638 Commits

Include renames

Author	SHA1	Message	Date
JensandClaude Opus 5	16dedeb670	claim analysis jobs atomically and keep acquisition on its official host ... Two defects of the same kind: work that is supposed to be bounded is not. The analysis worker selected queued jobs and then set them to running in a second statement. A restarted process overlapping the previous one, or a second replica, could both select the same row and both start tiled GPU inference on it — duplicate analysis runs and double the GPU load. The AOI worker beside it already claims with FOR UPDATE SKIP LOCKED; this uses a conditional update, which is the same guarantee in one statement. run_once now reports jobs it actually claimed rather than jobs it looked at. urlopen follows redirects, so although every acquisition URL is built from settings and cannot be steered by a request payload, a misconfigured or compromised upstream could send the runtime to the loopback interface, to another container on the compose network, or to a cloud metadata endpoint — and the bytes would then be persisted under an official provenance. That is exactly the substitution the product forbids. All eight fetch sites now open through a guard that refuses private, loopback and link-local destinations (resolving the host first, so a DNS name cannot hide one) and refuses a redirect that leaves the configured origin or downgrades from HTTPS. The guard is proven by calling the services' own fetch paths, not by grepping for the call: every existing acquisition test injects an opener, which bypasses it by design. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-22 15:59:01 +02:00
JensandClaude Opus 5	5b3839dc89	page detection and segmentation results instead of returning all of them ... /detection/runs/{id}/detections and its GeoJSON sibling returned every persisted detection, as did the segmentation equivalents. A regional run holds tens of thousands, and these are the endpoints the results table and the map overlay call after every run. They now take limit and offset, default to 2.000, and report total, limit, offset and truncated so the complete population stays visible while what is transferred does not. The GeoJSON responses carry the same window in a geointel_result_window foreign member. Rows are ordered by confidence, so a capped overlay draws the strongest detections rather than an arbitrary slice, and the lab says how many of how many are being shown rather than silently presenting a page as the whole run. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-22 15:24:46 +02:00
JensandClaude Opus 5	5278fcd361	bound the QA evidence overlay and fetch only what it draws ... evidence_geojson emitted one feature per false positive, one per false negative and two per match, with no limit. A regional check of 40k detections against 45k reference footprints produced well over a hundred thousand features in a single response, plus one warning string per unresolvable identifier. The endpoint the entire review workflow depends on therefore failed exactly where review matters most. What to draw is now decided before any geometry is fetched, so the query work is proportional to the result rather than to the size of the check — previously 130k geometries were resolved through an IN clause holding every identifier in the check, to then discard most of them. The budget is split between misses and false positives in proportion to their populations with at least one of each, rather than by strict priority, which would mean a check with 50.000 misses and three false positives never showed one. Confirmations fill what remains, and a match is kept or dropped as a pair because half a match is not reviewable evidence. limit_evidence and evidence_role_counts are removed: plan_evidence supersedes them, and helpers kept alive only by their own tests read like a contract. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-22 15:14:26 +02:00
JensandClaude Opus 5	52c2bfd120	document selection-bounded change detection and export provenance ... Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-22 14:56:38 +02:00
