Build Governed spatial analysis

Model the lifecycle before the UI

Turn the analysis run blueprint into an explicit aggregate boundary owned by the application.

Build

Prove before continuing

Implement every command and event pair

Make intent, actor authority, allowed source state, committed state, and emitted fact reviewable together.

Build

Prove before continuing

Persist restart-safe records

Separate business identity, provider evidence, command receipts, immutable facts, audit, and downstream delivery.

Build

Prove before continuing

Make concurrency and replay deterministic

Apply optimistic expected versions and aggregate-scoped idempotency before executing effects.

Build

Prove before continuing

Control effects and unknown outcomes

Commit outbox intent atomically, execute effects outside the transaction, and reconcile ambiguous results.

Build

Prove before continuing

Run all hostile fixture scenarios

Exercise the success path plus replay, concurrency, state, and response-loss failures without an account.

Build

Prove before continuing

Trace the Retail Site Lab capstone

Follow the maintained source through domain rules, adapter seam, repository transaction, HTTP boundary, UI evidence, and restart test.

Build

Prove before continuing

Qualify the real integration boundary

Replace only reviewed adapter seams and collect independent production evidence without weakening application invariants.

Build

Prove before continuing

Application-owned reliability scaffolds

The aggregate and SQL examples implement host truth; the fixture clients call the credential-free Journey Lab. Replace only the separately reviewed provider adapter seam.

type State = "draft" | "validating" | "published" | "processing" | "ready" | "shared" | "failed";
type CommandName = "create_dataset_version" | "validate" | "publish" | "run_analysis" | "complete_analysis" | "create_share";

type Command = {
  name: CommandName;
  aggregateId: string;
  expectedVersion: number;
  idempotencyKey: string;
};

const transitions = {
  "create_dataset_version": { from: [null], to: "draft", event: "dataset.version_created" },
  "validate": { from: ["draft"], to: "validating", event: "dataset.validation_started" },
  "publish": { from: ["validating"], to: "published", event: "dataset.published" },
  "run_analysis": { from: ["published", "ready"], to: "processing", event: "analysis.started" },
  "complete_analysis": { from: ["processing"], to: "ready", event: "analysis.completed" },
  "create_share": { from: ["ready"], to: "shared", event: "share.created" },
} as const;

export function decide(current: { state: State | null; version: number }, command: Command) {
  const rule = transitions[command.name];
  if (command.expectedVersion !== current.version) throw new Error("version_conflict");
  if (!rule.from.includes(current.state as never)) throw new Error("invalid_transition");
  return {
    state: rule.to as State,
    version: current.version + 1,
    event: rule.event,
    idempotencyKey: command.idempotencyKey,
  };
}

// Persist the result, immutable event, audit row, and outbox intent atomically.
// Store the first result by idempotencyKey before executing another effect.

Exit with reviewable evidence

Trace every external claim to an indexed source