Graticula · Faz 1 — Uygulama

Kontrol Odası

Buradaki her şey depodan okunuyor: ADR başlıkları, open-questions.md, architecture-debt.md, architecture-assumptions.md ve git. Hiçbir sayı elle yazılmıyor — elle yazılan iki sürüm bir gün içinde bayatladı. Kayıtların kendisi İngilizce kalıyor (CLAUDE.md §8): proje bağışlanıyor ve gerekçesinin onu devralacak kişi tarafından okunabilmesi gerekiyor.

Şu commit’ten üretildi: 3f7cada4 · 2026-10-12 20:55

Durum

178

ADR

72 koşulsuz kabul

322/408

kapatılan ADR koşulu

83 canlı · 3 kararıyla birlikte ertelendi

açık soru

160 yanıtlandı

açık borç

269 ödendi · 6 tetiğini bekliyor · 1 kısmen

7/9

koşulan kapı

1 tanesi dışarıdan bir incelemeci istiyor

16/87

doğrulanan varsayım

geri kalanı kanıtlanmadı

4792

test

477 kaynak dosya, 215,341 satır

Ne kaldı

Üç kısım, kimin ilerletebileceğine göre ayrılmış. Ayrım türetilmiş: bir madde, soru defteri sahibi işaret ediyorsa sahibin; kapı kendi cümleleriyle “bunu yazmamış biri gerekiyor” diyorsa dışarıdan bir incelemecinin. Geri kalan bizim — ve çalışarak küçülen tek kısım o.

Sahibi1 açık

Q-165 — May INSPIRE be turned on for one showcase service, so the INSPIRE validator can be run against it?

Dışarıdan bir incelemeci1 kapı

Operations — Needs a deployment somebody operates.

§67 also still owes a review round by somebody who did not participate. Rounds 1 and 2 were self-review; round 3 was commissioned and briefed by the author.

Bizim101 madde

83 ADR conditions outstanding across 59 decisions — the largest commitment on this page.

14 debts with their repayment triggers already written down.

3 capability areas not started: Publishing, Observability, Resource governance.

1 review gates nobody else is blocking: Extensibility.

Açık koşullar, karara göre

Bir koşul, ADR’nin kendi metninde işaretlendiğinde kapanmış sayılır. Bu sayfa hiçbir şeyi kendisi kapatmıyor — sadece sözü veren karardan okuyor.

ADR-101 · Studio is walked the way a Portal

ADR-079 · A web map is a saved document, and

ADR-106 · A layer's data can be exported as

ADR-007 · Service Runtime

ADR-013 · Feature Service Data Model: Identi

ADR-017 · Admin API Shape

ADR-029 · Affinity routing is not the defaul

ADR-052 · The canonical symbology document i

ADR-055 · A connection is fields, and this s

ADR-065 · Domains and subtypes

ADR-066 · GeoParquet layers, read in place b

ADR-067 · DuckDB sources beyond a local fold

ADR-076 · OAuth 2.0 authorization code with

ADR-077 · Z and M ride beside x and y, and a

ADR-086 · The operator chooses the map groun

ADR-087 · A domain is a named object that fi

ADR-089 · Sign-in through an LDAP directory,

ADR-090 · Sign-in through a SAML 2.0 identit

ADR-176 · OGC API Styles, read-only, over th

ADR-177 · OGC API Records is a searchable ca

ADR-002 · Primary Data Architecture

ADR-006 · Plugin Model

ADR-009 · Raster Engine

ADR-010 · Caching

ADR-011 · Job System

ADR-015 · Authentication

ADR-021 · Tiles are encoded by PostGIS, and

ADR-023 · The REST Services Directory: an HT

ADR-024 · Shapefile import, and the exceptio

ADR-025 · Governance: what a gift owes, and

ADR-026 · Serving through a platform-store o

ADR-032 · The product is named Graticula

ADR-038 · How a geodatabase becomes one serv

ADR-046 · Admission control bounds the queue

ADR-047 · The outbound licence is Elastic Li

ADR-048 · CI does not run the real-data suit

ADR-054 · The symbology document is not boun

ADR-056 · An item is its own thing, and a se

ADR-057 · Composing and publishing a service

ADR-059 · Quiescing a data source

ADR-060 · The axis order comes from the auth

ADR-074 · Z and M are read, said out loud, a

ADR-080 · Hosted tables keep the Z and M the

ADR-081 · Migration publishes an ArcGIS Serv

ADR-083 · The where clause evaluates ArcGIS'

ADR-085 · A tile leaves out what it cannot d

ADR-088 · Sign-in through an OpenID Connect

ADR-104 · A web map styles its own layers

ADR-105 · ArcGIS clients append to a hosted

ADR-107 · A layer is exported as a GeoPackag

ADR-108 · An item's owner is changed by an a

ADR-110 · A web map sets its layers' pop-ups

ADR-127 · An image service exports its value

ADR-162 · WMS and WFS at a service's own add

ADR-164 · `generateKml` is a network link to

ADR-165 · OGC API Features filters in Basic

ADR-172 · A service may be an INSPIRE View a

ADR-175 · OGC API Maps, over the WMS rendere

ADR-178 · HTTP Basic on the OGC faces, over

İnceleme kapıları (§66)

Her kapı ADR başına değil, mimarinin tamamına karşı koşulur; başarısızlık not düşülüp geçilmez, kararları yeniden açar. Kanıtsız işaretlenmiş bir kapı, açık bırakılmış olandan kötüdür: bilinmeyeni sahte bir güvenceye çevirir ve sonrasında kimse dönüp bakmaz.

Kapı	Koşuldu	Sonuç, ya da neyi beklediği
Correctness	FAIL	FAIL, and all five findings are repaired.
Simplicity	FAIL	FAIL, narrowly, and not for the reason this row expected.
Performance	FAIL	FAIL, on a finding about behaviour rather than speed.
Failure	FAIL	FAIL, and all ten findings are now repaired — six on the day, the last four on 2026-08-23, each measured before and after.
Operations	koşulmadı	Needs a deployment somebody operates.
Security	FAIL	FAIL on one finding, repaired the same day.
Extensibility	koşulmadı	No plugin code exists, so the gate has nothing to examine.
Licensing	PASS	PASS.
Consistency	FAIL	FAIL, and all four findings are now answered — three on the day, the fourth on 2026-08-23.

