Nothing is published yet

This is the correct default state, not a failure. Every place in the archive is pending until a person has looked at how it would be generalized and agreed, and every photograph carries publish: false until it is opted in. Both keys are required.

An unpublished photograph costs nothing and can be published tomorrow. A published location cannot be recalled — it is scraped, cached and mirrored beyond reach. The asymmetry is the whole argument for defaulting this way.