JensandClaude Opus 5	d29d572e8c	document the analysis contracts and correct the job-queue claim ... The README's architecture diagram and stack list promised Redis + RQ. There is no such thing in this codebase: redis_url is a settings field nothing reads, rq is not a dependency, and the only worker is an asyncio poller over a Postgres job table. Describe what exists. API_CONTRACTS and KNOWN_LIMITATIONS gain the rules a reader needs to interpret a result: deterministic confidence-ranked matching, the precision/recall curve, the three flood-hazard cell populations, the sub-cell selection fallback, the whole-feature object count next to clipped area metrics, and the required manifest CRS. The new limitations are stated as limits rather than buried: raster analysis has no sub-cell precision, and the object count is not fractional. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-22 14:34:33 +02:00
Jens	d2494417be	fix workbench illustration contrast	2026-08-21 22:48:07 +02:00
Jens	c20e718086	refine responsive workbench gui	2026-08-21 22:35:17 +02:00
Jens	178892fc66	add synchronized dual-display workbench	2026-08-21 21:50:40 +02:00
Jens	4b0cab3ce5	make building results authority-first after V74 evaluation	2026-08-10 04:44:29 +02:00
Jens	98188e0a44	evaluate fresh Flemish remediation training	2026-08-10 03:47:51 +02:00
Jens	b068a5e065	evaluate models on fresh regional calibration AOIs	2026-08-09 22:36:27 +02:00
Jens	116b8e291e	block checkpoint evaluation on ancestral exposure	2026-08-09 22:10:50 +02:00
Jens	fd45f37a38	block training-seen checkpoint evaluation	2026-08-09 21:01:12 +02:00
Jens	48084799c9	correct overlapping checkpoint evaluation	2026-08-09 20:41:54 +02:00
Jens	2de438b9cc	derive cleaner min-4px YOLO corpus	2026-08-09 19:51:17 +02:00
Jens	736e773fb8	audit YOLO geometry and overlapping validation rows	2026-08-09 19:36:15 +02:00
Jens	fc18e72c7f	highlight audited YOLO label relationships	2026-08-09 19:12:04 +02:00
Jens	72b2cdaae4	audit nested YOLO labels without destructive rewrites	2026-08-09 18:41:29 +02:00
Jens	7e07fe8486	expand AI-assisted review to full building corpus	2026-08-09 18:37:08 +02:00
Jens	f9a466b221	record explicit AI-assisted AOI review ledger	2026-08-09 15:28:04 +02:00
Jens	182e72e46d	record blocked legacy model provenance migration	2026-08-09 14:57:33 +02:00
Jens	30f6f707c9	audit building checkpoints and preserve production gate	2026-08-09 14:31:43 +02:00
Jens	0209167cfd	fix(results): gate operational AI exports on QA	2026-08-09 11:31:51 +02:00
Jens	b76cd1837b	fix(ai): bind model scope to immutable geometry	2026-08-09 10:54:52 +02:00
Jens	f41392a415	docs(accuracy): publish phase 4 benchmark evidence	2026-08-02 05:10:05 +02:00
Jens	7b92e29e49	feat(accuracy): complete phase 3 data scan and quarantine	2026-08-02 01:06:35 +02:00
Jens	41f8a54236	docs(accuracy): retain phase 2 provenance evidence	2026-08-01 23:46:37 +02:00
Jens	5b3c17b494	feat(provenance): govern source snapshots and data inputs	2026-08-01 23:46:17 +02:00
Jens	3d442ef43f	audit: establish accuracy phase 1 baseline	2026-08-01 18:57:38 +02:00
Jens	0c019bb22f	Record scoped demo production acceptance	2026-08-01 16:57:48 +02:00
Jens	9e582f2921	Align AI image packaging with PyTorch	2026-08-01 16:41:53 +02:00
Jens	24dec16744	Pin Tower-compatible CUDA runtime	2026-08-01 16:06:15 +02:00
Jens	dfcc11b0d5	Expand scoped demo analysis access	2026-08-01 16:00:13 +02:00
Jens	96db4c966d	Overhaul GeoIntel model selection and map UX	2026-08-01 15:18:06 +02:00
Jens	ce3cd20356	Document map workspace live acceptance	2026-08-01 14:28:33 +02:00
Jens	6c1c2b52b6	Require explicit map analysis selection	2026-08-01 14:05:42 +02:00
Jens	be38e9a99f	Correct production operator username guidance	2026-08-01 13:35:55 +02:00
Jens	d1356aeed9	Record live analysis deployment acceptance	2026-08-01 13:08:51 +02:00
Jens	d7752cbb96	Connect live analysis journey to map workflow	2026-08-01 12:42:01 +02:00
Jens	45fac06935	Refresh README and production screenshots	2026-07-30 12:38:04 +02:00
Jens	3effc77ed7	Add direct polygon label QA	2026-07-30 05:47:26 +02:00
Jens	7af17e8667	Add independent Flemish low-rise calibration candidates	2026-07-30 04:53:19 +02:00
Jens	08422ca50c	Add fail-closed source class and SAM fallback filters	2026-07-30 04:24:35 +02:00
Jens	29378bba42	Harden SAM roof refinement geometry gates	2026-07-30 04:00:24 +02:00
Jens	be5cbb855a	Launch V45 expanded corpus training loop	2026-07-29 22:19:06 +02:00
Jens	717a099f52	Add v44 Flemish corpus expansion	2026-07-29 22:09:19 +02:00
Jens	16a1552427	Stabilize near-gate regional sampling	2026-07-29 21:24:50 +02:00
Jens	bb3df850aa	Rotate capped training samples across iterations	2026-07-29 20:59:03 +02:00
Jens	adff7e2284	Launch v42 building training loop	2026-07-29 20:22:48 +02:00
Jens	ba70718760	Record v31 iteration three assessment	2026-07-29 18:55:44 +02:00