Add governed Statbel release promotion

2026-07-17 00:19:47 +02:00
parent 6187a9d41d
commit d0a8a3ad15
14 changed files with 1401 additions and 28 deletions
@@ -122,6 +122,23 @@ Dataset/DatasetVersion plus PostGIS `vector_features` through the canonical
 persistence services. Temporary standalone preflight output does not create a
 database record and may be removed explicitly after operator review.

+Governed release-decision evidence is separate from the source artifacts:
+
+```text
+storage/operator-evidence/statbel-population-refresh/{scope}/{year}/
+  staged-plan.json
+  review-evidence.json
+  applied-evidence.json
+```
+
+The staged plan binds the current official catalog identity to every retained
+source/snapshot/preflight hash and accounting summary. Review evidence binds a
+named approval to that exact plan. Applied evidence binds both approvals to
+the resulting Dataset id. These JSON files are operator audit artifacts, not
+database lifecycle entities. A plan/review path outside the configured
+evidence root or a retained archive outside the population output root is
+rejected. No evidence file authorizes deletion or in-place replacement.
+
 Waterinfo raw station layers, timeseries responses and checksum manifests live
 under `storage/operator-data/waterinfo/<scope>/`. These are immutable source
 evidence; queryable annual Point snapshots are normal Dataset/vector_feature