[AZ-1074] [AZ-1075] gRPC tile stream tests and shared proto

Extract tile_provision.proto into GrpcContracts, add integration
tests and validation hardening for DeliverRouteTiles streaming.

Co-authored-by: Cursor <cursoragent@cursor.com>

SatelliteProvider.Api/Dockerfile

@@ -6,6 +6,7 @@ EXPOSE 8081
 FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
 WORKDIR /src
 COPY ["SatelliteProvider.Api/SatelliteProvider.Api.csproj", "SatelliteProvider.Api/"]
+COPY ["SatelliteProvider.GrpcContracts/SatelliteProvider.GrpcContracts.csproj", "SatelliteProvider.GrpcContracts/"]
 COPY ["SatelliteProvider.Common/SatelliteProvider.Common.csproj", "SatelliteProvider.Common/"]
 COPY ["SatelliteProvider.DataAccess/SatelliteProvider.DataAccess.csproj", "SatelliteProvider.DataAccess/"]
 COPY ["SatelliteProvider.Services.TileDownloader/SatelliteProvider.Services.TileDownloader.csproj", "SatelliteProvider.Services.TileDownloader/"]

SatelliteProvider.Api/Grpc/RouteTileDeliveryGrpcService.cs

@@ -27,14 +27,12 @@ public sealed class RouteTileDeliveryGrpcService : RouteTileDelivery.RouteTileDe
     {
         if (request.Route is null)
         {
-            await WriteErrorAsync(responseStream, "INVALID_REQUEST", "route is required", retryable: false, context.CancellationToken);
+            throw new RpcException(new Status(StatusCode.InvalidArgument, "route is required"));
-            return;
         }
 
         if (!Guid.TryParse(request.Route.RouteId, out var routeId))
         {
-            await WriteErrorAsync(responseStream, "INVALID_REQUEST", "route_id must be a UUID", retryable: false, context.CancellationToken);
+            throw new RpcException(new Status(StatusCode.InvalidArgument, "route_id must be a UUID"));
-            return;
         }
 
         var job = MapJob(request, routeId);
@@ -47,7 +45,7 @@ public sealed class RouteTileDeliveryGrpcService : RouteTileDelivery.RouteTileDe
         catch (ArgumentException ex)
         {
             _logger.LogWarning(ex, "Invalid route tile delivery request for route {RouteId}", routeId);
-            await WriteErrorAsync(responseStream, "INVALID_REQUEST", ex.Message, retryable: false, context.CancellationToken);
+            throw new RpcException(new Status(StatusCode.InvalidArgument, ex.Message));
         }
         catch (OperationCanceledException) when (context.CancellationToken.IsCancellationRequested)
         {

SatelliteProvider.Api/SatelliteProvider.Api.csproj

@@ -20,6 +20,7 @@
     </ItemGroup>
 
     <ItemGroup>
+      <ProjectReference Include="..\SatelliteProvider.GrpcContracts\SatelliteProvider.GrpcContracts.csproj" />
       <ProjectReference Include="..\SatelliteProvider.Common\SatelliteProvider.Common.csproj" />
       <ProjectReference Include="..\SatelliteProvider.DataAccess\SatelliteProvider.DataAccess.csproj" />
       <ProjectReference Include="..\SatelliteProvider.Services.TileDownloader\SatelliteProvider.Services.TileDownloader.csproj" />
@@ -27,8 +28,4 @@
       <ProjectReference Include="..\SatelliteProvider.Services.RouteManagement\SatelliteProvider.Services.RouteManagement.csproj" />
     </ItemGroup>
 
-    <ItemGroup>
-      <Protobuf Include="Protos\tile_provision.proto" GrpcServices="Server" />
-    </ItemGroup>
-
 </Project>

SatelliteProvider.GrpcContracts/SatelliteProvider.GrpcContracts.csproj

@@ -0,0 +1,23 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Google.Protobuf" Version="3.31.1" />
+    <PackageReference Include="Grpc.AspNetCore" Version="2.71.0" />
+    <PackageReference Include="Grpc.Net.Client" Version="2.71.0" />
+    <PackageReference Include="Grpc.Tools" Version="2.71.0">
+      <PrivateAssets>all</PrivateAssets>
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+    </PackageReference>
+  </ItemGroup>
+
+  <ItemGroup>
+    <Protobuf Include="tile_provision.proto" GrpcServices="Both" />
+  </ItemGroup>
+
+</Project>

SatelliteProvider.IntegrationTests/Dockerfile

@@ -1,7 +1,9 @@
-FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+FROM --platform=linux/amd64 mcr.microsoft.com/dotnet/sdk:10.0 AS build
 WORKDIR /src
 COPY ["SatelliteProvider.IntegrationTests/SatelliteProvider.IntegrationTests.csproj", "SatelliteProvider.IntegrationTests/"]
+COPY ["SatelliteProvider.GrpcContracts/SatelliteProvider.GrpcContracts.csproj", "SatelliteProvider.GrpcContracts/"]
 COPY ["SatelliteProvider.TestSupport/SatelliteProvider.TestSupport.csproj", "SatelliteProvider.TestSupport/"]
+COPY ["SatelliteProvider.Common/SatelliteProvider.Common.csproj", "SatelliteProvider.Common/"]
 RUN dotnet restore "SatelliteProvider.IntegrationTests/SatelliteProvider.IntegrationTests.csproj"
 COPY . .
 WORKDIR "/src/SatelliteProvider.IntegrationTests"
@@ -10,7 +12,7 @@ RUN dotnet build "SatelliteProvider.IntegrationTests.csproj" -c Release -o /app/
 FROM build AS publish
 RUN dotnet publish "SatelliteProvider.IntegrationTests.csproj" -c Release -o /app/publish /p:UseAppHost=false
 
-FROM mcr.microsoft.com/dotnet/runtime:10.0 AS final
+FROM --platform=linux/amd64 mcr.microsoft.com/dotnet/aspnet:10.0 AS final
 WORKDIR /app
 COPY --from=publish /app/publish .
 ENTRYPOINT ["dotnet", "SatelliteProvider.IntegrationTests.dll"]

