Add diagnostic severity/messages and RAW fixes

Introduce TransferConceptDiagnosticSeverity and message helpers for transfer diagnostics, compute default severity and message text, and expose them in the C++ API and Python bindings. Update TransferConceptDiagnostic to carry severity, add severity/message name helpers, and implement logic to derive severity and human-readable messages. Expand conservative vendor RAW/source-processing classification for multiple vendors (Pentax, Panasonic, Olympus, Kodak, Minolta, Sigma, etc.) and add corresponding unit tests. Update docs and version (0.4.12) to describe the new severity/message fields and host UI localization guidance.

Author: ssh4net

CHANGES.md

@@ -1,5 +1,21 @@
 # OpenMeta Changes
 
+## 0.4.12 - 2026-05-18
+
+Changes compared with `0.4.11`.
+
+### Added
+
+- Added stable severity and message helpers for transfer concept diagnostics so
+  host/UI code can display concise transfer-preview reasons without inventing
+  its own default text.
+
+### Changed
+
+- Expanded conservative RAW/source-processing classification for additional
+  Pentax, Panasonic, Olympus, Kodak, Minolta, and Sigma MakerNote/raw table
+  patterns.
+
 ## 0.4.11 - 2026-05-15
 
 Changes compared with `0.4.10`.

VERSION

@@ -1 +1 @@
-0.4.11
+0.4.12

docs/api_stability.md

@@ -27,7 +27,7 @@ different status.
 | Semantic metadata query: `query_metadata(...)`, `query_crop_metadata(...)`, focused query helpers, and `metadata_query_fuzzy_search_available()` | `openmeta/metadata_query.h` | Experimental | Query contract for inspection matches plus normalized candidates. Current coverage includes crop/active-area/border margins, exposure/gain, white balance, color, lens correction, orientation, and RAW/source-processing metadata across standard tags, selected DNG tags, fuzzy XMP paths, and vendor RAW-processing classification. Matches report `exact_match`, `fuzzy_match`, and `fuzzy_score` so tools can label exact results separately from RapidFuzz near-miss hits. `OPENMETA_ENABLE_RAPIDFUZZ=ON` adds optional near-miss XMP/property-path scoring. Grouped candidates include `matrix_set`, `vector_set`, and `table` shapes for related non-crop metadata, including RAW black/white levels, linearization, CFA/sensor layout, source geometry, raw-storage identifiers, and source-processing buckets. Python `Document` and `TransferSourceSnapshot` mirror this as thin dictionary-returning wrappers. |
 | Structured metadata interpretation records: `interpret_metadata(...)`, `interpret_metadata_query(...)` | `openmeta/metadata_interpretation.h` | Experimental | Thin structured projection over semantic query candidates. Records carry query class, semantic kind, normalized shape, confidence, source entry ids, and normalized origin/size/rect/margins/value arrays where available. Current scope covers orientation, geometry/crop/border, exposure/gain, color/white-balance, lens-correction, and RAW/source-processing records. Python `Document` and `TransferSourceSnapshot` expose matching dictionary wrappers. |
 | Cross-family concept resolution: `resolve_metadata_concepts(...)`, `resolve_metadata_concept(...)` | `openmeta/metadata_concepts.h` | Experimental | First bounded resolver for duplicated host-facing concepts. Current scope reports candidates, candidate source entries, source families, preferred entries, normalized numeric/text keys, full normalized value vectors, transfer hints, normalized date/time fields, date/time precision, timezone kind, normalized geometry fields, and same-role conflicts for orientation, date/time, color/profile, GPS, geometry, lens-correction, and RAW-processing evidence across EXIF, XMP, IPTC, ICC, PNG text, and query-backed interpretation records where applicable. Geometry candidates cover crop, active area, border, and sensor geometry with canonical origin, size, rect, and margin fields when available. Candidate transfer hints distinguish `safe`, `source_bound`, `rendered_unsafe`, and `requires_target_image_spec` evidence, with compatible-file and rendered-image safety booleans. Color/white-balance, lens-correction, and RAW-processing concepts preserve grouped matrix/vector/table values for host inspection; they do not make source-bound values safe to serialize into rendered targets. GPS date/time is combined from `GPSDateStamp` plus `GPSTimeStamp` when both entries exist, and GPS altitude candidates expose altitude-reference code plus below-sea-level state when reference metadata is present; `metadata_concept_gps_altitude_reference_name(...)