Complete RC10 data operations acceptance

CHANGELOG.md

@@ -76,6 +76,17 @@
   backup/confirmation guard to the older demo-export cleanup path.
 - Added a live RC-10 audit that proves critical table counts remain unchanged
   across the storage report and cleanup dry run.
+- Deployed immutable RC-10 image
+  `22fb8d51a9fde39552cf06a789174441631842b6-ai` and repeated the audit against
+  its live PostGIS runtime. It found zero missing direct database artifact
+  references, reported 2,002 bounded dry-run candidates (218,263,512 bytes),
+  retained all data and classified disk pressure as healthy.
+- Separated 224 unavailable historical manifest intermediates from current
+  database-reference integrity: they remain visible provenance warnings and
+  cannot become cleanup candidates.
+- Classified fixed NGI and RBINS national/maritime editions explicitly. The
+  live source-freshness report now records three current sources, zero due
+  sources and zero integrity issues.
 - Added a read-only release-evidence manifest command with Git, migration,
   dependency, configuration checksum and optional live endpoint evidence.
 - Replaced the obsolete pre-build status with the current implemented

docs/CODEX_EXECUTION_LOG.md

@@ -10614,3 +10614,43 @@ Validation:
 Decision:
 
 - RC-9 is complete. RC-10 data operations and retention is active.
+
+## 2026-07-18 - Belgium/North Sea RC-10 data operations and retention
+
+Implemented:
+
+- Added a read-only data-operations audit for storage lifecycle, disk pressure,
+  persisted artifact references, failed work and national, regional and
+  maritime source families.
+- Added dry-run-first cleanup restricted to explicit derived/cache categories.
+  Apply mode requires an exact confirmation token, a recent checksum-verified
+  release backup and a bounded delete ceiling.
+- Mounted release backups read-only and protected release evidence, official
+  source editions, originals, uploads, model assets, operator evidence and
+  unknown paths from cleanup.
+- Hardened artifact discovery for large production tables with bounded SQL
+  counts and distinct-path queries, strict manifest field traversal and
+  separate current-reference and historical-manifest findings.
+- Classified fixed NGI and RBINS national/maritime editions so old publication
+  dates are not mislabeled as stale.
+
+Validation:
+
+- Repository readiness passed backend compilation, 1,021 backend tests,
+  16 frontend tests, frontend typecheck/build and Alembic head
+  `202607160001`; focused final policy tests passed 19/19.
+- Immutable image
+  `22fb8d51a9fde39552cf06a789174441631842b6-ai` deployed healthy with
+  PostgreSQL/PostGIS and the expected migration.
+- The exact live image passed
+  `scripts/run_rc10_data_operations_audit.sh`: disk pressure `ok`, zero missing
+  direct database references, 2,002 dry-run candidates totaling 218,263,512
+  bytes and unchanged critical table counts.
+- The audit retained 224 unavailable historical manifest intermediates as a
+  non-destructive provenance warning. No cleanup was applied.
+- Live national/maritime freshness evidence reports three current sources,
+  zero due/review-required sources and zero integrity issues.
+
+Decision:
+
+- RC-10 is complete. RC-11 final release packaging and acceptance is active.

docs/RC_ROADMAP_BELGIUM_NORTH_SEA.md

@@ -502,7 +502,17 @@ readiness passed with 1,015 backend tests and 16 frontend tests.
 
 ## RC-10 - Data operations and retention
 
-**State: in progress.**
+**State: complete.**
+
+Release image `22fb8d51a9fde39552cf06a789174441631842b6-ai`
+passed the live read-only data-operations audit. It found zero missing direct
+database artifact references, left every critical table count unchanged,
+reported 2,002 bounded cleanup candidates (218,263,512 bytes) without deleting
+them and classified disk pressure as `ok` with approximately 725 GB free.
+The 224 missing historical manifest intermediates remain an explicit
+provenance warning and are excluded from cleanup decisions. National and
+maritime freshness evidence classifies all three fixed official editions as
+`current`, with zero due sources and zero integrity issues.
 
 ### Work
 
@@ -550,6 +560,7 @@ readiness passed with 1,015 backend tests and 16 frontend tests.
 
 ## Current autonomous phase
 
-Continue with RC-10. Data inspection and cleanup planning must remain read-only
+Continue with RC-11. Build and validate the final immutable release candidate,
-until the backup, confirmation and protected-path requirements in RC-10 are
+retain the RC-10 dry-run-only cleanup posture, prove fresh install, upgrade,
-proven.
+restore and rollback, and close only after the tagged image passes live
+Belgium/North Sea browser acceptance.

docs/TODO.md

@@ -28,7 +28,7 @@ maritieme zones.
 - [x] RC-7: kritieke API-routes concrete responsemodellen geven.
 - [x] RC-8: echte frontend- en browser-E2E-releaseflows toevoegen.
 - [x] RC-9: loading, toegankelijkheid, widescreen/mobile en performance afronden.
-- [ ] RC-10: dataretentie, diskdruk en veilige cleanup operationaliseren.
+- [x] RC-10: dataretentie, diskdruk en veilige cleanup operationaliseren.
 - [ ] RC-11: fresh install, upgrade, rollback, releasepakket, tag en live
   acceptatie afronden.