SatelliteProvider.IntegrationTests/GrpcTestHelpers.cs

@@ -0,0 +1,108 @@
+using Grpc.Core;
+using Grpc.Net.Client;
+using Satellite.V1;
+
+namespace SatelliteProvider.IntegrationTests;
+
+public static class GrpcTestHelpers
+{
+    public static GrpcChannel CreateChannel(string apiUrl)
+    {
+        return GrpcChannel.ForAddress(apiUrl, new GrpcChannelOptions
+        {
+            HttpHandler = new SocketsHttpHandler
+            {
+                EnableMultipleHttp2Connections = true,
+            },
+        });
+    }
+
+    public static RouteTileDelivery.RouteTileDeliveryClient CreateClient(string apiUrl, string jwtToken)
+    {
+        var channel = CreateChannel(apiUrl);
+        var client = new RouteTileDelivery.RouteTileDeliveryClient(channel);
+        return client;
+    }
+
+    public static Metadata AuthMetadata(string jwtToken)
+    {
+        return new Metadata { { "Authorization", $"Bearer {jwtToken}" } };
+    }
+
+    public static DeliverRouteTilesRequest BuildValidRequest(
+        Guid? routeId = null,
+        double lat1 = 48.276067180586544,
+        double lon1 = 37.38445758819581,
+        double lat2 = 48.27074009522731,
+        double lon2 = 37.374029159545906,
+        double regionSizeMeters = 500,
+        int zoom = 18)
+    {
+        return new DeliverRouteTilesRequest
+        {
+            Route = new RouteSpec
+            {
+                RouteId = (routeId ?? Guid.NewGuid()).ToString(),
+                RegionSizeMeters = regionSizeMeters,
+                Zoom = zoom,
+                Waypoints =
+                {
+                    new Waypoint { Lat = lat1, Lon = lon1 },
+                    new Waypoint { Lat = lat2, Lon = lon2 },
+                },
+            },
+        };
+    }
+
+    public static async Task<(RouteManifest? Manifest, List<TilePayload> Tiles, DeliveryComplete? Complete, DeliveryError? Error)>
+        CollectStreamAsync(AsyncServerStreamingCall<RouteTileEvent> call, int? delayMsBetweenEvents = null)
+    {
+        RouteManifest? manifest = null;
+        var tiles = new List<TilePayload>();
+        DeliveryComplete? complete = null;
+        DeliveryError? error = null;
+
+        await foreach (var evt in call.ResponseStream.ReadAllAsync())
+        {
+            switch (evt.PayloadCase)
+            {
+                case RouteTileEvent.PayloadOneofCase.Manifest:
+                    manifest = evt.Manifest;
+                    break;
+                case RouteTileEvent.PayloadOneofCase.Batch:
+                    tiles.AddRange(evt.Batch.Tiles);
+                    break;
+                case RouteTileEvent.PayloadOneofCase.Complete:
+                    complete = evt.Complete;
+                    break;
+                case RouteTileEvent.PayloadOneofCase.Error:
+                    error = evt.Error;
+                    break;
+            }
+
+            if (delayMsBetweenEvents.HasValue)
+            {
+                await Task.Delay(delayMsBetweenEvents.Value);
+            }
+        }
+
+        return (manifest, tiles, complete, error);
+    }
+
+    public static async Task ExpectInvalidArgumentAsync(Func<Task> action, string context)
+    {
+        try
+        {
+            await action();
+            throw new Exception($"{context}: expected RpcException with InvalidArgument, but call succeeded");
+        }
+        catch (RpcException ex) when (ex.StatusCode == StatusCode.InvalidArgument)
+        {
+            Console.WriteLine($"  ✓ {context}: InvalidArgument — {ex.Status.Detail}");
+        }
+        catch (RpcException ex)
+        {
+            throw new Exception($"{context}: expected InvalidArgument, got {ex.StatusCode} — {ex.Status.Detail}");
+        }
+    }
+}

SatelliteProvider.IntegrationTests/Program.cs

@@ -108,11 +108,11 @@ class Program
 
             if (TestRunMode.Smoke)
             {
-                await RunSmokeSuite(httpClient, connectionString);
+                await RunSmokeSuite(httpClient, connectionString, apiUrl, jwtSecret);
             }
             else
             {
-                await RunFullSuite(httpClient, connectionString);
+                await RunFullSuite(httpClient, connectionString, apiUrl, jwtSecret);
             }
 
             Console.WriteLine();
@@ -130,7 +130,7 @@ class Program
         }
     }
 
-    static async Task RunSmokeSuite(HttpClient httpClient, string connectionString)
+    static async Task RunSmokeSuite(HttpClient httpClient, string connectionString, string apiUrl, string jwtSecret)
     {
         await TileTests.RunGetTileByLatLonTest(httpClient);
         await RegionTests.RunRegionProcessingTest_200m_Zoom18(httpClient);
@@ -145,11 +145,12 @@ class Program
         await RegionRequestValidationTests.RunAll(httpClient);
         await GetTileByLatLonValidationTests.RunAll(httpClient);
         await CreateRouteValidationTests.RunAll(httpClient);
+        await RouteTileDeliveryGrpcTests.RunAll(httpClient, apiUrl, jwtSecret);
         await LeafletPathIndexOnlyTests.RunAll(connectionString);
         await MigrationTests.RunAll();
     }
 
-    static async Task RunFullSuite(HttpClient httpClient, string connectionString)
+    static async Task RunFullSuite(HttpClient httpClient, string connectionString, string apiUrl, string jwtSecret)
     {
         await TileTests.RunGetTileByLatLonTest(httpClient);
 
@@ -173,6 +174,7 @@ class Program
         await RegionRequestValidationTests.RunAll(httpClient);
         await GetTileByLatLonValidationTests.RunAll(httpClient);
         await CreateRouteValidationTests.RunAll(httpClient);
+        await RouteTileDeliveryGrpcTests.RunAll(httpClient, apiUrl, jwtSecret);
         await LeafletPathIndexOnlyTests.RunAll(connectionString);
         await MigrationTests.RunAll();
     }

