Add governed orthophoto release preflight

docs/CODEX_EXECUTION_LOG.md

@@ -9715,3 +9715,40 @@ Live validation:
 Next:
 - Evaluate ALZ as the next governed edition probe only after its official
   machine-readable release version and schema stability are verified.
+## Sprint 230 - Governed orthophoto release preflight (2026-07-17)
+
+Implemented:
+- Added `scripts/orthophoto_release_preflight.py` as a read-only gate for one
+  bounded current-orthophoto selection in the approved Kempen regional scope.
+- Bound the existing canonical product registry and source-catalog result to
+  the exact official WMS 1.3.0 capabilities hash, ISO metadata identifier and
+  `YYYY.NN` edition. Redirects, hosts, paths and response sizes fail closed.
+- Added metadata-only WCS `DescribeCoverage` validation for `Ortho`,
+  EPSG:31370, the complete raster domain, 15 cm rectified grid, three bands and
+  TIFF native format. Selection limits remain identical to acquisition:
+  128-1,024 m per projected side.
+- Added a maximum 64-point deterministic `Vliegdagcontour` grid with exact
+  GeoJSON layer/date/year validation and hashed sample evidence. WCS domain
+  containment proves raster-domain coverage; point samples remain honestly
+  labelled as flight-date evidence rather than polygon-union geometry.
+- Kept all pixel requests, filesystem staging, Jobs, Dataset/PostGIS writes,
+  migrations and browser behavior out of this sprint. Local
+  `most_recent_at_*` acquisition markers remain non-comparable and blocked.
+
+Validation so far:
+- 42 focused preflight/runtime-packaging tests passed. Coverage includes
+  release ordering, legacy provenance, hash drift, product variant, official
+  host/path, queryable/GeoJSON capability, WCS identity/resolution, missing
+  flight coverage, flight-year mismatch, selection bounds and no-write rules.
+- Target Python compilation and Ruff passed.
+- A read-only compatibility run against Tower for bbox
+  `5.110,51.180,5.117,51.185` verified official edition `2025.04`, exact Ortho
+  WCS domain containment and 20/20 flight-day samples from 2025. It performed
+  zero pixel requests and correctly returned `staging_permitted=false` because
+  local version `most_recent_at_2026-07-15` is not an official edition.
+
+Boundary:
+- This sprint supplies preflight only. It deliberately does not promote or
+  backfill existing orthophotos. A future stage/review/apply coordinator must
+  revalidate and retain the exact preflight identity before creating a new
+  immutable raster Dataset with official `YYYY.NN` source version.