# MODIFIABLE REQUEST FOR PROPOSALS (RFP) TEMPLATE
## Project Title: Oracle 7.3.4, 8i & 9i Solaris SPARC to Oracle 23ai Migration (ORA-28040 / SQL*Net V2)
- **RFP Document Reference**: `VNA-RFP-008` (Companion to Solution Brief `VNA-SB-008`)
- **Issuing Organization**: `[INSERT ORGANIZATION / COMPANY NAME]`
- **Issue Date**: `[2026-10-27]`
- **Proposal Due Date**: `[INSERT DATE, e.g., +30 Calendar Days]`
- **Reference Architecture Portal**: https://oracle-7-to-23ai-migration.web.app/
- **Template Attribution**: This site is designed by Viscosity.AI

---

## SECTION 1: ISSUING ORGANIZATION PROFILE & PROCUREMENT SCHEDULE (MODIFIABLE)

> **Instructions for RFP Author**: Replace all bracketed placeholders (`[...]`) below with your organization's specific dates, contacts, and environment metrics before issuing to prospective bidders.

| Procurement Milestone | Target Date / Entry (Modifiable) |
|---|---|
| Issuing Organization Name | `[Insert Legal Entity Name]` |
| Primary Procurement / Technical Contact | `[Insert Name, Title, Email]` |
| RFP Issue Date | `[2026-10-27]` |
| Vendor Written Questions Due | `[Insert Date - Week 2]` |
| Organization Responses to Vendor Q&A | `[Insert Date - Week 3]` |
| Final Vendor Proposals & Pricing Due | `[Insert Date - Week 4]` |
| Technical Architecture Demos / Oral Presentations | `[Insert Date - Week 5]` |
| Target Contract Award & Phase 0 Kickoff | `[Insert Date - Week 6]` |

### 1.1 Executive Summary & Business Objectives
`[INSERT COMPANY NAME]` ("Organization") is soliciting competitive proposals from qualified enterprise architecture and engineering firms to modernize and transition our current **Oracle7 (7.1.3 / 7.3.4) & Oracle8i/9i on Solaris SPARC / HP-UX (SQL*Net V2 / TNS)** environment to **Oracle Database 23ai / 26ai on Linux / OCI via Wire-Level Protocol Gateway**.

Our primary business and technical objectives are:
- Defense, manufacturing, telecom, and utility operators still run Oracle 7.1.3 or 7.3.4 on aging Sun UltraSPARC / Solaris 2.6-8 hardware because the connecting C, Pro*C, Ada, or Forms 4.5 client binaries have no surviving source code or build toolchains.
- Oracle Database 12c, 19c, and 23ai permanently removed server-side support for SQL*Net v2 (`TNS version 308`), `O3LOGON` challenge-response authentication, and `OCI7` (` OOPEN`/`OPARSE`/`OEXFET`) wire packets.
- Competitors propose keeping an unpatched Oracle 9i or 11g 'bridge database' alive forever with `DB_LINK` synonyms, which still fails on `OCI7` cursor semantics, `ROWID` format changes (18-byte restricted vs. 10-byte extended), and `LONG RAW` buffers.

---

## SECTION 2: CURRENT ENVIRONMENT BASELINE INVENTORY (MODIFIABLE)

Bidders must size their technical delivery plan and fixed-fee milestone pricing against the baseline inventory table below:

| Inventory Dimension | Current Baseline Count / Footprint (Modifiable) | Target Modernization SLA / Objective |
|---|---|---|
| Legacy Source Stack (`Stack X`) | Oracle7 (7.1.3 / 7.3.4) & Oracle8i/9i on Solaris SPARC / HP-UX (SQL*Net V2 / TNS) | Full retirement / modernization |
| Target Architecture (`Stack Y`) | Oracle Database 23ai / 26ai on Linux / OCI via Wire-Level Protocol Gateway | Production-grade HA/DR & security |
| Legacy Database Size (GB) | `[Insert Count, e.g., 650 GB]` | 100% functional parity & optimization |
| PL/SQL Packages & Legacy Client Apps | `[Insert Count, e.g., 260 objects]` | Automated AST & schema uplift |
| Target Cutover Downtime Window | `[e.g., < 15 Minutes / Near-Zero Downtime]` | Rehearsed parallel run + rollback plan |
| Security, Compliance & Identity | `[e.g., SSO/MFA via Entra ID / Okta, Row-Level VPD, Audit Logs]` | Zero critical/high CVEs at Go-Live |

---

## SECTION 3: MANDATORY TECHNICAL SCOPE OF WORK & DELIVERABLES (MODIFIABLE)

The selected partner shall execute the project across four gated phases (**Phase 0: AST Discovery & Architecture Blueprint**, **Phase 1: Core Foundation & Data/Code Conversion**, **Phase 2: Integration, Runtime Filtering & UAT**, and **Phase 3: Parallel Run, Cutover & Hypercare**).

