fix(platform): govern geospatial analysis and raster handoffs

backend/app/api/routes/analysis.py

@@ -1,8 +1,9 @@
 from __future__ import annotations
 
-from fastapi import APIRouter, Depends
+from fastapi import APIRouter, Depends, Request
 from sqlalchemy.orm import Session
 
+from app.api.guest_scope import assert_guest_project_scope
 from app.core.errors import AppError
 from app.db.session import get_db
 from app.models import Dataset
@@ -18,12 +19,15 @@ router = APIRouter(prefix="/analysis", tags=["analysis"])
 @router.post("/change-detection", response_model=Envelope[JobRead])
 def run_change_detection(
     payload: ChangeDetectionRequest,
+    request: Request,
     db: Session = Depends(get_db),
 ) -> dict:
     source_dataset = db.get(Dataset, payload.source_dataset_id)
     if not source_dataset:
         raise AppError(code="DATASET_NOT_FOUND", message="Source dataset not found", status_code=404)
+    assert_guest_project_scope(request, source_dataset.project_id)
     ChangeDetectionService._get_project_vector_dataset(db, payload.source_dataset_id, source_dataset.project_id, "Source")
+    ChangeDetectionService._get_project_vector_dataset(db, payload.target_dataset_id, source_dataset.project_id, "Target")
     job = JobService.run_sync_job(
         db=db,
         project_id=source_dataset.project_id,