools list source
820AI Powered eCommerceHigh-End (Industrial)Not in the standard manual
819AI for EveryoneHigh-End (Industrial)Partial — no trade list
43Multimedia and Graphic DesigningHigh-End (Industrial)Partial — no trade list
821Earning Money Through FreelancingHigh-End (Industrial)Not in the standard manual
615Digital Marketing & Search Engine Optimization (SEO)High-End (Industrial)Not in the standard manual
818AI Financial Analyst with Power BIHigh-End (Industrial)Partial — no trade list
On the tools and equipment list. The official SOP §2.i(a) requires that tools, equipment and consumables be checked against the Standard Manual of Tools and Equipment for TVET Labs and Workshops and the prescribed requirements for the relevant trade. The 366-page standard manual in the handover is written for commercial-based-training trades — welding, electrician, plumber, machinist, carpenter, beauty, hairdresser — and carries no tools list for these six trades. The programme's own internal SOP records the same point: "Standard tools and equipment list doesnt includes all trade, we have to visit the NAVTCC Website, go the relevant trade > Pull the Assessment Document > Pull the tools and equipment list." The per-trade lists therefore have to be sourced from NAVTTC, and each will carry its URL, version, page and trade mapping so the reference an officer works from is traceable.

The institute set

ScopeDetail
ProgrammePMYSDP Skills of Tomorrow (Batch-I) — Sindh
Work orderF.139/2025-26/Proc-S4S-SOT-B1, dated 16 October 2026, M/S Server4Sale
Package-0837 institutes across 13 districts
Package-0944 institutes across 7 districts
Total81 institutes across 20 districts
Held separately9 institute records, not active allocations — no release authority is established
Batches136 trade/batch records

The full institute list with addresses, districts, package, trades and batches is operational portfolio data and is not published on this page.

What is not yet known for the institutes

Missing

Course start dates

Absent for all 136 batches. The printed form's start date, end date and class timings columns are blank in the source institute forms as well, so this is a gap in the source data rather than a parsing failure. Dates appearing inside timing text are not treated as course start dates.

Missing

Approved capacity

The source supplies a selected-candidate count. That is a source aggregate and is not treated as approved capacity or as attendance. approved_capacity remains null until authority evidence exists.

Unresolved

Campus identity

All 90 institute and campus identities need confirmation against an authoritative list. The importer deliberately refuses to guess, split or merge campuses by name or address, and a missing source id stays flagged for reviewed identity resolution.

Unresolved

Timing records

Eighteen unique timing exceptions — seven missing and eleven with conflicting dates embedded in the timing text. Parsed times remain unverified schedules, and conflicting rows are held outside the actionable schedule rather than being filled with a default.

Where we are

What the platform already does

The existing portal is not a prototype. It is a working, tested application — and the plan is to extend it, not replace it. The table below is the verified result of running its own suites locally against a real MariaDB instance, not a summary of a status report.

Backend suite

82 tests

883 assertions, zero failures — against a real database, not mocks.

Browser scenarios

20 / 20

Including a 390 px officer viewport, offline reconnection and conflict handling.

Import & schedule

9 / 9

Staging, independent approval, interrupted apply, and compensating rollback.

Artifact integrity

227 / 227

Source files hash-verified across both handover packages.

Capabilities in place

AreaWhat it doesStatus
Access controlFour roles — admin, supervisor, field officer, programme reviewer. Programme membership, assignment checks and self-review prevention are enforced server-side, not in the interface.Verified
Field capturePer-course / batch / group / shift / session scope, with each scope holding its own attendance, equipment, people and evidence. Incremental autosave with optimistic revision checks.Verified
EvidencePrivate originals, SHA-256 verification, duplicate detection, quarantined until a malware scan clears. Nothing in quarantine can count as clean evidence or enter a packet.Verified
Review & approvalSubmit → review → return with explained correction → independent internal approval → frozen PDF snapshot. Later edits invalidate the current approval without deleting history.Verified
Master-data importStaged CSV/XLSX with exact column mapping, full dry run, independent hash-bound approval, transactional idempotent apply, and reviewed compensating rollback that blocks blind reversal.Verified
SchedulesGenerated plan → independent review → recorded manual submission → recorded acknowledgement, kept as four distinct states. Nothing is emailed automatically.Verified
AuditImmutable event trail plus idempotency receipts, so a replayed request cannot duplicate an action and a superseded record remains readable.Verified
Official scoringBoth historical scoring workbooks are transcribed with formulas and conflicts preserved, but no rubric is activated: the applicable programme profile and several scoring boundaries are unresolved by the source.Blocked on authority
Official submissionNAVTTC's M&E App has no integration. The portal produces the submission package; a person enters it in NAVTTC's system.External limit
Gap 1 — Mobile experience

Officers reach the desktop portal

On a phone, the officer currently lands on the desktop console — report filters and programme fields — before reaching a visit, and the form itself renders inside a frame. The form is sound; the way it is reached is not.