SatelliteProvider.IntegrationTests/RouteTileDeliveryGrpcTests.cs

@@ -0,0 +1,215 @@
+using System.Security.Cryptography;
+using Grpc.Core;
+using Satellite.V1;
+using SatelliteProvider.Common.DTO;
+using SatelliteProvider.Common.Utils;
+
+namespace SatelliteProvider.IntegrationTests;
+
+public static class RouteTileDeliveryGrpcTests
+{
+    private const double Lat1 = 48.276067180586544;
+    private const double Lon1 = 37.38445758819581;
+    private const double Lat2 = 48.27074009522731;
+    private const double Lon2 = 37.374029159545906;
+    private const double RegionSizeMeters = 500;
+    private const int Zoom = 18;
+
+    public static async Task RunAll(HttpClient httpClient, string apiUrl, string secret)
+    {
+        RouteTestHelpers.PrintTestHeader("Test: gRPC RouteTileDelivery (AZ-1074 / AZ-1075)");
+
+        var token = JwtTestHelpers.MintAuthenticated(secret);
+        var client = GrpcTestHelpers.CreateClient(apiUrl, token);
+        var headers = GrpcTestHelpers.AuthMetadata(token);
+
+        await RunHappyPath(client, headers);
+        await RunInvalidRequests(client, headers);
+        await RunBackpressureSafe(client, headers);
+        await RunRestConsistency(httpClient, client, headers);
+    }
+
+    private static async Task RunHappyPath(RouteTileDelivery.RouteTileDeliveryClient client, Metadata headers)
+    {
+        RouteTestHelpers.PrintSectionHeader("AC-1: Happy path streams tiles");
+
+        var request = GrpcTestHelpers.BuildValidRequest(
+            lat1: Lat1, lon1: Lon1, lat2: Lat2, lon2: Lon2,
+            regionSizeMeters: RegionSizeMeters, zoom: Zoom);
+
+        using var call = client.DeliverRouteTiles(request, headers);
+        var (manifest, tiles, complete, error) = await GrpcTestHelpers.CollectStreamAsync(call);
+
+        if (error is not null)
+        {
+            throw new Exception($"Happy path returned DeliveryError: {error.Code} — {error.Message}");
+        }
+
+        if (manifest is null)
+        {
+            throw new Exception("Happy path did not emit RouteManifest");
+        }
+
+        if (tiles.Count == 0 && manifest.ToDeliver > 0)
+        {
+            throw new Exception($"Expected tiles in stream (to_deliver={manifest.ToDeliver})");
+        }
+
+        if (complete is null)
+        {
+            throw new Exception("Happy path did not emit DeliveryComplete");
+        }
+
+        Console.WriteLine($"  ✓ Manifest: candidates={manifest.TotalCandidates}, to_deliver={manifest.ToDeliver}");
+        Console.WriteLine($"  ✓ Received {tiles.Count} tile(s), complete.delivered={complete.Delivered}");
+        Console.WriteLine();
+    }
+
+    private static async Task RunInvalidRequests(RouteTileDelivery.RouteTileDeliveryClient client, Metadata headers)
+    {
+        RouteTestHelpers.PrintSectionHeader("AC-2/AC-3: Invalid requests return InvalidArgument");
+
+        var emptyRoute = GrpcTestHelpers.BuildValidRequest();
+        emptyRoute.Route!.Waypoints.Clear();
+        emptyRoute.Route.Waypoints.Add(new Waypoint { Lat = Lat1, Lon = Lon1 });
+
+        await GrpcTestHelpers.ExpectInvalidArgumentAsync(async () =>
+        {
+            using var call = client.DeliverRouteTiles(emptyRoute, headers);
+            await GrpcTestHelpers.CollectStreamAsync(call);
+        }, "Single waypoint route");
+
+        var invalidCoord = GrpcTestHelpers.BuildValidRequest();
+        invalidCoord.Route!.Waypoints[0] = new Waypoint { Lat = 91.0, Lon = Lon1 };
+
+        await GrpcTestHelpers.ExpectInvalidArgumentAsync(async () =>
+        {
+            using var call = client.DeliverRouteTiles(invalidCoord, headers);
+            await GrpcTestHelpers.CollectStreamAsync(call);
+        }, "Latitude out of range");
+
+        var invalidZoom = GrpcTestHelpers.BuildValidRequest(zoom: 99);
+
+        await GrpcTestHelpers.ExpectInvalidArgumentAsync(async () =>
+        {
+            using var call = client.DeliverRouteTiles(invalidZoom, headers);
+            await GrpcTestHelpers.CollectStreamAsync(call);
+        }, "Zoom out of allowed range");
+
+        Console.WriteLine();
+    }
+
+    private static async Task RunBackpressureSafe(RouteTileDelivery.RouteTileDeliveryClient client, Metadata headers)
+    {
+        RouteTestHelpers.PrintSectionHeader("AC-4: Backpressure safe — slow consumer preserves JPEG integrity");
+
+        var request = GrpcTestHelpers.BuildValidRequest(
+            lat1: Lat1, lon1: Lon1, lat2: Lat2, lon2: Lon2,
+            regionSizeMeters: RegionSizeMeters, zoom: Zoom);
+
+        using var call = client.DeliverRouteTiles(request, headers);
+        var (_, tiles, _, error) = await GrpcTestHelpers.CollectStreamAsync(call, delayMsBetweenEvents: 50);
+
+        if (error is not null)
+        {
+            throw new Exception($"Backpressure test returned DeliveryError: {error.Code}");
+        }
+
+        foreach (var tile in tiles)
+        {
+            if (tile.Jpeg.Length < 2 || tile.Jpeg[0] != 0xFF || tile.Jpeg[1] != 0xD8)
+            {
+                throw new Exception($"Tile ({tile.Z},{tile.X},{tile.Y}) JPEG header invalid after slow read");
+            }
+
+            if (tile.ContentSha256.Length == 32)
+            {
+                var computed = SHA256.HashData(tile.Jpeg.ToByteArray());
+                if (!computed.AsSpan().SequenceEqual(tile.ContentSha256.Span))
+                {
+                    throw new Exception($"Tile ({tile.Z},{tile.X},{tile.Y}) content_sha256 mismatch after slow read");
+                }
+            }
+        }
+
+        Console.WriteLine($"  ✓ Verified {tiles.Count} tile(s) with intact JPEG + SHA256 under slow consumption");
+        Console.WriteLine();
+    }
+
+    private static async Task RunRestConsistency(
+        HttpClient httpClient,
+        RouteTileDelivery.RouteTileDeliveryClient grpcClient,
+        Metadata headers)
+    {
+        RouteTestHelpers.PrintSectionHeader("AC-3 (AZ-1075): REST and gRPC tile metadata consistency");
+
+        var routeId = Guid.NewGuid();
+        var restRequest = new CreateRouteRequest
+        {
+            Id = routeId,
+            Name = "gRPC consistency probe",
+            RegionSizeMeters = RegionSizeMeters,
+            ZoomLevel = Zoom,
+            RequestMaps = true,
+            Points =
+            [
+                new RoutePointInput { Lat = Lat1, Lon = Lon1 },
+                new RoutePointInput { Lat = Lat2, Lon = Lon2 },
+            ],
+        };
+
+        await RouteTestHelpers.CreateRoute(httpClient, restRequest);
+        var restRoute = await RouteTestHelpers.WaitForRouteReady(httpClient, routeId, maxAttempts: 120);
+
+        if (string.IsNullOrEmpty(restRoute.CsvFilePath) || !File.Exists(restRoute.CsvFilePath))
+        {
+            throw new Exception("REST route CSV not available for consistency check");
+        }
+
+        var csvLines = await File.ReadAllLinesAsync(restRoute.CsvFilePath);
+        var restTileKeys = new HashSet<(int Z, int X, int Y)>();
+        foreach (var line in csvLines.Skip(1))
+        {
+            var parts = line.Split(',');
+            if (parts.Length < 2
+                || !double.TryParse(parts[0], out var lat)
+                || !double.TryParse(parts[1], out var lon))
+            {
+                continue;
+            }
+
+            var (x, y) = GeoUtils.WorldToTilePos(new GeoPoint(lat, lon), Zoom);
+            restTileKeys.Add((Zoom, x, y));
+        }
+
+        var grpcRequest = GrpcTestHelpers.BuildValidRequest(
+            routeId: Guid.NewGuid(),
+            lat1: Lat1, lon1: Lon1, lat2: Lat2, lon2: Lon2,
+            regionSizeMeters: RegionSizeMeters, zoom: Zoom);
+
+        using var call = grpcClient.DeliverRouteTiles(grpcRequest, headers);
+        var (_, grpcTiles, _, error) = await GrpcTestHelpers.CollectStreamAsync(call);
+
+        if (error is not null)
+        {
+            throw new Exception($"gRPC consistency run failed: {error.Code} — {error.Message}");
+        }
+
+        var grpcKeys = grpcTiles.Select(t => (t.Z, t.X, t.Y)).ToHashSet();
+        var overlap = grpcKeys.Intersect(restTileKeys).Count();
+
+        if (grpcKeys.Count == 0)
+        {
+            throw new Exception("gRPC stream delivered no tiles for consistency comparison");
+        }
+
+        if (overlap == 0)
+        {
+            throw new Exception(
+                $"No overlapping tile keys between REST CSV ({restTileKeys.Count}) and gRPC stream ({grpcKeys.Count})");
+        }
+
+        Console.WriteLine($"  ✓ REST CSV tiles: {restTileKeys.Count}, gRPC tiles: {grpcKeys.Count}, overlap: {overlap}");
+        Console.WriteLine();
+    }
+}

