docs planning MAP_EV_SOURCE_REGISTER

Map and EV source/commercial-use admission register

Date: 2026-10-24. Status: MAP-01 DECISIONS_RECORDED / TRANSITIVE_AND_BYTE_ADMISSION_PENDING. This register qualifies candidates; it does not grant rights or activate a source. Implementation must fill exact version/SHA, raw digest, license evidence digest, redistribution/derivative obligations, attribution text, retained notices, limits, responsible task and admission decision for every shipped artifact. Unknown fields mean NOT_ADMITTED. Code, data, artwork, hosting and protocol rights are separate.

MAP-01 admission decisions

Decision vocabulary: ADMITTED_FOR_SPIKE permits local, non-shipped technical evaluation only; ADMITTED_FOR_SOURCE permits implementation and tests but not deployment; PENDING blocks the dependent artifact; REJECTED must not be used. No decision below authorizes production distribution, an external account, a public OSM write or a provider contact.

ID	Candidate	Exact evidence	Decision	Remaining obligation
SRC-COMAPS	CoMaps native source	4587b8ad4d12c9f59982709fdaf03cc925948827; LICENSE SHA-256 09e8a9bc…f1130b; NOTICE SHA-256 307a6cfe…e6acc; copyright inventory SHA-256 5d0156f5…8121e; T07 audit 215 components, 0 unresolved, 219-file notices/SBOM	ADMITTED_FOR_SPIKE	Human legal sign-off and public source offer; do not ship an AAR/APK until accepted. Engine SHA/ABI/patch change requires re-audit
SRC-GEN	CoMaps generator/styles/fonts/resources	Same source commit; tools/python/maps_generator, data/countries.txt, data/styles, data/fonts	PENDING	T07 notices/SBOM cover code and retained data/copyright.html; per-asset font/style/symbol review, exact input PBF/extract digest and reproducible regional build remain
SRC-OSM	OSM/Geofabrik Brazil extract	No extract selected yet; T07 ODbL derived-database/source-offer determination recorded	PENDING	Exact extract URL/date/bytes/SHA-256; publish the durable source/derived-data offer at release
SRC-ANP	ANP station facts	Existing admitted pipeline covers current Android import; station-level server facts not yet selected	PENDING for new server artifact; existing importer behavior preserved	Exact dataset/terms/metadata, bytes/SHA-256, station linkage and period rules
SRC-OCM	Open Charge Map subset	No provider subset selected	PENDING	Per-record/provider license and attribution; opendata flag alone is insufficient
SRC-COMM	Abastevo community data	Existing account/consent/moderation contracts	ADMITTED_FOR_SOURCE under existing rules	Public extract/relicense review; no private GPS/photos
SRC-ICON	Generated map pictograms	docs/assets/map-icons/ provenance and hashes; Android exports integrated in the accessible list	ADMITTED_FOR_SOURCE	Preserve MIT notice/provenance; device list semantics/48 dp/icon composition PASS; MAP-18 native map-background/theme review remains
SRC-PLATFORM	Android location/TTS	Platform APIs	ADMITTED_FOR_SOURCE	No Play Services or cloud TTS requirement; permission/fallback tests
SRC-CAR	AndroidX Car App Library	Not selected/versioned	PENDING	Exact revision/license/dependency tree; external host acceptance separate

Behavior and fixture decisions are frozen in the map discovery contract and contracts/testdata/map-discovery/cases-v1.json. Source admission is not runtime activation.

Local proof source use (2026-10-25; not a production admission)

The MAP-20 local acceptance downloaded the official ANP registry CSV, the 2026-10-11..17 station survey XLSX and the Curitiba registry API response, and used the admitted OSM Curitiba PBF. Exact URLs, bytes, SHA-256, review method and the 62 reviewed/33 priced counts are in the MAP-20 local receipt. This is local proof only: it does not admit ANP redistribution, does not authorize a public package/data offer and does not change SRC-ANP from PENDING for a production server artifact. The OSM package keeps ODbL-1.0 attribution. No municipal average, centroid or proximity-only station link was used.

