Add governed SPW bathymetry analysis
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s

This commit is contained in:
Codex
2026-07-19 04:07:01 +02:00
parent ae3d3dc634
commit 70c5e34ecf
37 changed files with 1852 additions and 102 deletions
+22
View File
@@ -1984,6 +1984,28 @@ docker exec geointel python /app/scripts/probe_mdk_bathymetry.py
This performs only `GetCapabilities`, keeps strict TLS verification enabled
and returns exit code `2` for an honest non-ready source.
## Bounded SPW bathymetry raster
Download or stage only the official SPW ZIP documented in
`docs/DATA_SOURCES.md`. The operator pins its SHA-256, validates its archive
and raster contract, and imports a bounded COG through the public GeoIntel API:
```bash
docker exec geointel python /app/scripts/import_spw_bathymetry.py \
--base-url http://127.0.0.1:8000 \
--project-name "Belgium and North Sea Workbench" \
--area "RC Golden - Wallonia urban-rural" \
--bbox 4.85,50.45,4.87,50.47 \
--raw-zip /app/storage/operator-evidence/spw-bathymetry/2023-05-23/raw/BATHY_50CM_ALTITUDE_DNG_GEOTIFF_3812.zip \
--output-dir /app/storage/operator-evidence/spw-bathymetry/2023-05-23/derived
```
Use `--dry-run` to validate identity and scope without cropping or
persistence. Use `--download` only when the requested raw path does not yet
exist; download remains strict-TLS and fixed to the official source URL.
Selections above `--max-pixels` fail before raster materialization.
# Release backup and restore proof
The release-candidate safety path is host-operated against the running