SatelliteProvider.IntegrationTests/SatelliteProvider.IntegrationTests.csproj

@@ -8,15 +8,14 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Grpc.Net.Client" Version="2.71.0" />
     <PackageReference Include="Npgsql" Version="9.0.2" />
     <PackageReference Include="SixLabors.ImageSharp" Version="3.1.11" />
   </ItemGroup>
 
   <ItemGroup>
+    <ProjectReference Include="..\SatelliteProvider.GrpcContracts\SatelliteProvider.GrpcContracts.csproj" />
     <ProjectReference Include="..\SatelliteProvider.TestSupport\SatelliteProvider.TestSupport.csproj" />
-    <!-- AZ-503: integration tests need Uuidv5 + TileNamespace so raw SQL seeds
-         can populate tiles.location_hash (NOT NULL after migration 014) using
-         the same algorithm the application uses for new writes. -->
     <ProjectReference Include="..\SatelliteProvider.Common\SatelliteProvider.Common.csproj" />
   </ItemGroup>
 

SatelliteProvider.Services.RouteManagement/TileProvision/RouteTileDeliveryOrchestrator.cs

@@ -226,6 +226,24 @@ public sealed class RouteTileDeliveryOrchestrator
             throw new ArgumentException("Route must have at least 2 waypoints", nameof(job));
         }
 
+        for (var i = 0; i < job.Waypoints.Count; i++)
+        {
+            var (lat, lon) = job.Waypoints[i];
+            if (lat is < -90.0 or > 90.0)
+            {
+                throw new ArgumentException(
+                    $"waypoints[{i}].lat must be between -90 and 90",
+                    nameof(job));
+            }
+
+            if (lon is < -180.0 or > 180.0)
+            {
+                throw new ArgumentException(
+                    $"waypoints[{i}].lon must be between -180 and 180",
+                    nameof(job));
+            }
+        }
+
         if (job.RegionSizeMeters <= 0)
         {
             throw new ArgumentOutOfRangeException(nameof(job), "region_size_meters must be positive");

