feat: complete Wallonia land cover and terrain sources

docs/CODEX_EXECUTION_LOG.md

@@ -3654,6 +3654,25 @@ Validation:
 
 ## Post-V1 national coverage completion: Wallonia (2026-07-22)
 
+- Located and live-validated the stable official WALOUS 2018 GeoTIFF
+  distribution. The retained raster SHA-256 is
+  `a788cf4619363664d1e80def79b32176b4703317d123c8cd703f2eb10e8d56b2`;
+  the full source is EPSG:3812 at 1 m and the merged live provisioning report
+  now covers 2018, 2020 and 2023.
+- Added the official 2018 stacked-class to view-class crosswalk. Greenhouse
+  code `62` enters the construction class and unmarked source value `0` is
+  normalized to internal nodata `255`; both behaviors have regression tests
+  so background pixels cannot inflate hectare metrics.
+- Selected the official SPW MNT 2021-2022 1 m GeoTIFF as the governed Walloon
+  terrain source after a live storage audit showed sufficient capacity. Added
+  fail-closed operator provisioning, bounded `bbox intersect Area`
+  persistence, raster validation and terrain analysis with explicit
+  DNG/EPSG:5710 vertical-reference provenance.
+- Replaced the frontend-only AI geography warning with a machine-readable
+  runtime contract. Detection capabilities now expose training/validation
+  scope, validated regions, national status and the review requirement; the
+  configured local weights remain bound to Mol/Kempen evidence and fail closed
+  as not nationally validated.
 - Live Tower provisioning exposed an incorrect assumption that 11 WALOUS
   classes implied numeric codes 1 through 11. The official SPW legend and the
   downloaded 2020 raster confirm codes `1,2,3,4,5,6,7,8,9,80,90`. Corrected
@@ -3673,10 +3692,11 @@ Validation:
 - Wired both integrations through Compose, the all-in-one Unraid runner,
   editable DockerMan template and readiness gate. Added canonical API,
   persistence, rendering, temporal and runtime-parity regression tests.
-- Revalidated the official Walloon DTM distribution. The whole-region files
-  are too large for implicit startup or per-selection mirroring (about 41 GB
-  at 1 m and 213 GB at 0.5 m), so elevation remains a documented capacity-plan
-  prerequisite instead of a fake operational source.
+- Revalidated both official Walloon DTM distributions. The 1 m archive is
+  operator-provisioned once on persistent storage and selections read bounded
+  windows from it; the approximately 213 GB 0.5 m distribution remains
+  deliberately unprovisioned because it is not required for the V1 analysis
+  contract.
 - Reprobed the documented MDK WCS endpoints. Strict TLS still fails hostname
   validation; acquisition remains disabled and no insecure fallback was added.
 - A live Tower deploy exposed PostGIS crash recovery exceeding the former