Add governed orthophoto release preflight

2026-07-17 01:30:19 +02:00
parent 99f1e393cd
commit f48fe7b091
14 changed files with 1187 additions and 3 deletions
@@ -147,6 +147,14 @@ product/layer, request/spatial hash, temporal validity and limitations are held
 in source/provenance metadata. Browser PNG rendering is derived on request and
 does not replace the stored GeoTIFF.

+The orthophoto release preflight writes no source file, raster or database row.
+Its JSON stdout may be retained by an operator as review evidence, but it is
+not itself staging authorization. The report binds official WMS and WCS XML
+hashes, the exact selected domain and hashed flight-day sample evidence. A
+future pixel stage must persist and revalidate that identity separately before
+DatasetService is called; existing `most_recent_at_*` raster metadata is not
+silently rewritten.
+
 DHMV II DTM/DSM outputs are also normal raster Dataset files. The provider WCS
 returns multipart coverage data; GeoIntel retains response and extracted
 coverage SHA256 values in provenance, then stores one normalized, compressed,