` provides a stable display token for the reference code. It is intended for inspection UI and host policy decisions; it does not rewrite metadata or hide ambiguity. Python `Document` and `TransferSourceSnapshot` expose matching dictionary wrappers. |
-| Transfer concept diagnostics: `transfer_concept_diagnostics_from_store(...)` | `openmeta/metadata_transfer.h` | Experimental | Preflight view over concept candidates for `TransferSafetyMode`. Each diagnostic reports concept kind/role, transfer hint, keep/drop/requires-target-image-spec action, reason token, conflict flag, source entries, compatible/rendered safety booleans, and GPS altitude-reference presentation fields. Intended for UI previews and host policy messages before calling `prepare_metadata_for_target(...)`; it does not replace the actual transfer filter. Python `Document` and `TransferSourceSnapshot` expose `transfer_concept_diagnostics(...)` dictionaries. |
+| Transfer concept diagnostics: `transfer_concept_diagnostics_from_store(...)`, `transfer_concept_diagnostic_message(...)` | `openmeta/metadata_transfer.h` | Experimental | Preflight view over concept candidates for `TransferSafetyMode`. Each diagnostic reports concept kind/role, transfer hint, keep/drop/requires-target-image-spec action, reason token, severity token, default message text, conflict flag, source entries, compatible/rendered safety booleans, and GPS altitude-reference presentation fields. Intended for UI previews and host policy messages before calling `prepare_metadata_for_target(...)`; it does not replace the actual transfer filter. Python `Document` and `TransferSourceSnapshot` expose `transfer_concept_diagnostics(...)` dictionaries with `severity_name` and `message` fields. |
 | Vendor RAW-processing summaries: `vendor_raw_processing_from_store(...)`, `classify_vendor_raw_processing_field(...)` | `openmeta/vendor_raw_processing.h` | Experimental | Conservative grouped source-RAW/source-processing field summaries for decoded Sony, Canon, Nikon, Fujifilm, Pentax, Panasonic, Olympus, Kodak, Minolta, Sigma, Samsung, Ricoh, Apple, DJI, Google, FLIR, Casio, Sanyo, KyoceraRaw, Reconyx, HP, JVC, GE, Motorola, Nintendo, and Microsoft MakerNotes, including vendor-private, computational, thermal, preview, face-geometry, stitch/panorama, Apple computational capture/HDR/motion, DJI pose/thermal, Google HDR+/shot-log, pixel-shift/multi-shot/composite/auto-lighting source processing, and FLIR radiometric/raw-value buckets. Direct field classification also recognizes decoded Phase One/Leaf RAW-processing tags; use the dedicated Phase One/Leaf helpers for normalized geometry and processing summaries. Intended for audit/UI and rendered-transfer safety decisions, not for writing vendor RAW/source-processing values into rendered targets. |
 | Transfer safety audit: `transfer_safety_audit_from_store(...)` | `openmeta/metadata_transfer.h` | Experimental | Preflight summary of source entries and entries filtered or invalidated by `TransferSafetyMode`, including Sony/Canon/Nikon/Fujifilm/Pentax/Panasonic/Olympus/Kodak/Minolta/Sigma/Samsung/Ricoh/Apple/DJI/Google/FLIR/Casio/Sanyo/KyoceraRaw/Reconyx/HP/JVC/GE/Motorola/Nintendo/Microsoft RAW/source-processing buckets. Intended for diagnostics and host UI before preparing rendered-image transfers. |
 | Raw-carrier passthrough audit: `raw_carrier_passthrough_audit_from_snapshot(...)` | `openmeta/metadata_transfer.h` | Experimental | Diagnostic preflight for opt-in raw carriers. Reports candidate carriers and primary block reasons such as missing payload, target incompatibility, safety filtering, content-bound C2PA, explicit profile policy, missing decoded-entry links, or unsupported carrier kind. Hosts can call it directly before enabling snapshot passthrough. |

