Add governed Statbel release promotion

2026-07-17 00:19:47 +02:00
parent 6187a9d41d
commit d0a8a3ad15
14 changed files with 1401 additions and 28 deletions
@@ -7,6 +7,25 @@

 # Changelog

+## Sprint 228 Governed Statbel population release promotion (2026-07-17)
+
+- Added an operator-only `plan -> stage -> review -> apply` coordinator for
+  future official Statbel population editions. Plan is read-only, stage is
+  preflight/filesystem-only, review requires a named approval and apply
+  requires exact plan plus review SHA-256 values.
+- Derived population and matching geometry URLs only from the allowlisted
+  catalog year/layout contract. Current, older, unavailable, ambiguous or
+  catalog-drifted releases fail closed; the coordinator accepts no arbitrary
+  provider URL and creates no scheduler or background fetch.
+- Extended the existing population provisioner to accept one complete
+  explicitly governed future release, bound downloads before buffering and
+  discover the latest retained baseline across dynamically added years.
+- Revalidated every source, manifest and snapshot byte immediately before the
+  canonical DatasetService upload. Dataset discovery now paginates completely,
+  preserving idempotence in workspaces with more than 200 datasets.
+- Added focused release-state, trust-boundary, tamper, review and apply tests,
+  Docker packaging and readiness compilation without API or migration changes.
+
 ## Sprint 227 Statbel population import compatibility preflight (2026-07-16)

 - Added a local, fail-closed preflight for staged official Statbel population