Kararlar

Her mimari karar bir ADR. Durum ve güven seviyesi her dosyanın kendi başlığından okunuyor — yani bir karar orada değişmeden burada sessizce not değiştiremez.

ADR	Karar	Durum	Güven	Koşul
001	Core Language	ACCEPTED 2026-08-25, by owner decision: "ben Q-01'i kabul ettim .NET olarak".	MEDIUM — 2026-08-25.
002	Primary Data Architecture	REOPENED → re-decided, ACCEPTED WITH… REOPENED → re-decided, ACCEPTED WITH CONDITIONS	MEDIUM	2/3
003	Geometry Engine	ACCEPTED WITH CONDITIONS single-provider scope.	HIGH for the split, which is measured.
004	Rendering Engine	ACCEPTED un-deferred 2026-08-20 by ADR-041, which is where the decision now lives.	—
005	API Architecture	ACCEPTED WITH CONDITIONS re-closed 2026-08-20.	MEDIUM-HIGH	4/4
006	Plugin Model	ACCEPTED WITH CONDITIONS re-closed 2026-08-15, see §0.	MEDIUM-HIGH	1/2
007	Service Runtime	ACCEPTED WITH CONDITIONS	MEDIUM — structure well supported, routing unproven	2/4
008	Query Engine	ACCEPTED WITH CONDITIONS	MEDIUM	3/3
009	Raster Engine	ACCEPTED WITH CONDITIONS re-closed 2026-08-15, see §0.	MEDIUM	1/3
010	Caching	ACCEPTED WITH CONDITIONS	MEDIUM	3/4
011	Job System	ACCEPTED WITH CONDITIONS	MEDIUM-HIGH	3/4
012	Clustering	DEFERRED	—
013	Feature Service Data Model: Identity, Relationships and Attachments	ACCEPTED WITH CONDITIONS	MEDIUM	5/7
014	TLS and Certificates	ACCEPTED WITH CONDITIONS	MEDIUM-HIGH	4/4
015	Authentication	ACCEPTED WITH CONDITIONS	MEDIUM	4/5
016	Packaging, Deployment and Upgrade	ACCEPTED WITH CONDITIONS	MEDIUM	5/5
017	Admin API Shape	ACCEPTED WITH CONDITIONS	MEDIUM — the shape is decided, the surface is not	1/3
018	Authorization: user types, roles and privileges	REOPENED 2026-08-14 by owner direction →… REOPENED 2026-08-14 by owner direction → re-decided, ACCEPTED WITH CONDITIONS	MEDIUM	5/5
019	One deployable, three fused tiers	ACCEPTED WITH CONDITIONS	MEDIUM-HIGH for the decision · LOW for the trigger conditions in §5	3/3
020	An admin console, and what "stop a service" means	ACCEPTED WITH CONDITIONS	MEDIUM-HIGH for the console · MEDIUM for the status model	3/3
021	Tiles are encoded by PostGIS, and we do not write an encoder	ACCEPTED WITH CONDITIONS	HIGH for the decision · MEDIUM for the condition in §7	2/3
022	GeometryServer ships in halves, and the projection engine is the datastore's	ACCEPTED WITH CONDITIONS · §2 SUPERSEDED by… ACCEPTED WITH CONDITIONS · §2 SUPERSEDED by §2b, 2026-08-15	HIGH for the split · HIGH for the engine · MEDIUM for the vertex cap	4/4
023	The REST Services Directory: an HTML face for the API	ACCEPTED WITH CONDITIONS	HIGH	6/7
024	Shapefile import, and the exception it costs	ACCEPTED WITH CONDITIONS	HIGH	4/5
025	Governance: what a gift owes, and what it does not	ACCEPTED WITH CONDITIONS	HIGH	3/4
026	Serving through a platform-store outage: public-only, while blind	ACCEPTED WITH CONDITIONS	HIGH for the policy · MEDIUM for the window	4/5
027	Glyphs and sprites: the tile service could not draw a label	ACCEPTED WITH CONDITIONS	HIGH for the decision · MEDIUM for the coverage	5/5
028	Style documents: the one thing about a map a server cannot guess	ACCEPTED WITH CONDITIONS	HIGH	5/5
029	Affinity routing is not the default, and A-003 stops being load-bearing	ACCEPTED WITH CONDITIONS	HIGH for the reversal · MEDIUM for what replaces it at scale	2/4
030	Reading the reference implementation, not only its documentation	~~ACCEPTED WITH CONDITIONS~~ WITHDRAWN the permission this ADR granted ended 2026-09-09 by owner decision.	MEDIUM	2/3
031	A service's capabilities are configured, and configuration only ever restricts	ACCEPTED WITH CONDITIONS	MEDIUM	6/6
032	The product is named Graticula	ACCEPTED	HIGH	3/4
033	Symbology: one canonical document per layer, and both protocol faces derive from it	ACCEPTED WITH CONDITIONS	MEDIUM-HIGH for the canonical model · MEDIUM for the derivation's fidelity	5/5
034	Two surfaces over one API: Server for the operator, Studio for the publisher	ACCEPTED WITH CONDITIONS	HIGH for the split · MEDIUM for where each screen lands	5/5
035	Role privileges are editable, except the administrator's	UNKNOWN	—	7/7
036	Groups, and the two axes an authorization answer now has	UNKNOWN	—	5/5
037	Job workers come in two kinds	ACCEPTED WITH CONDITIONS	MEDIUM	6/6
038	How a geodatabase becomes one service with many layers	UNKNOWN	—	5/6
039	WFS 2.0, read-only, is the first surface after v1	UNKNOWN	—	6/6
040	The portal surface is how ArcGIS Pro connects	UNKNOWN	—	4/4
041	The map renderer, and the two faces that hang off it	ACCEPTED WITH CONDITIONS	MEDIUM-HIGH for the placement and the library · MEDIUM for labels · HIGH for throughput,…	6/6
042	OGC API Features, and the inversion it unwinds	ACCEPTED WITH CONDITIONS	HIGH for the decision, which was already taken · MEDIUM for the conformance claim until…	5/5
043	ImageServer, and where the raster Tier 1 line falls	ACCEPTED WITH CONDITIONS	MEDIUM for the decomposition and the Tier 1 line · LOW for the first cut's completeness,…	6/6
044	Tiles are served, because the claim had to be true	ACCEPTED WITH CONDITIONS	HIGH	6/6
045	The server keeps a log you can ask questions of	ACCEPTED WITH CONDITIONS	MEDIUM	6/6
046	Admission control bounds the queue, not the wait	ACCEPTED WITH CONDITIONS	MEDIUM	4/5
047	The outbound licence is Elastic License 2.0	ACCEPTED	HIGH for the decision · MEDIUM for what it will cost in adoption	2/3
048	CI does not run the real-data suites, and says so on every run	ACCEPTED	HIGH for the exclusion · MEDIUM for whether announcing it is enough	1/2
049	A face refuses in its own vocabulary, even when that vocabulary has no word for it	ACCEPTED	HIGH for refusing at all · MEDIUM for which exception code
050	A release is a tag, and what it publishes is two images	ACCEPTED	HIGH for the registry and the trigger · MEDIUM for the tag scheme
051	An appearance is chosen by looking at it	ACCEPTED	HIGH
052	The canonical symbology document is CIM	ACCEPTED WITH CONDITIONS	MEDIUM	3/5
