Add official source edition probes

2026-07-16 17:33:40 +02:00
parent fd05c46e2a
commit 595967f892
27 changed files with 1513 additions and 18 deletions
@@ -9302,3 +9302,40 @@ Next:
 - Add machine-readable catalogue release probes only for providers with stable
  official version endpoints, keeping every acquisition an explicit bounded
  operator action.
+
+## Sprint 222 - Official source edition probes (2026-07-16)
+
+Implemented:
+- Verified the public machine-readable contracts published by Digitaal
+  Vlaanderen. GRB WFS and OMWRGBMRVL WMS capabilities expose stable ISO 19139
+  CSW records containing real source editions and metadata dates.
+- Added a canonical project endpoint that reads only allowlisted capabilities
+  and linked `metadata.vlaanderen.be` `GetRecordById` responses. It confirms
+  GRB `GBG/WBN/WGO/ADP` and orthophoto `Ortho/Vliegdagcontour` availability,
+  then reports the official edition beside local `source_version` evidence.
+- Added strict HTTP(S)/metadata allowlists, timeout and byte limits,
+  post-redirect validation, SHA-256 capabilities evidence, provider-isolated
+  degraded/unavailable states and a short in-memory cache.
+- Added an explicit Status action and operator CLI flags. Neither path runs on
+  page load, starts a job, downloads source data or changes a Dataset.
+- Added Compose, all-in-one Unraid and DockerMan controls for the bounded probe.
+
+Validation:
+- Deterministic tests cover official XML parsing, edition comparison,
+  provider failure isolation, metadata URL rejection, size limits, caching,
+  disabled mode and canonical envelopes.
+- Frontend typecheck/build and targeted backend tests pass before the full
+  release and Tower validation recorded in the delivery result.
+
+Boundaries:
+- The general Datavindplaats API requires authentication and is not scraped or
+  silently bypassed. GeoIntel uses only public metadata records advertised by
+  the official OGC services.
+- A version difference remains a manual provenance-review signal. No automatic
+  import, refresh scheduler, GRB feature fetch or orthophoto pixel request was
+  added.
+
+Next:
+- Extend the same probe pattern only where another official source publishes a
+  stable machine-readable edition. Do not infer release versions from service
+  protocol versions, ETags or HTTP modification dates.