### 3.1 Core Architectural Requirements
1. **[MODIFIABLE REQUIREMENT 1]**: Linux SQL*Net v2 / TTC Wire-Protocol Translator (`sqlnet7-gateway`): A stateless, memory-safe Linux daemon listens on port 1521, accepts authentic `TNS 308 (SQL*Net 2.3.4)` handshakes, emulates `O3LOGON` authentication, and translates `OCI7` TTC calls into modern Oracle 23ai `OCI8` wire operations in real time.
2. **[MODIFIABLE REQUIREMENT 2]**: Automatic ROWID & Datatype Shimming: The gateway intercepts legacy 18-character `BBBBBBBB.RRRR.FFFF` Oracle7 restricted ROWIDs and maps them bi-directionally to Oracle 23ai extended base64 ROWIDs so legacy `WHERE ROWID = :1` updates never fail.
3. **[MODIFIABLE REQUIREMENT 3]**: Direct Schema & Character Set Uplift (`US7ASCII` / `WE8ISO8859P1` to `AL32UTF8`): We extract Oracle7 `.dmp` exports, sanitize legacy dictionary metadata, convert `LONG`/`LONG RAW` columns, and load directly into a Pluggable Database (PDB) on Oracle 23ai.
4. **[MODIFIABLE REQUIREMENT 4]**: Unlock Modern Analytics & APEX on Live Legacy Data: Once the data resides in Oracle 23ai, you can immediately build Oracle APEX 24.2 dashboards, ORDS REST APIs, and AI Vector Search on the exact same tables your legacy 1998 binaries are updating.

### 3.2 Component-Level Conversion & Deliverable Matrix
Bidders must confirm compliance with each component conversion requirement below:

| Req ID | Legacy Artifact / Baseline Workload | Required Target Architecture | Engineering Method & Acceptance Criteria | Priority (Modifiable) |
|---|---|---|---|---|
| REQ-01 | SQL*Net 2.0-2.3 (`TNS Version 305-308`) Connect Packet | Oracle Net Services 23ai (`TNS Version 318+`) + TLS 1.3 | Wire-Level TNS Header & Capabilities Negotiation Proxy | `[Mandatory / Optional]` |
| REQ-02 | Oracle7 `O3LOGON` DES Challenge-Response Auth | Oracle 23ai PBKDF2 / SHA-512 Session Pool | Gateway Credential Vault & Proxy Session Multiplexing | `[Mandatory / Optional]` |
| REQ-03 | `OCI7` TTC Opcodes (`OOPEN`, `OPARSE`, `OEXFET`) | Modern `OALL8` Bundled Execute/Fetch Wire Calls | Stateful TTC Packet AST Translation | `[Mandatory / Optional]` |
| REQ-04 | Oracle7 Restricted `ROWID` (`00001F2A.0001.0004`) | Oracle 23ai Extended `ROWID` (`AAAR3sAAEAAAACXAAA`) | `DBMS_ROWID` Bi-Directional Wire Interceptor | `[Mandatory / Optional]` |
| REQ-05 | Solaris SPARC Big-Endian Physical Datafiles | Oracle 23ai Linux x86_64 / ARM64 PDB | Sanitized Logical Export/Import + Checksum Validation | `[Mandatory / Optional]` |

### 3.3 Mandatory Platform & Tooling Standards
- Viscosity `sqlnet7-gateway` Linux Wire-Protocol Proxy & Replay Harness
- Oracle Database 23ai / 26ai (On-Premises Linux, ODA X11, or OCI Base/Autonomous DB)
- Oracle APEX 24.2 & ORDS for modernizing the UI tier *after* the database is safely off SPARC hardware
- Oracle Data Guard & RMAN for modern HA/DR protection

---

## SECTION 4: VENDOR TECHNICAL Q&A QUESTIONNAIRE & SCORING RUBRIC

Bidders must provide direct, concise written responses to each question below. The Issuing Organization's evaluation committee will grade responses using the embedded benchmark criteria.