SatelliteProvider.Tests/RouteTileDeliveryOrchestratorTests.cs

@@ -15,6 +15,28 @@ namespace SatelliteProvider.Tests;
 
 public class RouteTileDeliveryOrchestratorTests
 {
+    [Fact]
+    public async Task DeliverAsync_InvalidLatitude_Throws()
+    {
+        var expander = new RouteTileExpander(
+            new RoutePointGraphBuilder(Options.Create(new ProcessingConfig { MaxRoutePointSpacingMeters = 200 })),
+            new GeofenceGridCalculator());
+        var orchestrator = CreateOrchestrator(expander, Mock.Of<ITileRepository>(), Mock.Of<ITileService>());
+        var job = new RouteTileDeliveryJob(
+            Guid.NewGuid(),
+            [(91.0, 37.0), (47.0, 37.0)],
+            400,
+            18,
+            [],
+            false,
+            []);
+
+        var act = () => orchestrator.DeliverAsync(job, new RecordingSink(), CancellationToken.None);
+
+        await act.Should().ThrowAsync<ArgumentException>()
+            .WithMessage("*lat must be between -90 and 90*");
+    }
+
     [Fact]
     public async Task DeliverAsync_AllTilesSkippedByClient_EmitsManifestAndCompleteWithZeroDelivered()
     {
@@ -160,6 +182,21 @@ public class RouteTileDeliveryOrchestratorTests
         }
     }
 
+    private static RouteTileDeliveryOrchestrator CreateOrchestrator(
+        RouteTileExpander expander,
+        ITileRepository tileRepo,
+        ITileService tileService)
+    {
+        return new RouteTileDeliveryOrchestrator(
+            expander,
+            tileRepo,
+            tileService,
+            Options.Create(new MapConfig { TileSizePixels = 256, AllowedZoomLevels = [18] }),
+            Options.Create(new ProcessingConfig { MaxConcurrentDownloads = 2 }),
+            Options.Create(new TileProvisionConfig { MaxTilesPerBatch = 100 }),
+            NullLogger<RouteTileDeliveryOrchestrator>.Instance);
+    }
+
     private sealed class RecordingSink : IRouteTileDeliverySink
     {
         public (uint Total, uint Skipped, uint ToDeliver)? Manifest { get; private set; }

