Complete temporal detection safety gate

docs/CODEX_EXECUTION_LOG.md

@@ -36,6 +36,27 @@
 - Local Docker CLI is unavailable on the Windows Codex host. Docker config,
   image build, live health truthfulness, backup and restore are therefore
   scheduled on the Docker-enabled Tower after push.
+- Pushed and deployed commit `9c402e0`; subsequently pushed the cwd-independent
+  backup fix `38a3bd0` and secret rotation command `fc42ea9`.
+- Tower Docker config, all-in-one build, live migration smoke and browser
+  runtime smoke passed. `/health/live` and `/health/ready` report `ok`,
+  PostGIS 3.6, Alembic `202607160001`, writable storage and configured YOLO.
+- Startup reconciliation changed five impossible orphaned jobs and two
+  analysis runs to terminal `failed` state with `PROCESS_INTERRUPTED`; no
+  `running` rows remain.
+- Created the full SHA-256 inventory backup
+  `rc-belgium-north-sea-38a3bd0`, verified it read-only and restored it in an
+  isolated temporary database. The first restore attempt exposed stale glibc
+  collation metadata in `template1`/`postgres`; those empty system databases
+  were reindexed and refreshed after the backup, then restore passed.
+- Rotated the production PostgreSQL password with a generated 256-bit value
+  without logging it, atomically updated the Tower `.env` and recreated the
+  healthy container.
+- Created the current secure backup
+  `rc-belgium-north-sea-fc42ea9-secure` (1.4 GiB), verified all checksums and
+  repeated isolated restore. PostGIS/Alembic and all retained critical table
+  counts match; the temporary database was removed.
+- RC-1 and RC-2 are complete. RC-3 is active.
 
 ## Sprint 229 - Governed ALZ definitive release promotion (2026-07-17)
 
@@ -10340,3 +10361,36 @@ Validation:
   TypeScript typecheck and the production Vite build.
 - Tower deployment and browser acceptance results are recorded after the
   rebuilt all-in-one runtime is verified.
+## 2026-07-17 - Belgium/North Sea RC-3 local gate
+
+- Removed automatic selection and every `rasterDatasets[0]` execution fallback
+  from Detection Lab. Normal detection, guided preparation and calibration now
+  require an explicit raster selection.
+- Added `TemporalCompatibilityService`. Official raster editions carrying
+  `supports_detection=false` fail before Job/AnalysisRun creation with
+  `DETECTION_SOURCE_TEMPORALLY_UNSUPPORTED`.
+- Detection QA now loads the persisted source Dataset and rejects historical
+  candidate/reference periods that are absent or non-overlapping with
+  `DETECTION_QA_TEMPORAL_MISMATCH`.
+- Compatible temporal evidence is persisted under
+  `parameters_json.temporal_compatibility` and
+  `findings_json.temporal_compatibility` on the existing QualityCheck.
+- Added sanitized request IDs, request-duration logs and correlated detection
+  start/QA completion logs.
+- Added `scripts/runtime_state_report.py`; default mode is read-only and
+  mutation requires `--reconcile --confirm reconcile-interrupted-runtime`.
+
+Validation:
+
+- `python -m compileall backend/app`: passed.
+- `python -m pytest backend`: 974 passed.
+- `npm run typecheck`: passed.
+- `npm run build`: passed.
+- `bash scripts/run_readiness_check.sh`: passed, including 122-route API audit,
+  974 tests, Alembic head, typecheck and build.
+- `python -m alembic heads`: one head, `202607160001`.
+- `python -m alembic upgrade head --sql`: passed.
+- backup/restore/live-smoke shell syntax checks: passed.
+- Local `docker compose config` was unavailable because this Windows
+  workstation has no Docker CLI; Tower validation remains mandatory before
+  RC-3 completion.