Gap 2 — Field fidelity

Visit-level questions repeat per course

Infrastructure and photographic evidence are asked once per visit on the official form, but the model collects them per scope — once per inspected course or session. For a two-trade institute that turns a single set of answers and photographs into two. A separate set of hardcoded checks also overlaps the official question set, so some questions are asked twice in two vocabularies.

Gap 3 — Connectivity

Unsent work is discarded

Device-side recovery is disabled in the shipped default. An edit made in a basement classroom with no signal is lost when the tab closes, because it never left the browser. For a field instrument, that is the most damaging failure available.

Gap 4 — Evidence scanning

No malware scanner on the target host

Without a scanner, uploads stay quarantined and packets stay blocked — so no visit can actually be completed. This is an environment requirement, not an application change.

Gap 5 — Trade reference

No tools list for these six trades

The standard manual in the handover is written for commercial-based-training trades. It carries no tools list for AI Powered eCommerce, Earning Money Through Freelancing, or Digital Marketing & SEO, and no usable list for AI for Everyone or AI Financial Analyst with Power BI. The equipment check therefore has no sourced list to work from for any of the six.

The roadmap

How we get to a field-ready portal

Six phases, sequenced so that the highest-risk unknowns surface earliest. Phases 0 and 1 are engineering. Phases 2 to 5 each contain a gate that only the firm or NAVTTC can open — no amount of code substitutes for them.

Phase 0In progress

Baseline and deployment target

Consolidate both handover packages, verify every artifact by hash, and stand up the application on the target host without disturbing the other services sharing it.

  • Source, evidence and data consolidated and hash-verified
  • Local database, toolchain and full suite green from the working copy
  • Remaining: explicit host block with valid TLS, restricted application account, and a malware scanner
Phase 1Next

Field mobile app

The deliverable: a phone-first capture surface that officers actually use in an institute, with no desktop console in the way.

  • Dedicated officer route — today's visits, straight to the visit, no report filters
  • Offline durability: queued payload and photographs that survive a lost connection and reconcile on reconnect
  • Installable as an app, camera-first capture, sectioned progress with jump-to-unresolved
  • No candidate identities, national-ID values or credentials held on the device
Phase 2Highest value

Field form fidelity

Make the data model match the official form's own structure, and make every rule cite the source it comes from.

  • Separate visit-level answers from per-course answers, exactly as the printed form does
  • Collapse the overlapping question sets so each question is asked once, in the official wording
  • Give every rule — including internal policy rules — an explicit source and version, so a firm policy is never enforced as if it were a NAVTTC instruction
  • Server-side validation follows the same model, so the client and the server never disagree
Phase 3Planned

Two ways to file a visit

Support the printed form as a first-class route into the portal, alongside live capture on the phone.

  • Printable blank form per assigned visit, with identity pre-filled and an accession strip carrying the visit reference, officer and criteria version
  • Capture mode recorded on the visit — live or transcribed — and shown in the report, packet and audit trail
  • Transcription attestation: date, transcribing officer and the paper form's accession id
  • Reviewer comparison of the transcription against the uploaded paper original before approval
  • Photo import for the catch-up route, with the same per-category requirement and the same scan gate
Phase 4Gated

Load the real institute data

Staged through the existing reviewed import — never a direct production write.

  • Active allocations, packages, trades, batches and timing observations, in dependency order
  • Dry run shows create, link, update, unchanged, duplicate, conflict, invalid and excluded with reasons
  • Independent reviewer approves the exact source, mapping and change-set hashes before any apply
  • Gate: campus identity confirmation and documented release authority for held allocations
Phase 5Gated

Scoring

Build the engine, keep it switched off until the rubric is authoritative.

  • Resolution-ready scoring engine, inactive by default
  • Conflicts preserved and visible rather than silently averaged: attendance band boundaries, the portfolio percentage gap, partial-assessment credit, and feedback aggregation
  • Programme-specific parameters, including the teacher-to-student ratio, scoped to their source and version
  • Gate: a named programme reviewer resolves each conflict in writing
Phase 6Planned

Reporting and submission

Turn completed visits into the packet NAVTTC expects, and into a claim that survives verification.