SatelliteProvider.sln

@@ -1,6 +1,5 @@
 
 Microsoft Visual Studio Solution File, Format Version 12.00
-# 
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SatelliteProvider.Api", "SatelliteProvider.Api\SatelliteProvider.Api.csproj", "{35C6FC8B-92D8-4D8D-BE36-D6B181715019}"
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SatelliteProvider.Common", "SatelliteProvider.Common\SatelliteProvider.Common.csproj", "{5499248E-F025-4091-9103-6AA02C6CB613}"
@@ -19,47 +18,140 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SatelliteProvider.Integrati
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SatelliteProvider.TestSupport", "SatelliteProvider.TestSupport\SatelliteProvider.TestSupport.csproj", "{C7E1A491-4914-4914-9914-491491491491}"
 EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "SatelliteProvider.GrpcContracts", "SatelliteProvider.GrpcContracts\SatelliteProvider.GrpcContracts.csproj", "{3C0E85F3-BE1D-47C2-A954-E3535283F308}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
 		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
 	EndGlobalSection
 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
 		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Debug|x64.Build.0 = Debug|Any CPU
+		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Debug|x86.Build.0 = Debug|Any CPU
 		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Release|Any CPU.Build.0 = Release|Any CPU
+		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Release|x64.ActiveCfg = Release|Any CPU
+		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Release|x64.Build.0 = Release|Any CPU
+		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Release|x86.ActiveCfg = Release|Any CPU
+		{35C6FC8B-92D8-4D8D-BE36-D6B181715019}.Release|x86.Build.0 = Release|Any CPU
 		{5499248E-F025-4091-9103-6AA02C6CB613}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{5499248E-F025-4091-9103-6AA02C6CB613}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{5499248E-F025-4091-9103-6AA02C6CB613}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{5499248E-F025-4091-9103-6AA02C6CB613}.Debug|x64.Build.0 = Debug|Any CPU
+		{5499248E-F025-4091-9103-6AA02C6CB613}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{5499248E-F025-4091-9103-6AA02C6CB613}.Debug|x86.Build.0 = Debug|Any CPU
 		{5499248E-F025-4091-9103-6AA02C6CB613}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{5499248E-F025-4091-9103-6AA02C6CB613}.Release|Any CPU.Build.0 = Release|Any CPU
+		{5499248E-F025-4091-9103-6AA02C6CB613}.Release|x64.ActiveCfg = Release|Any CPU
+		{5499248E-F025-4091-9103-6AA02C6CB613}.Release|x64.Build.0 = Release|Any CPU
+		{5499248E-F025-4091-9103-6AA02C6CB613}.Release|x86.ActiveCfg = Release|Any CPU
+		{5499248E-F025-4091-9103-6AA02C6CB613}.Release|x86.Build.0 = Release|Any CPU
 		{B7E1A001-1111-4111-9111-111111111111}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{B7E1A001-1111-4111-9111-111111111111}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{B7E1A001-1111-4111-9111-111111111111}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{B7E1A001-1111-4111-9111-111111111111}.Debug|x64.Build.0 = Debug|Any CPU
+		{B7E1A001-1111-4111-9111-111111111111}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{B7E1A001-1111-4111-9111-111111111111}.Debug|x86.Build.0 = Debug|Any CPU
 		{B7E1A001-1111-4111-9111-111111111111}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{B7E1A001-1111-4111-9111-111111111111}.Release|Any CPU.Build.0 = Release|Any CPU
+		{B7E1A001-1111-4111-9111-111111111111}.Release|x64.ActiveCfg = Release|Any CPU
+		{B7E1A001-1111-4111-9111-111111111111}.Release|x64.Build.0 = Release|Any CPU
+		{B7E1A001-1111-4111-9111-111111111111}.Release|x86.ActiveCfg = Release|Any CPU
+		{B7E1A001-1111-4111-9111-111111111111}.Release|x86.Build.0 = Release|Any CPU
 		{B7E1A002-2222-4222-9222-222222222222}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{B7E1A002-2222-4222-9222-222222222222}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{B7E1A002-2222-4222-9222-222222222222}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{B7E1A002-2222-4222-9222-222222222222}.Debug|x64.Build.0 = Debug|Any CPU
+		{B7E1A002-2222-4222-9222-222222222222}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{B7E1A002-2222-4222-9222-222222222222}.Debug|x86.Build.0 = Debug|Any CPU
 		{B7E1A002-2222-4222-9222-222222222222}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{B7E1A002-2222-4222-9222-222222222222}.Release|Any CPU.Build.0 = Release|Any CPU
+		{B7E1A002-2222-4222-9222-222222222222}.Release|x64.ActiveCfg = Release|Any CPU
+		{B7E1A002-2222-4222-9222-222222222222}.Release|x64.Build.0 = Release|Any CPU
+		{B7E1A002-2222-4222-9222-222222222222}.Release|x86.ActiveCfg = Release|Any CPU
+		{B7E1A002-2222-4222-9222-222222222222}.Release|x86.Build.0 = Release|Any CPU
 		{B7E1A003-3333-4333-9333-333333333333}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{B7E1A003-3333-4333-9333-333333333333}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{B7E1A003-3333-4333-9333-333333333333}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{B7E1A003-3333-4333-9333-333333333333}.Debug|x64.Build.0 = Debug|Any CPU
+		{B7E1A003-3333-4333-9333-333333333333}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{B7E1A003-3333-4333-9333-333333333333}.Debug|x86.Build.0 = Debug|Any CPU
 		{B7E1A003-3333-4333-9333-333333333333}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{B7E1A003-3333-4333-9333-333333333333}.Release|Any CPU.Build.0 = Release|Any CPU
+		{B7E1A003-3333-4333-9333-333333333333}.Release|x64.ActiveCfg = Release|Any CPU
+		{B7E1A003-3333-4333-9333-333333333333}.Release|x64.Build.0 = Release|Any CPU
+		{B7E1A003-3333-4333-9333-333333333333}.Release|x86.ActiveCfg = Release|Any CPU
+		{B7E1A003-3333-4333-9333-333333333333}.Release|x86.Build.0 = Release|Any CPU
 		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Debug|x64.Build.0 = Debug|Any CPU
+		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Debug|x86.Build.0 = Debug|Any CPU
 		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Release|Any CPU.Build.0 = Release|Any CPU
+		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Release|x64.ActiveCfg = Release|Any CPU
+		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Release|x64.Build.0 = Release|Any CPU
+		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Release|x86.ActiveCfg = Release|Any CPU
+		{A44A2E49-9270-4938-9D34-A31CE63E636C}.Release|x86.Build.0 = Release|Any CPU
 		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Debug|x64.Build.0 = Debug|Any CPU
+		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Debug|x86.Build.0 = Debug|Any CPU
 		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Release|Any CPU.Build.0 = Release|Any CPU
+		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Release|x64.ActiveCfg = Release|Any CPU
+		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Release|x64.Build.0 = Release|Any CPU
+		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Release|x86.ActiveCfg = Release|Any CPU
+		{8709915B-313D-4CFA-9E0D-0B312F3EA5C8}.Release|x86.Build.0 = Release|Any CPU
 		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Debug|x64.Build.0 = Debug|Any CPU
+		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Debug|x86.Build.0 = Debug|Any CPU
 		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Release|Any CPU.Build.0 = Release|Any CPU
+		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Release|x64.ActiveCfg = Release|Any CPU
+		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Release|x64.Build.0 = Release|Any CPU
+		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Release|x86.ActiveCfg = Release|Any CPU
+		{938FC7B2-759F-4B8F-90A3-21F8AD15BB1F}.Release|x86.Build.0 = Release|Any CPU
 		{C7E1A491-4914-4914-9914-491491491491}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{C7E1A491-4914-4914-9914-491491491491}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{C7E1A491-4914-4914-9914-491491491491}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{C7E1A491-4914-4914-9914-491491491491}.Debug|x64.Build.0 = Debug|Any CPU
+		{C7E1A491-4914-4914-9914-491491491491}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{C7E1A491-4914-4914-9914-491491491491}.Debug|x86.Build.0 = Debug|Any CPU
 		{C7E1A491-4914-4914-9914-491491491491}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{C7E1A491-4914-4914-9914-491491491491}.Release|Any CPU.Build.0 = Release|Any CPU
+		{C7E1A491-4914-4914-9914-491491491491}.Release|x64.ActiveCfg = Release|Any CPU
+		{C7E1A491-4914-4914-9914-491491491491}.Release|x64.Build.0 = Release|Any CPU
+		{C7E1A491-4914-4914-9914-491491491491}.Release|x86.ActiveCfg = Release|Any CPU
+		{C7E1A491-4914-4914-9914-491491491491}.Release|x86.Build.0 = Release|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Debug|x64.Build.0 = Debug|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Debug|x86.Build.0 = Debug|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Release|Any CPU.Build.0 = Release|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Release|x64.ActiveCfg = Release|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Release|x64.Build.0 = Release|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Release|x86.ActiveCfg = Release|Any CPU
+		{3C0E85F3-BE1D-47C2-A954-E3535283F308}.Release|x86.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
 	EndGlobalSection
 EndGlobal

_docs/02_tasks/_dependencies_table.md

@@ -236,6 +236,15 @@ Parent-suite team may reorder steps 2–5 based on consumer priorities; step 1 (
 
 Originally tracked as a separate cycle 8b because AZ-812 is a wire-format rename (mirror of AZ-794) rather than a validator add (mirror of AZ-796). After the /autodev Step 10 ordering decision above, cycle 8b folds into cycle 8 as step 1 of the execution order. Section retained for traceability — the cycle-8b table entry remains the authoritative spec marker for AZ-812.
 
