The rules of a council’s own flood map

AnBanjir is a specification for a street-level flood nowcast and response console, staged against a real mandate — the post-2021 disaster-response architecture, the federal radar and JPS hazard record it would sit on top of, and the local authority that owns the drains. As of this writing it is designed, not running: the shape, the legal grounding and the resolution maths are real, but no council instance is deployed and no live console is operated. These terms describe the intended rules, not a live service, and should be read as a proposal until an agreement is executed with a signing council.

The console is designed to be operated by, and for, a single local authority over its own catchment — one instance per PBT, not a multi-tenant national feed and not an ad-funded consumer app. That posture is the point: a flood map only carries public trust if exactly one accountable body owns the thresholds and no cross-council join lets one authority’s incident data leak into another’s. A state or federal view, where it exists, is a read-only overlay licensed separately and never writing back.

Reporters agree to submit only redacted water evidence: a masked photo of a rising kerb, a road or a channel. Never the personal data of a neighbour or a rescue victim, never an un-redacted face, house number or plate, and never a fabricated, edited or replayed waterline. Most seriously: a deliberate false danger report — one that sends responders out or triggers an alert on a street that is dry — is a material breach and grounds for removal and referral, because in a flood product a lie does not just pollute data, it endangers people.

Output is a confidence-banded street-state — a condition and a risk band for a road segment, corroborated across reports and telemetry. It is not an evacuation order and not a declaration of an emergency; that authority remains human, legal and the council’s alone. Where a sighting cannot be corroborated it shows as unconfirmed and carries zero weight. A road marked clear is not a promise it stays clear, and a rising band is guidance, never a warranty that a warning will reach you in time.

The console is designed to keep working through the outage: gates closed, routes forbidden and shelter counts mutate locally on the council’s own network and reconcile on reconnect. This resilience is a design property, not a guarantee of uninterrupted service — connectivity, power and sensor failure during severe weather are exactly the conditions the system is built to degrade gracefully under, and it may still be incomplete. You should never rely on any single map state as the sole basis for a life-safety decision.

Street-state is a sensing estimate held to a published confidence floor, offered without warranty of completeness or fitness for a particular decision. Coverage is uneven by design — gauge-dense and report-dense catchments resolve sharply, others stay coarse or silent — and AnBanjir is a companion to, never a replacement for, official MetMalaysia warnings, JPS guidance and NADMA direction. Follow the instructions of emergency services above anything a console displays.

These terms, and any participation agreement built on them, are governed by the laws of Malaysia, with personal-data handling aligned to the Personal Data Protection Act 2024. Questions about the proposal, a reference catchment, or a seat at the founding table go to anbanjir@antrex.app or the Antrex contact desk at antrex.app/contact.