### Vendor Question 1: Why doesn't a standard Oracle 11g database link bridge work for all Oracle 7.3.4 clients?
- **Bidder Response Requirement**: Provide a concrete architectural explanation, reference toolset, and verifiable production proof. Generic marketing statements will be scored zero.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: An 11g bridge still requires maintaining an unsupported, unpatched 11.2.0.4 server, breaks when `OCI7` clients inspect `ROWID` strings or `V$SESSION` views, and doubles network latency across two database hops.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

### Vendor Question 2: Do we need the C / Pro*C / Forms 4.5 source code of our legacy client applications?
- **Bidder Response Requirement**: Provide a concrete architectural explanation, reference toolset, and verifiable production proof. Generic marketing statements will be scored zero.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: No. You only point the legacy client's `tnsnames.ora` IP address to our Linux protocol gateway. The client binary believes it is still talking to an Oracle 7.3.4 instance on Solaris.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

### Vendor Question 3: What is included in the downloadable PDF Solution Brief?
- **Bidder Response Requirement**: Provide a concrete architectural explanation, reference toolset, and verifiable production proof. Generic marketing statements will be scored zero.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: The PDF Solution Brief contains the wire-level packet architecture diagram (`TNS 0x0134` to `OALL8`), the `ROWID` and `O3LOGON` translation specification, and our zero-downtime cutover runbook.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

### Vendor Question 4: How do you prevent report and query fan-out bloat, and how do you guarantee zero vendor lock-in?
- **Bidder Response Requirement**: Detail your methodology for clustering redundant legacy queries/reports into canonical core SQL views with runtime or AI-inference filtering, and specify customer code/data ownership upon project completion.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: Bidder must demonstrate deterministic AST SQL clustering (collapsing 75%-90% of cloned reports into core database views with runtime predicates), 100% customer ownership of all DDL, PL/SQL, application source code, and Terraform scripts, and zero proprietary runtime lock-in.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

### Vendor Question 5: Describe your automated regression testing, parallel run, and zero-downtime cutover methodology.
- **Bidder Response Requirement**: Specify how data parity, business-rule equivalence, and rollback safety are verified prior to production cutover.
- **Evaluation Benchmark (What High-Scoring Responses Must Demonstrate)**: Bidder must provide automated row-count and cryptographic hash reconciliation, automated unit/UI test suites (e.g., utPLSQL, Playwright), and a rehearsed cutover runbook with sub-minute rollback capability.
- **Evaluator Score (0 to 10 Points)**: `[   / 10 ]`

---

## SECTION 5: COMMERCIAL PRICING & LICENSING MATRIX (MODIFIABLE)

Bidders must complete the fixed-price milestone table below and disclose all recurring software or cloud consumption assumptions.

| Milestone / Cost Category | Deliverable & Acceptance Gate | Fixed Fee / Annual Cost (USD) | Estimated Duration (Weeks) |
|---|---|---|---|
| **Phase 0: Discovery & AST Code/Schema X-Ray** | Verified inventory, dead-code manifest, core SQL fan-out map, and final blueprint | `$[Insert]` | `[2 - 3 Weeks]` |
| **Phase 1: Target Environment & Automated Uplift** | Provisioned target stack, schema migration, and core business logic conversion | `$[Insert]` | `[4 - 8 Weeks]` |
| **Phase 2: UI, Integrations, Reporting & UAT** | Completed application/portal screens, runtime reports, AOP templates, and UAT sign-off | `$[Insert]` | `[3 - 6 Weeks]` |
| **Phase 3: Production Cutover & Hypercare** | Rehearsed cutover, reconciliation sign-off, documentation, and 30-day hypercare | `$[Insert]` | `[2 - 3 Weeks]` |
| **Optional: Annual Managed Services / Support** | 24x7 monitoring, patching, DBA performance tuning, and quarterly enhancements | `$[Insert / yr]` | `[12 Months]` |

---

## SECTION 6: PROPOSAL EVALUATION SCORECARD (MODIFIABLE)

| Evaluation Criterion | Weight (%) | Description |
|---|---|---|
| **1. Technical Architecture & Automation Tooling** | `35%` | Depth of AST automation, query fan-out rationalization, database/cloud architecture, and zero lock-in. |
| **2. Verifiable Production Experience & References** | `25%` | Proven track record delivering identical `Oracle 7 / 8i / 9i to Oracle 23ai Migration` engagements with measurable outcomes. |
| **3. Cutover Safety, Testing & Compliance** | `20%` | Rigor of data reconciliation, automated regression testing, security/compliance controls, and rollback safety. |
| **4. Commercial Value & Total Cost of Ownership (TCO)** | `20%` | Transparent fixed-fee milestone pricing and 3-to-5 year software/cloud licensing savings. |
| **TOTAL** | **`100%`** | |

---
*Template Reference: `VNA-RFP-008` | Companion Portal: https://oracle-7-to-23ai-migration.web.app/ | This site is designed by Viscosity.AI*