053	The symbology editor is three columns, and the item page has a head	ACCEPTED	HIGH
054	The symbology document is not bounded	ACCEPTED	HIGH — MEDIUM on what replaces the bound until 2026-09-05, when condition 1 was measured	1/2
055	A connection is fields, and this server assembles it	ACCEPTED	HIGH	0/2
056	An item is its own thing, and a service is one kind of it	ACCEPTED	HIGH — MEDIUM on the field layout until 2026-09-05, when condition 1 was answered	1/2
057	Composing and publishing a service	ACCEPTED	HIGH for the composition and the publish rules · MEDIUM for the faces	6/7
058	The datastore's schema is edited from the screen	ACCEPTED WITH CONDITIONS	HIGH for the rule and the refusals · HIGH for the dependency list — MEDIUM until…	4/4
059	Quiescing a data source	ACCEPTED WITH CONDITIONS	HIGH for the refusal and the deadline · MEDIUM for the window's length · LOW for the…	4/5
060	The axis order comes from the authority's register, carried as data	ACCEPTED WITH CONDITIONS	HIGH for the answer, which is the authority's own · HIGH for the defect, measured on a…	3/4
061	Metrics are aggregate; per-entity numbers live in the admin API	ACCEPTED WITH CONDITIONS	MEDIUM	2/2
062	The query face streams, like every other face	ACCEPTED	HIGH — the choice is between two behaviours that were both measured on the same route…
063	A field list may differ from the table, in two ways and no more	ACCEPTED WITH CONDITIONS	~~MEDIUM — the decision is the owner's and the shape is forced by what already exists,…	3/3
064	Editor tracking, and what `features:edit` means	ACCEPTED WITH CONDITIONS	MEDIUM	3/3
065	Domains and subtypes	ACCEPTED WITH CONDITIONS	MEDIUM	3/5
066	GeoParquet layers, read in place by DuckDB	ACCEPTED WITH CONDITIONS	MEDIUM	3/5
067	DuckDB sources beyond a local folder: remote GeoParquet, a DuckDB database file, MotherDuck	ACCEPTED WITH CONDITIONS	MEDIUM	4/6
068	Responses are compressed, on an allowlist rather than everywhere	ACCEPTED	HIGH
069	Query responses carry the layer's cache lifetime	ACCEPTED WITH CONDITIONS	MEDIUM
070	A layer has a visible scale range, and publishing measures one from the data	ACCEPTED WITH CONDITIONS	MEDIUM	4/4
071	A layer's thumbnail is drawn once and kept until somebody redraws it	ACCEPTED	HIGH
072	Pages on other origins may read service responses, never with credentials	ACCEPTED	MEDIUM
073	A FeatureServer query answers in PBF, on the grid the caller names	ACCEPTED	HIGH
074	Z and M are read, said out loud, and not served	ACCEPTED WITH CONDITIONS	HIGH	1/3
075	A layer is edited by its owner, an administrator, and the group its owner shares it with	ACCEPTED WITH CONDITIONS	HIGH	3/3
076	OAuth 2.0 authorization code with PKCE, for registered apps	ACCEPTED WITH CONDITIONS	MEDIUM	3/5
077	Z and M ride beside x and y, and a flat geometry pays nothing for it	ACCEPTED WITH CONDITIONS	HIGH	3/5
078	A hosted layer can keep its history, and the database keeps it	ACCEPTED WITH CONDITIONS	HIGH that the database keeps it · MEDIUM on the write cost, which is measured once on one…	6/6
079	A web map is a saved document, and ArcGIS clients can open it	ACCEPTED WITH CONDITIONS	HIGH on the format · MEDIUM on the viewer's shape until the owner has used it	1/4
080	Hosted tables keep the Z and M their data carries	ACCEPTED WITH CONDITIONS	HIGH	1/2
081	Migration publishes an ArcGIS Server's layer definitions over the tables they already read	ACCEPTED WITH CONDITIONS	MEDIUM	0/1
082	Offline sync is not in v1	ACCEPTED	HIGH
083	The where clause evaluates ArcGIS's standardized functions	ACCEPTED WITH CONDITIONS	MEDIUM	1/2
084	The page size is one number, and the server's is set from the console	ACCEPTED WITH CONDITIONS	HIGH	3/3
085	A tile leaves out what it cannot draw	ACCEPTED WITH CONDITIONS	HIGH	2/3
086	The operator chooses the map ground, and it is the portal's default basemap	ACCEPTED WITH CONDITIONS	HIGH	1/3
087	A domain is a named object that fields on many layers point at	ACCEPTED WITH CONDITIONS	HIGH	0/2
088	Sign-in through an OpenID Connect provider	ACCEPTED WITH CONDITIONS	MEDIUM	2/3
089	Sign-in through an LDAP directory, and groups mapped to roles and groups here	ACCEPTED WITH CONDITIONS	MEDIUM	1/3
090	Sign-in through a SAML 2.0 identity provider	ACCEPTED WITH CONDITIONS	MEDIUM	1/3
091	Server's sidebar is five rows; the rest are pages under them	ACCEPTED	MEDIUM
092	Sprites are uploaded per service, and a style's icons are checked against them	ACCEPTED	MEDIUM
093	Seeding the tile cache	ACCEPTED	MEDIUM
094	A service may carry several styles, and a style may name hosts an administrator allowed	ACCEPTED	MEDIUM
095	Registered PostGIS layers serve vector tiles	ACCEPTED	MEDIUM
096	A vector tile service may be tiled in another reference	ACCEPTED	MEDIUM — the grid arithmetic is tested by hand-worked numbers; what an ArcGIS client does…
097	Vector tiles are served through OGC API Tiles, TileJSON and WMTS	ACCEPTED	MEDIUM — the grids, documents and refusals are tested against numbers typed in from the…
098	Vector tiles can be exported as a package	ACCEPTED WITH CONDITIONS	MEDIUM — both formats are written from their published specifications and read back in…	3/3
099	Picture markers are drawn on every face	ACCEPTED	MEDIUM — every face is written and unit-tested, and the Skia drawing is read back from…
100	Labels in more scripts	ACCEPTED	MEDIUM — the glyph ranges are generated, decoded and pinned by tests, and the raster…
101	Studio is walked the way a Portal user walks it	ACCEPTED WITH CONDITIONS	MEDIUM — every change below was reproduced in a browser before it was made and is pinned…	0/4
102	The Studio item is one page, and every setting has one home	ACCEPTED WITH CONDITIONS	MEDIUM — the structure was drawn by an ArcGIS administrator's review and a design review…	3/3
103	A hosted layer is updated from a file: append, or overwrite	ACCEPTED WITH CONDITIONS	MEDIUM — the write path is the import's, measured by its own tests; what is new is one…	4/4