+### Step 9 cycle 9 (gRPC TileStream — AZ-1074 / AZ-1075)
+
+| Task | Depends On | Points | Status |
+|------|-----------|--------|--------|
+| AZ-1074 gRPC TileStream Service | — | 5 | Todo |
+| AZ-1075 gRPC TileStream Integration Tests | AZ-1074 | 3 | Todo |
+
+Execution order: AZ-1074 first (service + proto + unit/happy-path integration), then AZ-1075 (full blackbox suite). Origin: gps-denied-onboard consumer needs progressive tile delivery (blocks AZ-1076).
+
 ## Total Effort
 
 Step 6: 6 tasks, 17 story points
@@ -250,6 +259,7 @@ Step 9 cycle 6: 1 task scheduled (AZ-505 = 3 pts) — consumed from cycle-5 defe
 Step 9 cycle 7: 3 tasks adopted (AZ-794 = 3 pts rename, AZ-795 = epic with 5–8 pts shared-infra ship, AZ-796 = 3 pts first per-endpoint child) — total ~11–14 pts (over the 2–5 pts/cycle preference; AZ-795's shared-infra ship is the heavy item). Origin: gps-denied-onboard AZ-777 Phase 1 Jetson probe (2026-05-22). Sibling per-endpoint child tasks under AZ-795 to be added in future cycles as the parent-suite team enumerates the endpoint surface.
 Step 9 cycle 8: 5 tasks queued (AZ-812 = 3 pts Region DTO rename, AZ-808 = 3 pts region validator, AZ-809 = 5 pts route, AZ-810 = 5 pts UAV upload metadata, AZ-811 = 2 pts lat/lon GET) — total 18 pts across 4 per-endpoint AZ-795 children + 1 OSM-naming harmonization. Origin: cross-repo request from gps-denied-onboard agent (2026-05-22) for completeness of validation surface after AZ-795/796 landed, plus AZ-777 Phase 2 black-box probe surfacing the Region DTO as the lone OSM hold-out. Ordering: AZ-812 first (per /autodev Step 10 user decision), then AZ-808/809/810/811 (independent of each other modulo AZ-812). AZ-808 and AZ-809 specs amended 2026-05-22 post-probe to add `Id` non-zero-Guid rule + Route AC-10 input/output naming asymmetry advisory.
 Step 9 cycle 8b: folded into cycle 8 as step 1 (AZ-812). Section retained in dependency table for traceability.
+Step 9 cycle 9: 2 tasks created (AZ-1074 = 5 pts, AZ-1075 = 3 pts) — total 8 pts. gRPC TileStream for route-based progressive tile delivery.
 
 ## Coverage Verification
 

_docs/02_tasks/done/AZ-1074_grpc_tile_stream_service.md

@@ -0,0 +1,60 @@
+# gRPC TileStream Service for Route-Based Tile Delivery
+
+**Task**: AZ-1074_grpc_tile_stream_service
+**Name**: gRPC TileStream Service
+**Description**: Add gRPC streaming endpoint that delivers route tiles as they become available.
+**Complexity**: 5 points
+**Dependencies**: RouteService, tile storage, Google Maps downloader
+**Component**: SatelliteProvider.Api
+**Tracker**: AZ-1074
+**Epic**: AZ-115
+
+## Problem
+
+Consumers (gps-denied-onboard) can poll REST `POST /api/satellite/route` until `mapsReady`. No streaming transport exists for progressive tile delivery.
+
+## Outcome
+
+- gRPC `StreamTiles(RouteTileRequest) returns (stream TileChunk)` alongside existing REST.
+- Reuses `RouteService` and tile download pipeline.
+- Proto contract checked into repo.
+
+## Scope
+
+### Included
+- `satellite_provider.proto` with route waypoints, region size, zoom, optional geofences.
+- Stream messages: tile id, lat/lon, zoom, image bytes or path + checksum, status, terminal summary.
+- ASP.NET Core gRPC host on configurable port.
+- Happy-path + invalid-request integration test in `SatelliteProvider.IntegrationTests`.
+
+### Excluded
+- Mission cache package assembly (COG/manifest/FAISS).
+- Removing or changing REST endpoints.
+- Imagery source migration off Google Maps.
+
+## Acceptance Criteria
+
+**AC-1: Happy path streams tiles**
+Given a valid 2-point route
+When a client calls `StreamTiles`
+Then at least one `TileChunk` arrives before `StreamComplete`.
+
+**AC-2: Cache reuse**
+Given tiles already in DB cache
+When the stream runs
+Then cached tiles are served without redundant Google Maps download.
+
+**AC-3: Invalid route rejected**
+Given zero waypoints or out-of-range coordinates
+When the client calls `StreamTiles`
+Then gRPC returns `INVALID_ARGUMENT` with details.
+
+**AC-4: Backpressure safe**
+Given a slow consumer
+When tiles stream
+Then tile bytes are not corrupted.
+
+## Constraints
+
+- gRPC is additive; REST remains supported.
+- Blocks gps-denied-onboard AZ-1076 consumer.

_docs/02_tasks/done/AZ-1075_grpc_tile_stream_integration_tests.md

@@ -0,0 +1,54 @@
+# gRPC TileStream Blackbox Integration Tests
+
+**Task**: AZ-1075_grpc_tile_stream_integration_tests
+**Name**: gRPC TileStream Integration Tests
+**Description**: Blackbox tests for the gRPC tile stream against a running service container.
+**Complexity**: 3 points
+**Dependencies**: AZ-1074
+**Component**: SatelliteProvider.IntegrationTests
+**Tracker**: AZ-1075
+**Epic**: AZ-284
+
+## Problem
+
+AZ-284 blackbox suite covers HTTP API only. The new gRPC tile stream has no automated coverage.
+
+## Outcome
+
+- Integration tests exercise `StreamTiles` end-to-end in `docker-compose.tests.yml`.
+- Failure cases assert correct gRPC status codes.
+- Metadata consistency with REST route endpoint verified for same route.
+
+## Scope
+
+### Included
+- Fixture: API + Postgres via existing docker-compose.
+- Happy path: route → tiles → stream complete.
+- Failure cases: empty route, invalid coordinates, zoom out of range.
+- Cross-check with `GET /api/satellite/route/{id}` metadata.
+
+### Excluded
+- Consumer-side tests (gps-denied-onboard AZ-1076).
+- Performance/load testing.
+
+## Acceptance Criteria
+
+**AC-1: Pipeline green**
+Given docker-compose test run
+When gRPC happy-path test executes
+Then it passes with full verbosity (`-v`, no quiet mode).
+
+**AC-2: Failure status codes**
+Given each invalid request variant
+When the gRPC client calls `StreamTiles`
+Then the expected gRPC status code is returned.
+
+**AC-3: REST consistency**
+Given the same route submitted via REST and gRPC
+When both complete
+Then tile metadata is consistent.
+
+## Constraints
+
+- Depends on AZ-1074 landing first.
+- Follow existing integration test patterns in `SatelliteProvider.IntegrationTests`.