docs/host_integration.md

@@ -69,7 +69,9 @@ hint: `safe`, `source_bound`, `rendered_unsafe`, or
 `rendered_image_safe` booleans for host UI and preflight policy. For transfer
 previews, `transfer_concept_diagnostics_from_store(...)` converts those hints
 into keep/drop/requires-target-image-spec actions for a selected
-`TransferSafetyMode`.
+`TransferSafetyMode`, plus stable severity tokens and default message text for
+host UI. Hosts can localize or replace the wording, but they do not need to
+invent the basic safe/drop/rewrite reasons.
 
 ## Adapter Classes
 
@@ -640,8 +642,14 @@ for (size_t i = 0U; i < diagnostics.diagnostics.size(); ++i) {
         openmeta::transfer_concept_diagnostic_action_name(item.action);
     const char* reason =
         openmeta::transfer_concept_diagnostic_reason_name(item.reason);
+    const char* severity =
+        openmeta::transfer_concept_diagnostic_severity_name(item.severity);
+    const char* message =
+        openmeta::transfer_concept_diagnostic_message(item);
     (void)action;
     (void)reason;
+    (void)severity;
+    (void)message;
 }
 ```
 
@@ -659,7 +667,13 @@ diagnostics = doc.transfer_concept_diagnostics(
     openmeta.TransferSafetyMode.RenderedImage
 )
 for item in diagnostics["diagnostics"]:
-    print(item["kind_name"], item["role_name"], item["action_name"])
+    print(
+        item["kind_name"],
+        item["role_name"],
+        item["action_name"],
+        item["severity_name"],
+        item["message"],
+    )
 ```
 
 `metaread` prints

docs/interpretation_status.md

@@ -40,8 +40,8 @@ explicit outcome:
 | Vendor MakerNotes | Broad MakerNote naming and source-processing classification exists for common vendors and several live computational/thermal vendors. Unknown entries remain lossless and source-private subgroups distinguish preview, face geometry, computational, thermal, stitch/panorama, pixel-shift, multi-shot, composite, auto-lighting, RAW crop/active-area, source color-transform, lens-correction, raw-level processing data, and Phase One/Leaf RAW-processing fields handled by direct classification plus dedicated normalized helpers. | Medium-high, about 80-88%. | ExifTool-style long-tail print conversions, encrypted/custom settings, and per-model private tables. |
 | BMFF item graph, HEIF/AVIF/CR3, JUMBF, and C2PA | BMFF derived fields, item-info rows, bounded relations, primary-linked roles, aux semantics, and draft C2PA/JUMBF structural fields are exposed. | Medium, about 60-70%. | Full BMFF scene modeling and full C2PA manifest/policy semantics. |
 | Photoshop IRB | Raw resources are preserved and a bounded interpreted subset is decoded for fixed-layout resources. | Medium, about 60-70%. | Broader resource-specific interpretation. |
-| Semantic query/search and records | Query helpers expose raw matches, confidence, provenance, value shapes, normalized candidates, canonical crop/active-area rectangles, border margins, source-processing buckets, optional RapidFuzz near-miss matching, structured interpretation records, and bounded cross-family concept resolution for orientation, date/time, color/profile, GPS, geometry, lens-correction, and RAW-processing with parsed date/time fields, timezone/precision classification, combined GPS timestamps, GPS altitude-reference state and display token, canonical geometry origin/size/rect/margins, full grouped value vectors, transfer hints, rendered/compatible safety booleans, and tolerance-aware GPS/color/geometry conflicts. | Medium, about 68-74%. | More long-tail per-model concept aliases and clearer user-facing policy messages. |
-| Transfer-safety classification | Compatible-file versus rendered-image safety policies classify source-specific image geometry, color/profile, RAW-processing, MakerNote, JUMBF/C2PA, and vendor-private data, with concept-level diagnostics that report keep/drop/requires-target-image-spec actions before prepare. | High, about 87-91%. | More per-family policy tests and richer host-authored message text. |
+| Semantic query/search and records | Query helpers expose raw matches, confidence, provenance, value shapes, normalized candidates, canonical crop/active-area rectangles, border margins, source-processing buckets, optional RapidFuzz near-miss matching, structured interpretation records, and bounded cross-family concept resolution for orientation, date/time, color/profile, GPS, geometry, lens-correction, and RAW-processing with parsed date/time fields, timezone/precision classification, combined GPS timestamps, GPS altitude-reference state and display token, canonical geometry origin/size/rect/margins, full grouped value vectors, transfer hints, rendered/compatible safety booleans, and tolerance-aware GPS/color/geometry conflicts. | Medium, about 68-74%. | More long-tail per-model concept aliases and richer localized policy wording. |
+| Transfer-safety classification | Compatible-file versus rendered-image safety policies classify source-specific image geometry, color/profile, RAW-processing, MakerNote, JUMBF/C2PA, and vendor-private data, with concept-level diagnostics that report keep/drop/requires-target-image-spec actions, severity, and default message text before prepare. | High, about 88-92%. | More per-family policy tests and optional host localization hooks. |
 
