test: P1/P2 depth-pack backlog — identity, scene ingest, provider extensions, Records/Coverages/EDR, COG, styling, temporal

[mikemcdougall]

Summary

Tracking issue for the P1/P2 Testcontainers depth packs from the 2026-07-21 GA readiness test plan — the fast-follow tier after the P0 set (in-flight PRs #2960/#2961/#2976/#2979, local entitlement sweep, geocoding decision, analytics depth pack 2, #2959). Children get filed as each pack is scheduled; this issue keeps the ledger so the backlog is visible instead of implied.

P1 — fast-follow (first patch releases)

• Identity depth: SAML assertion tampering / wrong-audience / replay tests mirroring the OIDC fake-IdP pack (test: GA-guard depth pack — OIDC, WMS/WMTS, alerts, analytics, static-map, tiles 404 (#2945) #2960); SCIM PATCH semantics + group→role mapping edges; portal-token lifecycle. (identity.saml 10, identity.scim 22, identity.portal-token 14 proving tests today.)
• Scene ingest round-trips: CityGML/BIM and point-cloud ingest → catalog → serve — Enterprise-priced promises at 6/10 proving tests (scene.bim-ingest, scene.pointcloud-ingest).
• Provider matrix extensions (after bug: FeatureServer bbox/envelope queries fail against MySQL and SQL Server — shared WKB converter emits EWKB, providers' STGeomFromWKB/ST_GeomFromWKB reject or misparse it #2965 / chore: OData and OGC API Tiles bypass FeatureProviderQueryRouter for secondary providers #2962 fixes land): enable the skipped MySQL bbox/raster-tile and SqlServer OData/Tiles smoke cases in Honua.ProviderSmoke.Tests; add provider-parameterized edit round-trips (MySql; SqlServer per its write posture; DuckDB read-only excluded by design).
• OGC Records / Coverages / EDR depth: query semantics beyond collection listings (serve.ogc-api-records 11, serve.ogc-api-coverages 13, serve.ogc-api-edr 9).
• COG range-read correctness: local golden tests for tile/window reads (raster.cloud-cog-serving 11); the S3-backed variant belongs to the cloud sweep (honua-release#65).

P2 — steady-state

• Styling depth: OGC API Styles CRUD + styling.auto-suggest assertions.
• Temporal depth: temporal.animation-api contract, temporal.time-series-tiles filtering.
• Flake hardening: PostgresFixture/SeedRunner deadlock serialization (test harness: serialize DDL/migration setup to eliminate 40P01 deadlock flakes #1568) so shard reruns stop being ritual.
• Catalog code_location fidelity: point feature-catalog entries at real handlers instead of the endpoint registry — sharpens the traceability matrix and unlocks source-diff narrowing in scoped local CI (tech-debt(ci): capability-scoped local pre-pr-check — select build/tests via the feature-catalog crosswalk #2951) and the hosted selector promotion (ci(shards): capability-graph test-impact selection — shard-map completeness gate, then PR-scoped selection #2897).

Cross-links

Traceability audit + GA readiness test plan (release-safety program, epic honua-io/honua-release#58); capability sweep honua-io/honua-release#65; entitlement lane honua-io/honua-release#64; depth pack 1 #2945 / PR #2960; provider smoke #2947 / PR #2976.

Non-goals

P0 items (tracked in their own issues); cloud scenario families (release#65); load/perf (geobench).