104	A web map styles its own layers	ACCEPTED WITH CONDITIONS	MEDIUM — the storage is the ArcGIS Web Map specification's own place for it and the…	2/3
105	ArcGIS clients append to a hosted layer through `uploads/upload` and `append`	ACCEPTED WITH CONDITIONS	MEDIUM — the two operations are shaped as the public ArcGIS REST reference documents them…	1/2
106	A layer's data can be exported as a file	DRAFT	MEDIUM — every format rests on a GDAL driver measured present and able to create on both…	6/9
107	A layer is exported as a GeoPackage, a zipped shapefile or a workbook	ACCEPTED WITH CONDITIONS	MEDIUM — GDAL writes the files and is the same GDAL the import reads with; what is…	2/3
108	An item's owner is changed by an administrator; Move waits for content folders	ACCEPTED WITH CONDITIONS	HIGH for Change owner — one row, the member transfer's rule for one item; MEDIUM for…	2/3
110	A web map sets its layers' pop-ups	ACCEPTED WITH CONDITIONS	MEDIUM — stored where the ArcGIS Web Map specification keeps it and drawn by the viewer…	1/2
111	An item carries tags	ACCEPTED	HIGH — a list of words per item, searched as text; nothing measurable is at stake	2/2
112	A CSV or Excel table with coordinates is published and added to a layer	ACCEPTED	HIGH — GDAL's CSV driver does the reading, and the path after it is the shapefile's	2/2
113	A hosted feature layer has views, and a view is a PostgreSQL view	ACCEPTED WITH CONDITIONS	MEDIUM — PostgreSQL's automatically updatable views were measured doing what this needs;…	4/4
114	A member's content has folders, and an item is moved between them	ACCEPTED WITH CONDITIONS	HIGH — a table, a column per item kind, and Portal's documented REST shape	3/3
115	Editor tracking stops as well as starts, and editors may be kept to their own features	ACCEPTED	HIGH — the writer's own-only predicate existed and was measured dormant; this turns it on…	3/3
116	Update data may update the features a file matches and add the rest	ACCEPTED	HIGH — two statements in the transaction append already runs	2/2
117	A web map labels its layers	ACCEPTED	HIGH — Web Map's own fields, drawn by the viewer that already draws the layer	1/1
118	A web map's pop-up formats numbers and dates	ACCEPTED	HIGH — one Web Map field per field info, drawn by the viewer that draws the pop-up	1/1
119	A web map has a description and a picture	ACCEPTED	HIGH — two columns and the Map Viewer's own canvas	2/2
120	A GeoPackage or KML is imported as a geodatabase is	ACCEPTED	HIGH — the geodatabase path, measured reading both formats through /vsizip/	1/1
121	A point layer is drawn as a heat map, or sized by a number	ACCEPTED	HIGH — Web Map's own renderer shapes, drawn by OpenLayers' own layers	1/1
122	A pop-up has text and an image	ACCEPTED	HIGH — two Web Map fields, drawn as text	1/1
123	Imagery comes into Studio, and an export refuses what it does not apply	ACCEPTED WITH CONDITIONS	MEDIUM — the refusal is measured; the scope it opens was inferred and is confirmed	5/5
124	An image service is shared to a group, and identify refuses what it does not apply	ACCEPTED	HIGH — each defect is reproduced by a test that failed before the change
125	An image service has a legend, key properties and statistics	ACCEPTED	MEDIUM — the shapes are ArcGIS's documented ones; what Pro does with each is read from…
126	An imagery item describes itself, and sits in its owner's folder	ACCEPTED	HIGH — measured on the portal face Pro and the Python API read
127	An image service exports its values as a GeoTIFF	ACCEPTED WITH CONDITIONS	MEDIUM — the file is read back by this server's reader and by GDAL; what ArcGIS Pro does…	0/1
128	An image service has histograms, and NaN is not a measurement	ACCEPTED	MEDIUM — the shape is ArcGIS's documented one; what Pro draws from it is not measured here
129	Several items at once, and a map says which of its layers its readers will not see	ACCEPTED	MEDIUM — the shapes are Portal's; each action is a sequence of requests the single-item…
130	The Map Viewer has an attribute table and bookmarks	ACCEPTED	MEDIUM — both are ArcGIS Map Viewer's shape over requests this server already answers
131	Labels have a visible range	ACCEPTED	HIGH — the Web Map specification's own fields, read and written as ArcGIS does
132	The Map Viewer has a time slider	ACCEPTED	MEDIUM — the server already answers time; the slider is ArcGIS Map Viewer's shape over it
133	The Map Viewer prints the view as a page	ACCEPTED	MEDIUM — composed in the browser from what the map already drew; no print service
134	Features are edited in the browser	ACCEPTED WITH CONDITIONS	MEDIUM — every write goes through the layer's own applyEdits, which ArcGIS clients…	3/3
135	A service counts its use	ACCEPTED	MEDIUM — what is counted is measured; that a count is what an administrator needs is…
136	An elevation model is shaded, sloped and given its aspect	ACCEPTED	HIGH — the arithmetic is checked on planes whose answers are known in closed form, and…
137	An image service answers LERC	ACCEPTED	HIGH — every blob type opens in Esri's own decoder with the values it was given, and the…
138	A renderer sent as a rendering rule is drawn	ACCEPTED	HIGH — every chain is the one the SDK was measured sending, and each is drawn where it…
139	An uploaded image is given its overviews	ACCEPTED	HIGH — measured before and after on the same image, and the full resolution is…
140	Several images are one mosaic	ACCEPTED WITH CONDITIONS	MEDIUM — the reading is measured and checked against GDAL's format; what a mosaic should…	1/1
141	An image service answers about an area and along a line	ACCEPTED	HIGH — the statistics agree with numpy on the same file to the last digit, and a hole is…
142	An image is read between its cells as the request asks	ACCEPTED	HIGH — the arithmetic is checked on ramps whose answers are known, and end to end on a…
