feat: coverage V2 - historical evidence miner, KB evidence model + promotion audit + revalidation, Kodebar/OSCBR limits, KB/provider panel, seed import; 1.3.2 (Hub only)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

central/app/datasets/updater.py

@@ -46,6 +46,12 @@ def refresh_ncm(session, fetch=_fetch, url: str | None = None) -> SourceRefreshR
                 raise ValueError(f"implausible record count {len(parsed.entries)} vs active {active.record_count}")
             DatasetService(session).import_payload(parsed, url, datetime.now(timezone.utc))      # atomic: one transaction, old ACTIVE superseded only at the end
             run.status = "UPDATED"
+            try:                                                                    # the KB is never deleted: only flagged STALE_REVIEW_REQUIRED when its NCM left the official dataset
+                from ..enrichment import history, kb
+                current = history.official_sets(session)
+                run.error = f"kb_revalidated: {kb.revalidate(session, lambda v: v in current)}"[:300]
+            except Exception as error:  # noqa: BLE001 - revalidation trouble must not undo a valid dataset promotion
+                run.error = f"kb_revalidate_failed: {type(error).__name__}"[:300]
     except Exception as error:                                                     # keep the last valid dataset
         session.rollback()
         run = session.get(SourceRefreshRun, run.id)