Primary stack

• CoMaps native source: Apache-2.0 core is the committed commercial-use engine source, extracted under MAP-14 rather than consumed as a published SDK. Pin the exact upstream commit and every included dependency; vendor the minimal core/JNI host, maintain a documented patch set, build our own AAR reproducibly, and preserve LICENSE/NOTICE while marking modifications. Inspect tools, third-party code, fonts/styles/artwork and endpoints. Do not reuse the brand/logo or ship the CoMaps application/CDN. Extraction and ENGINE_GATE feasibility remain unproven until MAP-14 executes. License, NOTICE, copyright inventory, Apache terms.
• Native generator and map resources: derive from the audited same source/toolchain. A core license alone does not admit every input/resource. Generate compatible regional files from admitted data and serve them through Abastevo-controlled public endpoints. CoMaps documents a versioned regional map-server layout; do not infer unlimited commercial CDN capacity or automatic rights to all prepared files. Build guide, map hosting.
• OSM / Geofabrik public extracts: ODbL reference roads/POIs, including fuel/charging candidates. Commercial reuse is conditional on the applicable attribution and share-alike/database obligations. Source revision and exact extract bytes must be pinned. Public Geofabrik files omit contributor personal metadata; do not acquire private history/user metadata. OSM copyright, Brazil extracts, fuel tags, charging tags.
• ANP official station survey facts and registry: reuse the existing admitted pipeline where applicable; add station-level prices from official open files with exact metadata, publication dates, units and reuse evidence. Resolve exact current dataset license/terms before a new redistribution format. Historical product-level/municipal summaries are separate from a station fact. Official recent surveys, station-level historical series, metadata.
• Open Charge Map: open-licensed subset only. User contributions are CC BY 4.0; imported providers may have different rights. Store provider attribution/license alongside every retained assertion. Neither an API key nor an opendata flag replaces the per-provider decision. Prefer the experimental bulk export with a pinned commit/selected country when qualified; it is not guaranteed live status. Rights/API, export.
• Abastevo public community and private records: existing contracts govern collection/publication/moderation, purpose, retention and owner rights. Price/status reports are not automatically OSM imports/exports. Map display must respect existing contributor agreements; do not retroactively relicense private data to ODbL. Review any new public extract rights explicitly.
• Existing Rust/Go/PostGIS/Kotlin/Room/Compose tools: preserve the repo lockfiles/notices. Review additions by exact transitive license/security before adopting. PostgreSQL/PostGIS application use is not the same act as redistributing a modified database executable; record actual distribution obligations.
• Android platform location/TTS: use system APIs with permission/fallback handling, not a new required cloud API or proprietary location SDK. Installed speech engines/voices are user choices; no closed voice dataset is bundled. Core browsing/navigation must remain functional without Play Services or a network voice engine.
• AndroidX car client, optional: admit exact client-library revision/license/dependency tree if used. Android Auto host/platform distribution and certification are separate external constraints; this plan does not claim the host is open-source or required for phone use. Official navigation integration.
• Generated Abastevo pictograms: original generic artwork created for this request; raw output, prompt, normalization, SVG and hashes are retained. No CoMaps/operator logo or third-party icon was copied into these new assets. Keep project MIT notice and generated provenance; no claim of reproducible stochastic generation.

Optional inputs; not prerequisites for an open-data launch

• PBE/Inmetro and manufacturer specifications: useful references, but exact version/redistribution rights/variant matching must be admitted. Public PDFs do not automatically qualify an entire derived catalog. Manual battery/connector/consumption input keeps the core journey independent. PBE.
• SRTM/USGS elevation: candidate for later terrain refinement only after exact product/public-use terms and data compatibility are recorded; not a substitute for measured consumption. Source.
• OCPI: an open specification for authorized operator exchange, not an open feed. New non-open operator datasets are outside this open-only release. A later provider must explicitly offer rights compatible with this policy; no account/contact/payment/credential creation now. Specification.
• Photon/other geocoders: not needed if the native offline search covers requirements. Evaluate only if a proven gap remains; no unnecessary second search stack. Photon.

Explicitly not required/admitted by this plan

No required Google Maps/Places, proprietary Mapbox service, scraped PlugShare/operator maps, commercial-only dynamic feed, upstream review/photo database or unspecified SDK. OpenStreetMap's standard tile server forbids offline bulk/prefetch and is not a free production SLA. Public Nominatim is limited to an aggregate maximum of one request per second and forbids autocomplete/systematic queries. Do not build the product on those public endpoints. Tile policy, Nominatim policy.

Open-Meteo's free hosted API permits noncommercial use only; apps with subscriptions/advertising are commercial examples. This release does not use that endpoint. A future self-hosted open stack needs a separate code/data/deployment license review, not a URL switch. Terms.

MapLibre, OpenFreeMap and PMTiles can be legitimate open alternatives, but are not the chosen native format/renderer in this CoMaps-derived plan. Do not add both engines or feed MWM packages into MapLibre. Reconsider only with an evidence-backed revised architecture decision.

Source admission record template

For every source/artifact record:

1. Stable source/provider ID, purpose, required/optional status and exact URL/revision.
2. Code license and all shipped transitive licenses; separate data/artwork license.
3. Evidence URL/date and retained terms/license bytes/hash.
4. Commercial use, copying, modification, offline caching, redistribution and derivative-database obligations.
5. Source/raw bytes SHA-256 and parser/profile/rights version.
6. Data fields retained/excluded, public/private treatment and attribution text.
7. Update/expiry/revocation/deletion behavior and coverage limits.
8. Security/resource constraints, test fixtures and permitted acquisition method.
9. Decision ADMITTED/REJECTED/PENDING with concrete reason and task evidence.

A successful parse, a public URL, a green CI check or physical table separation never substitutes for this decision. Admit only the minimal necessary regional subset; no completeness claim about all Brazilian stations or live availability.