143	An uploaded image is given back to its owner	ACCEPTED	HIGH — the file given back is byte-identical to the one sent
144	The geometry service answers the JS SDK as it asks	ACCEPTED WITH CONDITIONS	HIGH — every request is the SDK 4.30's own shape, read from its published source	1/1
145	A geometry request is answered in the units it names, or refused	ACCEPTED	HIGH — each conversion is checked on a shape whose answer is known, and each refusal…
146	project takes extents and WKT, relation reads RELATE, and GARS and GEOREF are converted	ACCEPTED	HIGH — each is checked on an answer known in advance
147	A mosaic grows, and images that do not fit its grid are put on it	ACCEPTED	MEDIUM — the resampling is the raw export's, measured there; the growth is checked end to…
148	An image may be downloaded by everyone it is shared with, and every image is given its pyramid	ACCEPTED	HIGH — both are checked end to end, with a second user
149	The portal may name another server's geometry service	ACCEPTED	HIGH
150	autoComplete, reshape and trimExtend are computed	ACCEPTED	MEDIUM — each is checked on the cases the specification describes; ArcGIS's handling of…
151	NDVI, band arithmetic and a choice of bands	ACCEPTED	MEDIUM — the arithmetic is checked against closed-form answers; ArcGIS's defaults for…
152	A mosaic is a catalog: queried, ordered by a rule, and edited as ArcGIS edits one	ACCEPTED	MEDIUM — each operation is checked end to end; ArcGIS's ordering methods that need a…
153	An image service has the time of its images	ACCEPTED	MEDIUM — time is checked end to end; multidimensional imagery is not served
154	A classified image names its classes: ArcGIS's raster attribute table	ACCEPTED	HIGH for the table and its reading · MEDIUM for ArcGIS's shape of identify with a table,…
155	An image service measures on the ground, and moves between its cells and the map	ACCEPTED	MEDIUM — distances, azimuths and areas are checked against closed-form values; ArcGIS's…
156	Clip, Remap, Mask, Statistics and Arithmetic	ACCEPTED	MEDIUM — each is checked against closed-form answers; ArcGIS's enumerations for…
157	Imagery in other formats is written as GeoTIFF on its way in	ACCEPTED	MEDIUM — the formats are GDAL's and the conversion is checked end to end on samples; real…
158	A mosaic combines its images, is reordered in Studio, and a map chooses its bands	ACCEPTED	MEDIUM — each operator and each control is checked end to end on samples; blending is…
159	A multidimensional file is a service of slices	ACCEPTED	MEDIUM — checked end to end on a NetCDF of two variables over time and depth; real files…
160	Datum transformations are listed from the register and applied as named	ACCEPTED	MEDIUM — listing and applying are checked end to end; the ranking without an area of…
161	A mosaic's seamline is the halfway line between its images	ACCEPTED	MEDIUM — checked end to end on two overlapping images; ArcGIS's generated seamlines…
162	WMS and WFS at a service's own address, and image services in WMS	ACCEPTED WITH CONDITIONS	MEDIUM — each address and each layer is checked end to end; no ArcGIS-migrated QGIS…	1/2
163	An image service answers WMTS over its own tiles	ACCEPTED WITH CONDITIONS	MEDIUM — a WMTS tile is checked byte for byte against the ArcGIS tile; no WMTS client has…	1/1
164	`generateKml` is a network link to the service's map	ACCEPTED WITH CONDITIONS	MEDIUM — the document and the request it makes are checked; Google Earth has not been…	0/1
165	OGC API Features filters in Basic CQL2 text	ACCEPTED WITH CONDITIONS	MEDIUM — each claimed class has a case that observes it; no OGC test suite for Part 3 has…	0/1
166	A service's OGC faces are turned off one by one	ACCEPTED	MEDIUM — each face is checked against the switch end to end; ArcGIS Manager's vocabulary…
167	A service's own OGC documents describe it	ACCEPTED	MEDIUM — the documents are checked; ArcGIS Manager's other OGC properties (contact a…
168	WFS 1.1.0 is spoken beside 2.0.0	ACCEPTED WITH CONDITIONS	MEDIUM — each operation is checked end to end in 1.1.0's own terms; no 1.1.0-only client…	2/2
169	WFS-T through the one write path	ACCEPTED WITH CONDITIONS	MEDIUM — each action is checked end to end in both versions; OGC's Transactional test…	2/2
170	Image services are WCS 2.0.1 coverages	ACCEPTED WITH CONDITIONS	MEDIUM — each operation, trimming, scaling, reprojection and the switch are checked end…	2/2
171	SLD at the WMS boundary	ACCEPTED WITH CONDITIONS	MEDIUM — a style sent with GetMap is drawn and forgotten, GetStyles' document draws the…	2/2
172	A service may be an INSPIRE View and Download service	ACCEPTED WITH CONDITIONS	MEDIUM — the documents validate against INSPIRE's published schemas with and without the…	0/1
173	WCS 1.0.0 is spoken too, so that QGIS opens an image service	ACCEPTED WITH CONDITIONS	MEDIUM — QGIS 3.28's own WCS provider opens a coverage through it, its documents validate…	1/1
174	OGC API Processes, over the geometry service	ACCEPTED WITH CONDITIONS	MEDIUM — each process is one geometry-engine operation under the geometry service's own…	2/2
175	OGC API Maps, over the WMS renderer	ACCEPTED WITH CONDITIONS	MEDIUM — a map drawn here is byte-identical to the WMS GetMap for the same box, size and…	1/2
176	OGC API Styles, read-only, over the styles the tile faces already serve	ACCEPTED WITH CONDITIONS	MEDIUM — the documents, the negotiation and SLD 1.0 beside 1.1 are unit-tested, the face…	2/4
177	OGC API Records is a searchable catalogue of the portal's items	ACCEPTED WITH CONDITIONS	MEDIUM — every claimed class has a test against a running server, and OWSLib 0.25 and…	1/3
178	HTTP Basic on the OGC faces, over HTTPS	ACCEPTED WITH CONDITIONS	HIGH — QGIS 3.28 signs in with its own authentication manager and saves a WFS-T insert…	0/1
179	A layer may carry a title	ACCEPTED WITH CONDITIONS	HIGH — one column, one setter, and the three faces that composed a title each read it…	1/1