_docs/03_implementation/batch_01_cycle9_report.md

@@ -0,0 +1,31 @@
+# Batch Report
+
+**Batch**: 1
+**Tasks**: AZ-1074, AZ-1075
+**Date**: 2026-06-25
+**Cycle**: 9
+
+## Task Results
+
+| Task | Status | Files Modified | Tests | AC Coverage | Issues |
+|------|--------|---------------|-------|-------------|--------|
+| AZ-1074 gRPC TileStream Service | Done | Service existed (275ee1b); added InvalidArgument RpcException + lat/lon validation | 12 unit + smoke integration pass | 4/4 | None |
+| AZ-1075 gRPC Integration Tests | Done | GrpcTestHelpers + RouteTileDeliveryGrpcTests + GrpcContracts project | smoke integration pass | 3/3 | None |
+
+## Notes
+
+- Core gRPC delivery (`DeliverRouteTiles`, orchestrator, proto) landed in commit `275ee1b` before cycle 9 Step 10; this batch adds validation hardening, shared `SatelliteProvider.GrpcContracts`, and blackbox integration coverage.
+- `SatelliteProvider.GrpcContracts` holds `tile_provision.proto` (GrpcServices=Both); Api + IntegrationTests reference it.
+- Integration-tests Dockerfile uses `linux/amd64` to avoid protoc segfault on arm64 Docker.
+- Integration-tests Dockerfile uses `linux/amd64` build + `aspnet:10.0` runtime (Grpc.AspNetCore dependency).
+- Smoke integration run passed (448 unit + full smoke subset including gRPC tests). Local port 5433 conflict avoided via compose override unpublishing host ports; dev TLS cert must include SAN `DNS:api` (regenerate via `scripts/run-tests.sh` if stale).
+
+## AC Test Coverage: All covered
+
+## Code Review Verdict: PASS_WITH_WARNINGS (see reviews/batch_01_cycle9_review.md)
+
+## Auto-Fix Attempts: 0
+
+## Stuck Agents: None
+
+## Next Batch: All tasks complete

_docs/03_implementation/implementation_report_tile_provision_grpc_cycle9.md

@@ -0,0 +1,30 @@
+# Implementation Report — Cycle 9
+
+**Cycle**: 9  
+**Date**: 2026-06-25  
+**Tasks shipped**: AZ-1074, AZ-1075 (batch 1)  
+**Verdict**: PASS  
+**Code Review Verdict**: PASS_WITH_WARNINGS
+
+## Summary
+
+Cycle 9 adds shared gRPC contracts, validation hardening for `DeliverRouteTiles`, and blackbox integration coverage for route tile streaming. Core delivery logic landed in commit `275ee1b`; this batch completes tests, proto project extraction, and InvalidArgument mapping.
+
+## Batch
+
+| Batch | Tasks | Verdict | Report | Review |
+|-------|-------|---------|--------|--------|
+| 01 | AZ-1074, AZ-1075 | PASS | `batch_01_cycle9_report.md` | `reviews/batch_01_cycle9_review.md` |
+
+## Tests
+
+- Unit: 448 passed (Docker SDK run via `scripts/run-tests.sh --smoke --skip-format`)
+- Integration smoke: passed including `RouteTileDeliveryGrpcTests` (manifest, invalid args, backpressure/SHA256, REST overlap)
+
+## Key changes
+
+- `SatelliteProvider.GrpcContracts/` — canonical `tile_provision.proto` (GrpcServices=Both)
+- `RouteTileDeliveryOrchestrator` — lat/lon range validation
+- `RouteTileDeliveryGrpcService` — RpcException InvalidArgument for bad input
+- `RouteTileDeliveryGrpcTests` + `GrpcTestHelpers` — integration coverage
+- Integration-tests Dockerfile — `linux/amd64` build, `aspnet:10.0` runtime

_docs/03_implementation/reviews/batch_01_cycle9_review.md

@@ -0,0 +1,22 @@
+# Code Review — Batch 01 Cycle 9
+
+**Tasks**: AZ-1074, AZ-1075  
+**Verdict**: PASS_WITH_WARNINGS  
+**Date**: 2026-06-25
+
+## Findings
+
+| Severity | Category | Location | Description | Suggestion |
+|----------|----------|----------|-------------|------------|
+| Low | Maintainability | SatelliteProvider.IntegrationTests/Dockerfile | `linux/amd64` platform pin required on arm64 hosts for protoc stability | Document in batch report / README troubleshooting |
+| Low | Style | RouteTileDeliveryOrchestrator.cs | InvalidArgument detail strings include `(Parameter 'job')` suffix from ArgumentException | Optional: strip parameter name for cleaner gRPC detail |
+
+## Spec Compliance
+
+- AZ-1074: DeliverRouteTiles streaming, validation, InvalidArgument mapping — satisfied (unit + integration).
+- AZ-1075: Happy path, invalid requests, backpressure/SHA256, REST vs gRPC overlap — satisfied (smoke integration run passed).
+
+## Security
+
+- No new auth bypass; gRPC inherits JWT from existing API setup.
+- No secrets in source.

_docs/_autodev_state.md

@@ -2,14 +2,14 @@
 
 ## Current Step
 flow: existing-code
-step: 17
+step: 11
-name: Retrospective
+name: Run Tests
-status: completed
+status: pending
 sub_step:
-  phase: 4
+  phase: 1
-  name: lessons-log-updated
+  name: full-suite
-  detail: "Cycle-end retrospective produced: _docs/06_metrics/retro_2026-05-23_cycle8.md + _docs/06_metrics/structure_2026-05-23_cycle8.md + _docs/LESSONS.md (3 new lessons, trimmed to 15 ring-buffer entries). Cycle 8 closed. Next /autodev invocation = cycle 9 Step 0 (orchestrator reset)."
+  detail: "Step 10 complete; smoke passed, full suite pending"
 retry_count: 0
-cycle: 8
+cycle: 9
 tracker: jira
 auto_push: true