feat: add governed nationwide AOI orchestration and CUDA enforcement

backend/tests/test_docker_runtime_config.py

@@ -398,7 +398,7 @@ def test_all_in_one_dockerfile_caches_dependencies_and_uses_cpu_torch_for_ai_run
     smoke_index = dockerfile.index("RUN python scripts/gis_import_smoke.py")
 
     assert metadata_copy_index < placeholder_readme_index < dependency_install_index < backend_copy_index < smoke_index
-    assert "GEOINTEL_TORCH_INDEX_URL=https://download.pytorch.org/whl/cpu" in dockerfile
+    assert "GEOINTEL_TORCH_INDEX_URL=https://download.pytorch.org/whl/cu130" in dockerfile
     assert "GEOINTEL_TORCH_VERSION=2.13.0" in dockerfile
     assert "GEOINTEL_TORCHVISION_VERSION=0.28.0" in dockerfile
     assert '--index-url "$GEOINTEL_TORCH_INDEX_URL"' in dockerfile
@@ -424,3 +424,12 @@ def test_unraid_deploy_passes_ai_build_arg_and_yolo_runtime_env() -> None:
     assert '-e YOLO_MAX_DETECTIONS="$YOLO_MAX_DETECTIONS"' in run_script
     assert '-e YOLO_DUPLICATE_IOU_THRESHOLD="$YOLO_DUPLICATE_IOU_THRESHOLD"' in run_script
     assert "-v \"${GEOINTEL_MODELS_PATH}:/app/models\"" in run_script
+def test_unraid_ai_runtime_requests_nvidia_and_fails_closed() -> None:
+    run_script = (ROOT / "deploy" / "unraid" / "run-dockerman-container.sh").read_text(encoding="utf-8")
+    dockerfile = (ROOT / "deploy" / "unraid" / "Dockerfile.all-in-one").read_text(encoding="utf-8")
+
+    assert "--gpus all" in run_script
+    assert 'YOLO_DEVICE="${YOLO_DEVICE:-cuda:0}"' in run_script
+    assert 'YOLO_REQUIRE_CUDA="${YOLO_REQUIRE_CUDA:-true}"' in run_script
+    assert '-e YOLO_REQUIRE_CUDA="$YOLO_REQUIRE_CUDA"' in run_script
+    assert "https://download.pytorch.org/whl/cu130" in dockerfile