Açık sorular

Belirsizlik gizlenmiyor, kayda geçiyor. Buranın boş olması belirsizliğin değil, kaydın bittiği anlamına gelirdi.

Q-165[OWNER]

May INSPIRE be turned on for one showcase service, so the INSPIRE validator can be run against it?

Mimari borç

Geçici uzlaşmalar, her biri kendini ödeyen tetikle birlikte. Tetiksiz bir uzlaşma, geçici etiketi takmış kalıcı bir karardır.

No	Borç	Ne zaman ödenir	Durum
D-04	Multi-tenant resource isolation is not designed.	Before multi-tenant deployments are supported	PARKED
D-10	~~ADR-015 is implemented for local passwords only.~~ OIDC, LDAP and SAML 2.0 are built 2026-09-24, in the owner's order (ADR-088, ADR-089, ADR-090); SCIM, API keys and mTLS remain unbuilt, and were not asked about.	OIDC before the first deployment with an IdP; /generateToken before any unmodified ArcGIS client is pointed at us The…	OPEN
D-108	The pipe streams and the importer does not, so the million-feature ceiling has not moved — it has changed owner.	The first archive with a layer past a million features, which is an ordinary size for a national road network	PARKED
D-115	The Server/Studio surface split is the single cause of four recorded console defects.	The next defect whose cause is the split	PARKED
D-144	~~Nothing bounds how long one request may hold a database permit.~~ The headline is struck 2026-09-09 rather than reworded, because it was false and the correction had already been written into this row's status cell without reaching its first sentence — half…	A way to refuse before the first byte, or a way to end a response that says why.	PARKED
D-162	A provider that is not PostGIS would be handed PostGIS SQL.	When DuckDB is designed as the file-format query engine (Q-81), and not after.	PARTLY
D-261	Every request under /rest/services makes six to eleven short database round trips, and that — not the query, not the response size, not admission control — is what holds the path at about 1,300 requests a second.	A deployment whose request rate approaches it, or the day the catalogue and identity reads are held the way ADR-015 §3a…	PARKED
D-262	The product's own containers are amd64 only, so docker compose up — the first command README.md offers — fails on every arm64 machine.	The release workflow publishing both architectures, which GitHub's arm64 runners make free for a public repository; and…	PARKED
D-263	The WFS capabilities document offers spatial operators a GeoParquet layer refuses.	The first WFS client that builds a spatial filter from the capabilities document against a GeoParquet layer, or ADR-066…	OPEN
D-266	Only FeatureServer query answering features is cacheable (ADR-069); every other read a map draws from is not, and a PostGIS layer has no validator.	A second client family drawing from one of the uncovered faces; or a cheap PostGIS data version appearing (an edit…	OPEN
D-267	A layer's visible range is measured once, at publish (ADR-070), and a layer published before it has none.	A layer whose data grows past its range — a tile at its first drawn level measured over 10,000 features, or a slow-tile…	OPEN
D-270	ADR-064's per-feature ownership is unreachable and kept.	When somebody asks for that setting — then it is wired to a per-layer flag and this closes; or at the next ADR-064…	OPEN
D-279	A MotherDuck layer's tiles change behind this server with nothing to key on, and keep the server's default lifetime.	The owner decides MotherDuck's default; or an operator reports a MotherDuck map an hour behind its data.	OPEN
D-282	An exported tile package lives on the server that wrote it, and the console's download holds it in the browser's memory.	A deployment runs more than one server against one catalogue and exports; or an operator reports the console failing on…	OPEN
D-287	The generated sprite sheet has no ceiling on its size.	A service whose sprite@2x.png is taller than 4,096 pixels, or a report of a map whose icons vanish on one machine and…	OPEN
D-289	Two of Studio's downloads still fetch the whole file into the page and save it at the end.	A tile package or an export measured past a few hundred megabytes, or a report of a save arriving on the wrong page	OPEN
D-290	~~Three OGC faces have CITE failures that are counted rather than fixed: WMTS 15, WMS 1.1 10, WFS 1.1 9.~~ Updated 2026-10-06: WMTS 0, WFS 1.1 4, WMS 1.1 10, and two suites added with failures of their own — WFS 2.0 Transactional 18 and OGC API Maps 4.	WFS 1.1: the engine's image fixed upstream.	OPEN
D-291	A portal item can name a face its service has turned off.	The next change to the portal's item listing, or a client report of an item that will not open	OPEN
D-292	A group: search finds services and nothing else.	The next change to the portal search, or a group member who cannot find a map shared with the group	OPEN
D-293	The conformance harness's shared client keeps cookies.	The next test that asserts anonymity, or a sweep of the tests that sign in through Http	OPEN

269 ödendi — hepsi neye mal olduğuyla birlikte defterde duruyor, çünkü ödenmiş borç kanıttır ve bu sayfa yalnızca iştir

Varsayımlar

Birinin çürütülmesi, üzerine kurulu her ADR’nin yeniden gözden geçirilmesini tetikler. Doğrulanmamış çoğunluk projenin dürüst hâli, bir ihmal değil.