  • Consolidated attendance summary and complete per-visit findings, as protected exports
  • Frozen approval snapshots retained against the reviewer's own authorised assets
  • Packet assembly manifest, dispatch and receipt tracked as separate states
  • Gate: packet component set confirmed by management
Boundaries

Data and authority — what is settled and what is not

The handover is deliberately explicit about the difference between a fact and a gap. These are the ones that shape the build, stated the same way.

Settled

What we can rely on

  • The institute set, by official allocation and work order.
  • The official commencement SOP of 12 October 2026, transcribed in full — the binding rules for evidence, marks, QA and the approval clock.
  • The HR Selection & Onboarding Framework of 7 September 2026.
  • Both historical scoring workbooks, transcribed cell by cell with formulas, merged regions and conflicts intact.
  • Four real institute monitoring forms, transcribed — the authoritative shape of the form officers complete.
  • Normalised operational data: programme, packages, trades, batches, shifts, allocations and holds.
Open — needs a human decision

What is still missing

  • Course start dates are absent across the whole cohort, and eighteen timing records are missing or self-contradictory. They are not inferred from timing text.
  • Campus identity is unconfirmed for the active institute set; the importer refuses to guess.
  • Held allocations stay held until release authority is documented in writing.
  • Selected-candidate counts are not approved capacity and are never promoted to it.
  • Scoring boundaries and the applicable programme profile are unresolved.
  • Submission-packet component set and naming await management confirmation.
On privacy. Candidate names, national-ID values, individual contact details and credentials are excluded from this platform's reporting boundary and are not carried in the handover packages. Where a rule requires confirming that a check happened — an attendance signature, a trainer credential — the platform records the evidence reference and the outcome, not the underlying personal value. That is also what makes the finished report safe to hand to NAVTTC.
Decisions

What we need from the firm

Each item below has a technical answer ready. What is missing is authority, not engineering — and none of them blocks the Phase 1 field build, which can proceed in parallel.

D1
Device-side durability policy
Whether queued field data and photographs may persist on an officer's device, and for how long. The recommendation is a short-lived, scope-limited queue that clears on successful sync and on sign-out — protecting fieldwork integrity without leaving personal data at rest. A privacy decision for the firm to make and record.
D2
Which question set is authoritative
The official 26 October form is the source of record. The platform currently also carries a hardcoded set that overlaps it, so some questions are asked twice in different wording. The build will make the official set authoritative and fold the remainder in, with a per-item keep/fold/merge map available for review first.
D3
Which rules are NAVTTC instructions and which are firm policy
Both the official SOP and the firm's internal recommended SOPs are in hand, and they are not the same document. The build will make every enforced rule cite its source and version, so a firm policy is never presented as a NAVTTC instruction — a distinction that matters directly under the penalty regime.
D4
Malware scanner on the target host
Required before any visit can be completed, because quarantined evidence cannot be downloaded, approved or packaged. An environment change, needing the box owner's approval.
D5
First administrator for the portal
Name and email for the initial account, set by its owner at a hidden prompt. The bootstrap refuses to overwrite an existing administrator and will not invent an identity.
D6
Programme coordinator role and scope
The recommended SOPs propose a coordinator role, but a role title is not a permission grant. The platform enforces a specific coordinator scope only once the firm confirms what that scope is.
D7
Submission-packet component set
The internal draft proposes eight components of which four are workflow stages rather than documents; the application currently models six. The conflict is preserved rather than resolved. A management decision on the final set, recorded with its authority.
D8
Per-trade tools and equipment lists
The 366-page standard manual in the handover covers commercial-based-training trades and carries no tools list for these six programme trades. The official SOP requires checking against the prescribed requirements for the relevant trade, so the lists have to be sourced from NAVTTC per trade, each with its URL, version, page and trade mapping recorded.
D9
Whether the institute list is published
The 81 active institutes and 9 held records are the firm's operational portfolio. This page publishes counts only. Whether the full list is made available to the field and monitoring teams, and through which access route, is a decision for the firm.
D10
How a transcribed visit appears in the NAVTTC-facing report
Where a record was made on paper and entered afterwards, the report states that, and the transcription is compared against the uploaded paper original before approval. The walkthrough demonstrates this behaviour so it can be reviewed as a concrete example rather than in the abstract.