Add governed ALZ release promotion

2026-07-17 00:53:34 +02:00
parent 904f8bd9d2
commit ad2c3481c4
15 changed files with 1357 additions and 19 deletions
@@ -204,6 +204,24 @@ artifact; Dataset and vector_feature rows remain the queryable PostGIS state.
 The manifest binds source, crop-code list and upload artifact checksums. A
 checksum conflict with an existing annual Dataset fails closed.

+Future definitive-release decision evidence is stored separately from those
+source artifacts:
+
+```text
+storage/operator-evidence/alz-agriculture-refresh/{scope}/{year}/
+  staged-plan.json
+  review-evidence.json
+  applied-evidence.json
+```
+
+The staged plan binds the official publication-page SHA-256 and definitive
+archive identity to the retained archive, normalized GeoJSON, schema/CRS,
+crop-code list, scope accounting and previous-edition delta. Review evidence
+binds a named decision to the exact plan hash. Applied evidence binds both to
+the resulting immutable Dataset id. Evidence paths outside this root and
+source artifacts outside `agricultural-use-parcels` are rejected; these files
+authorize neither deletion nor in-place Dataset replacement.
+
 Buildings and Addresses Register snapshot evidence lives under:

 ```text