No	Varsayım	Durum
A-001	The tile path is CPU-bound enough that language performance materially affects capacity	VALIDATED
A-002	Single-binary distribution is genuinely valuable for air-gapped installs, not just aesthetically pleasing	UNVALIDATED
A-003	Most published services are idle most of the time, making shared workers viable	DOWNGRADED
A-004	Hot-path geometry overhead is material enough to justify our own primitives	VALIDATED
A-005	Geometry running in the same runtime meaningfully reduces defect resolution time versus FFI	UNVALIDATED
A-006	One internal geometry representation can serve both the feature path and the tile path without a second conversion	VALIDATED
A-007	Crash containment is required in practice, not merely in principle — workers really do die (GDAL on malformed input, plugins, OOM)	CONTESTED,
A-008	Administrators will not correctly hand-tune per-service worker settings, so defaults must be good and adaptive	VALIDATING
A-011	A distinguished central manager process is a robustness and recovery liability, so placement and routing state must be recoverable without one	VALIDATING
A-012	The sharing question is really about per-service state size, binding cost and neighbour tolerance — not about "shared versus dedicated"	VALIDATING
A-013	Our Tier 2 dependencies (GDAL, GEOS, PROJ) are thread safe enough to permit a threaded worker model	VALIDATED
A-014	Routing requests to workers already warm for a service materially improves L1 hit rate without wrecking load balance	DOWNGRADED
A-015	Per-service warm state is small — connections, schema, symbology, fonts, CRS — making bind/unbind cheap	VALIDATED
A-018	~~A deliberately boring platform schema can be supported across SQLite and PostgreSQL at acceptable cost~~	SUPERSEDED
A-019	In-process MVT encoding can meet our latency targets	VALIDATED
A-020	Cache seeding absorbs the provider performance gap, so an expensive Oracle tile path is acceptable when paid once rather than per request	UNVALIDATED
A-036	RLS delegation and large streaming reads do not collide often — the layers wanting row-level security are not usually the layers wanting bulk export	UNVALIDATED
A-035	Data source count stays low relative to service count — many services share one registered database	UNVALIDATED
A-032	COG range-request traffic is view-proportional, so proxying it costs about what serving tiles costs	UNVALIDATED
A-033	Target clients can render COG directly, so serving one format suffices	UNVALIDATED
A-034	Internal ports designed for our own use will be good enough to become a plugin contract later, without a redesign	UNVALIDATED
A-030	Lease expiry plus checkpoint verification prevents one job running twice across nodes	UNVALIDATED
A-031	Job rate stays low enough for a database-backed queue — jobs per minute, not messages per second	UNVALIDATED
A-028	Administrators can and will declare layer volatility usefully, and keep it roughly accurate	UNVALIDATED
A-029	Tiles, not feature query responses, are where cache reuse actually is	UNVALIDATED
A-026	OGC API Features Parts 1+2+3 plus additive extensions can express what §28 requires, without bending the standard's meaning	UNVALIDATED
A-027	Optimistic concurrency can be made correct against writes we never see, by relying on database-maintained versioning rather than our own event record	UNVALIDATED
A-025	A small number of pinned service contexts suffices for real deployments, and administrators will not pin everything	UNVALIDATED
A-024	A small residual executor plus explicit refusal is acceptable to real users, given a capability report published in advance	UNVALIDATED
A-022	~~The datastore schema can be created on PostGIS, SQL Server Spatial and Oracle Spatial at acceptable cost~~	SUPERSEDED
A-023	A cheap schema fingerprint can be polled often enough to detect drift on registered sources without loading the source database	UNVALIDATED
A-021	Filter and predicates can be pushed down usefully on all three spatial dialects — narrowed by Q-67: clip and simplify no longer need to be, since only PostGIS serves tiles.	VALIDATED
A-017	Data sources will frequently be foreign and possibly read-only, so the platform cannot rely on DDL rights in them	VALIDATING
A-016	GDAL-backed providers can be made optional, so a PostGIS-only deployment ships as one artefact	VALIDATED
A-037	Allocation rate, not CPU, sets the tile-serving ceiling per worker	VALIDATED
A-038	GDAL is needed for the import formats we care about at all	INVALIDATED
A-039	~~Every provider can clip server-side cheaply enough to avoid shipping whole geometries~~	SUPERSEDED
A-040	All three engines can stream BLOBs out of a query without materialising them in our process	UNVALIDATED
A-041	A bounded separate connection pool is sufficient protection against slow-client exhaustion during attachment streaming	UNVALIDATED
A-042	Caps on vertex count, batch size and wall clock are sufficient to make a public general-overlay endpoint safe	INVALIDATED
A-043	Six geometry engines can be made to agree closely enough that the same query returns the same answer on any provider	VALIDATED
A-044	Certificate rotation can take effect on the next handshake without recycling the listener or the worker	VALIDATED
A-045	Soft-fail revocation checking is an acceptable posture for the air-gapped profile	UNVALIDATED
A-046	An opaque-token session lookup per request is affordable at the concurrency ADR-007 targets	VALIDATED
A-047	Every provider supporting RLS delegation can accept a principal name we generate, through administrator-controlled mapping	UNVALIDATED
A-048	Expand-and-contract is achievable for every migration we will need, including index and constraint changes on large hosted tables	UNVALIDATED
A-049	A curated Python wheel set can cover realistic geoprocessing without pip at runtime	UNVALIDATED
A-050	Per-worker allocation rate and GC pause can be sampled continuously, cheaply enough to be always-on metrics	UNVALIDATED
A-051	A supervisor-served admin surface can authenticate without the platform store without becoming a bypass	UNVALIDATED
A-010	The 100–1,000 service target will not shift upward by an order of magnitude after launch	UNVALIDATED
A-057	STAsMVT output is acceptable to the ArcGIS and MapLibre clients we care about	PARTLY
A-058	The datastore has spare capacity for tile encoding in a 100–1,000 service deployment	UNVALIDATED
A-059	A vertex cap bounds the work for single-pass geometry operations	UNVALIDATED
A-060	Using the datastore's PROJ rather than an in-process library costs nothing that matters	PARTLY
A-061	An administrator's first act against an unfamiliar server is to open its URL in a browser	UNVALIDATED
A-064	A security report will arrive at some point after publication, and the cost of having nowhere to send it exceeds the cost of the policy	UNVALIDATED
A-065	Requiring a DCO rather than a CLA does not deter contribution, and requiring a CLA would	UNVALIDATED
A-066	A stale Public grant discloses nothing that was not already disclosed	VALIDATED
A-067	Platform-store failures that leave the data sources up are common enough to be worth serving through	UNVALIDATED
A-068	Fifteen minutes is longer than a transient outage and shorter than one nobody is handling	UNVALIDATED
A-069	~~One Latin/Greek/Cyrillic typeface serves the deployments this product is for~~	RETIRED
A-070	Substituting an unavailable font beats refusing the request	UNVALIDATED
A-071	One style per service is enough to be useful, even though it is not enough to be finished	INVALIDATED
A-072	Refusing a style at write time costs an author less than a blank map costs them at read time	UNVALIDATED
A-073	Warm-state fragmentation across workers costs less than the affinity control system would cost in instability	UNVALIDATED
A-074	A QGIS or GDAL client asking a WFS feature type for its default output format gets GML 3.2 — so a WFS offering only GeoJSON would not have connected, and the GML writer is…	VALIDATED
A-075	ArcGIS Pro's portal connection works against a portal API this project implements, rather than requiring something only Esri's own portal returns	VALIDATED
A-076	A CPU rasteriser meets the latency a WMS client expects at typical image sizes on this runtime, without the allocation profile ADR-007 §4.14's worker sizing has no term for	VALIDATED
A-077	The canonical symbology document carries enough to draw a map a cartographer would accept, rather than enough to describe one.	PARTLY
A-052	Enforcing the user-type ceiling costs nothing in deployments that never use it	UNVALIDATED
A-053	A fused deployable remains operable at the top of the stated scale target — 1,000 services	UNVALIDATED.
A-054	Catalogue load and serving load stay similar enough that separate scaling is never forced	UNVALIDATED,
A-055	A single-page console with no build step stays maintainable	UNVALIDATED.
A-056	Operators want start/stop rather than only sharing	UNVALIDATED
A-062	256 MB uncompressed is above any shapefile a person uploads through a browser and below what troubles the machine	UNVALIDATED
A-063	Refusing an undeclared encoding costs less than silently corrupting text	UNVALIDATED
A-078	An operator would rather write MapLibre than a format we invented, because tools exist for the first	UNVALIDATED,
A-079	The publisher and the operator are different people often enough for two surfaces to be worth their cost	UNVALIDATED,
A-080	admin:manageServer is the right single gate for Server, so no reader is left without a tool they need	UNVALIDATED
A-081	The operator console is read on a screen at least 1,180 CSS pixels wide	SUPERSEDED
A-082	The EPSG register's axis definitions change rarely enough that regenerating from whatever proj.db the PostGIS image ships is soon enough	UNVALIDATED
A-083	No deployment needs an axis answer for a CRS code PROJ's own register does not carry	UNVALIDATED
A-019	In-process MVT encoding meets latency targets — on PostGIS only, which v1 made the whole of it: D-05 closed 2026-08-24 with the scope cut	2026-08-12
A-004	Hot-path geometry overhead justifies our own primitives	2026-08-12
A-001	The tile path is CPU-bound enough that language performance materially affects capacity	2026-08-12
A-013	GDAL, GEOS and PROJ permit a threaded worker model	2026-08-12
A-009	PostgreSQL/PostGIS is an acceptable hard dependency for the baseline deployment	REINSTATED