 ## Competitor Position
 
@@ -57,8 +57,8 @@ outputs.
 
 ## Next Interpretation Priorities
 
-1. Deepen transfer diagnostics into host-authored message templates for GUI
-   workflows.
+1. Deepen transfer diagnostics with optional host localization/formatting hooks
+   for GUI workflows.
 2. Expand GPS policy beyond current coordinate tolerance, altitude-reference
    display, and EXIF timestamp assembly into broader cross-family
    reconciliation.

docs/quick_start.md

@@ -175,8 +175,9 @@ of guessing silently. Transfer hints use `safe`, `source_bound`,
 from source RAW/correction data and target-owned image facts.
 `transfer_concept_diagnostics_from_store(...)` applies those hints to a
 selected transfer safety mode and returns keep/drop/requires-target-image-spec
-actions for transfer-preview UI. GPS altitude reference codes can be displayed
-with `metadata_concept_gps_altitude_reference_name(...)`.
+actions, severity tokens, and default message text for transfer-preview UI. GPS
+altitude reference codes can be displayed with
+`metadata_concept_gps_altitude_reference_name(...)`.
 
 For user-facing orientation display, use `openmeta/orientation.h` instead of
 showing only the numeric EXIF/TIFF index. `interpret_exif_orientation(...)`

docs/sphinx/api_stability.rst

@@ -152,18 +152,20 @@ Host-facing API map
        metadata or hide ambiguity. Python ``Document`` and
        ``TransferSourceSnapshot`` expose matching dictionary wrappers.
    * - Transfer concept diagnostics:
-       ``transfer_concept_diagnostics_from_store(...)``
+       ``transfer_concept_diagnostics_from_store(...)``,
+       ``transfer_concept_diagnostic_message(...)``
      - ``openmeta/metadata_transfer.h``
      - Experimental
      - Preflight view over concept candidates for ``TransferSafetyMode``.
        Each diagnostic reports concept kind/role, transfer hint,
-       keep/drop/requires-target-image-spec action, reason token, conflict
-       flag, source entries, compatible/rendered safety booleans, and GPS
-       altitude-reference presentation fields. Intended for UI previews and
-       host policy messages before calling ``prepare_metadata_for_target(...)``;
-       it does not replace the actual transfer filter. Python ``Document`` and
+       keep/drop/requires-target-image-spec action, reason token, severity
+       token, default message text, conflict flag, source entries,
+       compatible/rendered safety booleans, and GPS altitude-reference
+       presentation fields. Intended for UI previews and host policy messages
+       before calling ``prepare_metadata_for_target(...)``; it does not replace
+       the actual transfer filter. Python ``Document`` and
        ``TransferSourceSnapshot`` expose ``transfer_concept_diagnostics(...)``
-       dictionaries.
+       dictionaries with ``severity_name`` and ``message`` fields.
    * - Vendor RAW-processing summaries:
        ``vendor_raw_processing_from_store(...)``,
        ``classify_vendor_raw_processing_field(...)``

docs/sphinx/host_integration.rst

@@ -75,7 +75,9 @@ transfer hint: ``safe``, ``source_bound``, ``rendered_unsafe``, or
 ``rendered_image_safe`` booleans for host UI and preflight policy. For transfer
 previews, ``transfer_concept_diagnostics_from_store(...)`` converts those hints
 into keep/drop/requires-target-image-spec actions for a selected
-``TransferSafetyMode``.
+``TransferSafetyMode``, plus stable severity tokens and default message text
+for host UI. Hosts can localize or replace the wording, but they do not need to
+invent the basic safe/drop/rewrite reasons.
 
