feat(provenance): govern source snapshots and data inputs

backend/app/services/coverage_registry_service.py

@@ -12,6 +12,7 @@ from sqlalchemy.orm import Session
 
 from app.core.errors import AppError
 from app.models import Area, Dataset, Project
+from app.services.dataset_consumption_gate_service import DatasetConsumptionGate
 from app.schemas.coverage import (
     CoverageBBox,
     CoverageCatalogResponse,
@@ -463,6 +464,10 @@ class CoverageRegistryService:
         for dataset in datasets:
             if dataset.status != "ready" or dataset.source_name not in definition.materialized_source_names:
                 continue
+            # A source-name claim alone must not cause an unsafe artifact to
+            # appear as operational authoritative coverage.
+            if not DatasetConsumptionGate.eligible_for_authoritative_coverage(dataset):
+                continue
             layer_names = definition.materialized_layer_names
             if definition.contract.source_name == "digitaal_vlaanderen":
                 theme_sources = FLANDERS_THEME_DATASETS.get(theme, {})