Keep orthophoto release evidence immutable

2026-07-17 02:23:46 +02:00
parent 06d05f03a6
commit 0c2ebc1ffc
5 changed files with 79 additions and 3 deletions
@@ -168,7 +168,9 @@ flight-day preflight identities; review binds a named approval; applied
 evidence binds both to the immutable Dataset id and checksum. Paths outside
 this root, changed files and changed provider/local state fail closed. Only the
 normalized GeoTIFF enters ordinary Dataset storage through DatasetService.
-Existing `most_recent_at_*` raster metadata is never rewritten.
+Existing release evidence and `most_recent_at_*` raster metadata are never
+rewritten. An exact apply retry validates and returns the original applied
+evidence rather than replacing it.

 DHMV II DTM/DSM outputs are also normal raster Dataset files. The provider WCS
 returns multipart coverage data; GeoIntel retains response and extracted