 Adapter classes
 ---------------
@@ -631,8 +633,14 @@ host UI, not as a rendered-output write source.
            openmeta::transfer_concept_diagnostic_action_name(item.action);
        const char* reason =
            openmeta::transfer_concept_diagnostic_reason_name(item.reason);
+       const char* severity =
+           openmeta::transfer_concept_diagnostic_severity_name(item.severity);
+       const char* message =
+           openmeta::transfer_concept_diagnostic_message(item);
        (void)action;
        (void)reason;
+       (void)severity;
+       (void)message;
    }
 
 Python uses the same family enum:
@@ -650,7 +658,13 @@ Python uses the same family enum:
        openmeta.TransferSafetyMode.RenderedImage
    )
    for item in diagnostics["diagnostics"]:
-       print(item["kind_name"], item["role_name"], item["action_name"])
+       print(
+           item["kind_name"],
+           item["role_name"],
+           item["action_name"],
+           item["severity_name"],
+           item["message"],
+       )
 
 ``metaread`` prints
 ``vendor_raw_processing[sony|canon|nikon|fujifilm|pentax|panasonic|olympus|kodak|minolta|sigma|samsung|ricoh|apple|dji|google|flir|casio|sanyo|kyoceraraw|reconyx|hp|jvc|ge|motorola|nintendo|microsoft]=...``

docs/sphinx/interpretation_status.rst

@@ -148,15 +148,16 @@ Coverage matrix
        rendered/compatible safety booleans, and tolerance-aware
        GPS/color/geometry conflicts.
      - Medium, about 68-74%.
-     - More long-tail per-model concept aliases and clearer user-facing policy
-       messages.
+     - More long-tail per-model concept aliases and richer localized policy
+       wording.
    * - Transfer-safety classification
      - Compatible-file versus rendered-image safety policies classify
        source-specific image geometry, color/profile, RAW-processing, MakerNote,
        JUMBF/C2PA, and vendor-private data, with concept-level diagnostics that
-       report keep/drop/requires-target-image-spec actions before prepare.
-     - High, about 87-91%.
-     - More per-family policy tests and richer host-authored message text.
+       report keep/drop/requires-target-image-spec actions, severity, and
+       default message text before prepare.
+     - High, about 88-92%.
+     - More per-family policy tests and optional host localization hooks.
 
 Competitor position
 -------------------
@@ -174,8 +175,8 @@ outputs.
 Next interpretation priorities
 ------------------------------
 
-1. Deepen transfer diagnostics into host-authored message templates for GUI
-   workflows.
+1. Deepen transfer diagnostics with optional host localization/formatting hooks
+   for GUI workflows.
 2. Expand GPS policy beyond current coordinate tolerance, altitude-reference
    display, and EXIF timestamp assembly into broader cross-family
    reconciliation.

docs/sphinx/quick_start.rst

@@ -154,8 +154,9 @@ of guessing silently. Transfer hints use ``safe``, ``source_bound``,
 facts from source RAW/correction data and target-owned image facts.
 ``transfer_concept_diagnostics_from_store(...)`` applies those hints to a
 selected transfer safety mode and returns keep/drop/requires-target-image-spec
-actions for transfer-preview UI. GPS altitude reference codes can be displayed
-with ``metadata_concept_gps_altitude_reference_name(...)``.
+actions, severity tokens, and default message text for transfer-preview UI. GPS
+altitude reference codes can be displayed with
+``metadata_concept_gps_altitude_reference_name(...)``.
 
 For user-facing orientation display, use ``openmeta/orientation.h`` instead of
 showing only the numeric EXIF/TIFF index. ``interpret_exif_orientation(...)``