Neyin doğrulandığı

Counted from [Fact] and [Theory] attributes in the test sources, so this number cannot drift from the suite that produces it.

Host

1332

Core

873

Conformance

738

Platform.Postgres

542

Api.ArcGis

408

Console

283

Platform

206

Providers.DuckDb

124

Api.Wfs

122

Render.Skia

Architecture

Raster.Tiff

Security.Argon2

Son çalışma

3f7cada42026-10-12Two tests that failed v1.0.338's CI stop racing: the pop-up is set and applied in one turn, and the reclaim test is not a deadline test
da6135932026-10-12GET /admin/layers/{name} reads one layer back, as the listing describes it
4d31fe602026-10-12The attachment pool under slow readers is measured: the ninth waits and gets 504, the feature path does not notice, and a 1 MB file does not release early
efe046052026-10-12The importer draws from the connection budget: an import and the requests reading the datastore compete for one pool of permits
cfe79cbd2026-10-12A local administrator signs in while the directory and the OpenID provider are down, and a test breaks them to show it
5f79859e2026-10-12ADR-103 condition 2 discharges: Update data refuses a publisher who does not own the layer, and a registered layer
249400c82026-10-12Two timing tests stop measuring the runner: the pre-flight clock starts after the worker does
56cdcff22026-10-12ADR-079's evidence row points at the review's dissent, §10a, not a §4a that never existed
0dd3b94a2026-10-12Two conditions met weeks ago are marked, one gap is closed first, and a fired trigger is recorded
21c15a392026-10-12ADR-086 condition 3 discharges: a new web map starts on the server's ground, and a test now says so
35c219a72026-10-12The history-period test stops racing the page's own fill for the row it waits on
1db42c802026-10-12The layer viewer's box zoom stays zoomed: the Frame handler is on the button, not the page
fc78f07e2026-10-12The projector stops breaking every second projection on PROJ 8
16ee583d2026-10-12A ranged layer's opening place is found at start, a level inside its limit