fix(platform): govern geospatial analysis and raster handoffs

backend/app/api/routes/datasets.py

@@ -5,13 +5,13 @@ from datetime import datetime
 from typing import Any
 from uuid import UUID
 
-from fastapi import APIRouter, Depends, File, Form, HTTPException, Query, Response
+from fastapi import APIRouter, Depends, File, Form, HTTPException, Query, Request, Response
 from fastapi import UploadFile
 from sqlalchemy.orm import Session
-from app.models import Area, Project
-
+from app.core.config import get_settings
 from app.core.errors import AppError
 from app.db.session import get_db
+from app.models import Area, Project
 from app.schemas import (
     BathymetryPartitionFinalizationResult,
     BathymetrySourceProbeRead,
@@ -1172,11 +1172,14 @@ def raster_tile_dataset(
     project_id: UUID,
     dataset_id: UUID,
     payload: RasterTileRequest,
+    request: Request,
     db: Session = Depends(get_db),
 ):
     dataset = DatasetService.get_dataset(db, dataset_id)
     if dataset.project_id != project_id:
         raise HTTPException(status_code=404, detail="Dataset not found")
+    principal = getattr(request.state, "auth_principal", None)
+    guest_max_tiles = get_settings().yolo_max_tiles if getattr(principal, "role", None) == "guest" else None
     job = _run_job_sync(
         db=db,
         project_id=project_id,
@@ -1189,6 +1192,7 @@ def raster_tile_dataset(
             tile_size=payload.tile_size,
             overlap=payload.overlap,
             output_name=payload.output_name,
+            max_tiles=guest_max_tiles,
         ),
     )
     return envelope(job)