fix(ci): repair two silently-rotted crates and close the CI coverage gaps

vcl-ut has FIVE cargo workspace roots. CI covered three of them, and the
two it missed had stopped compiling without anyone noticing.

WHAT ROTTED

`ast::Statement` gained the S1 consonance field `verb` (Select / Inspect /
Verify / Assert / Declare / Retract / Merge / Split / Normalise) — the
consonance turn itself. Two downstream crates were never updated:

  src/interface/attest          E0063: missing field `verb`
  src/interface/recompute-wasm  E0063: missing field `verb`

In both cases only the in-file `#[cfg(test)]` module was stale; the
libraries still built. That is why nothing downstream complained — 12
tests had simply stopped running, in the crates carrying the attestation
and recompute boundaries.

Fixed by supplying `verb: Verb::Select` at both sites. Both constructions
are the bare `SELECT * FROM STORE "s"` case and both already used the full
eight-modality `OctadSchema`, so the octad was already correct there; only
the verb was missing.

  attest          9 tests, now green
  recompute-wasm  3 tests, now green

Their Cargo.lock files had also drifted (recompute-wasm's recorded only the
two in-repo path crates and no external deps at all — it had not been
resolved since its manifest grew dependencies). Regenerated and committed.

WHY IT ROTTED — coverage map, measured 2026-07-21

  /                              e2e.yml             PARTIAL (see below)
  /src/interface/parse           parse-gate.yml      full
  /src/interface/echidna-client  backend-matrix.yml  needs echidna sibling
  /src/interface/attest          NOTHING
  /src/interface/recompute-wasm  NOTHING

New satellite-crates-gate.yml gates the last two: clippy `-D warnings`
plus tests, over a matrix. Both were verified to pass `-D warnings` cleanly
before the gate was added, so this is a real gate that is green, not an
aspirational one. It mirrors parse-gate.yml's deliberate use of preinstalled
rustup over a third-party toolchain action.

`--locked` is deliberately omitted there for now, and the reason is recorded
in the workflow: the lockfiles are freshly regenerated after a long ungated
drift. It should be restored once a Dependabot cycle has run against them.

ALSO FIXED IN e2e.yml

1. The root job ran `--test property_test` + `--test integration_test` only:
   69 of the root workspace's 102 tests. Every test in tests/e2e_test.rs (20)
   and tests/fuzz_test.rs (13) was skipped. Now `cargo test --workspace
   --all-targets --locked`, verified locally at 102 passed / 0 failed.

2. Removed both "Provide echidna sibling" steps, which cloned a whole
   repository on every run for nothing. `src/interface` — the member that
   carries the external `echidna-core` path-dep — is deliberately not a root
   workspace member, so neither the root tests nor tests/e2e.sh ever resolve
   it. Verified with no sibling present: 102 tests pass, e2e.sh reports 19/19.
   echidna-client remains gated by backend-matrix.yml, which does need it.

CORRECTION TO AN EARLIER FINDING

An earlier read of this repository recorded "0 unit tests; root cargo test is
a fake gate". That was wrong, and was an artefact of truncating the log to its
last lines. The root crate is a re-export facade over fmt + lint, so per-crate
UNIT counts are legitimately zero and the entire surface lives in tests/.
The README's `tests-102 pass` badge is exact. Recorded in the e2e.yml header
so the same misreading is not repeated.

Verification:
  reuse lint                          -> compliant, 459/459
  23 workflows                        -> 0 malformed
  cargo test --workspace --locked     -> 102 passed
  cargo test (parse)                  -> 36 passed
  cargo test (attest)                 -> 9 passed
  cargo test (recompute-wasm)         -> 3 passed
  bash tests/e2e.sh                   -> 19/19, no echidna sibling
                                         150 tests total

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/e2e.yml

@@ -1,4 +1,30 @@
 # SPDX-License-Identifier: MPL-2.0
+#
+# e2e.yml — Root-workspace test gate.
+#
+# The root workspace has four members (vcl-total, vcltotal-fmt, vcltotal-lint,
+# vcltotal-core) and its whole test surface lives in `tests/`, because the root
+# crate is a re-export facade over fmt + lint. Per-crate UNIT counts are
+# therefore all zero, which makes a truncated `cargo test` log look like an
+# empty gate; it is not. Measured 2026-07-21: 102 tests.
+#
+#   tests/e2e_test.rs          20
+#   tests/fuzz_test.rs         13
+#   tests/integration_test.rs  59
+#   tests/property_test.rs     10
+#
+# This job previously ran only property_test + integration_test, so 33 of the
+# 102 — every e2e and fuzz test — never ran in CI. It now runs the whole
+# workspace.
+#
+# The former "Provide echidna sibling" steps have been removed. They cloned a
+# whole repository on every run for nothing: `src/interface` (the member that
+# carries the external `echidna-core` path-dep) is deliberately NOT a root
+# workspace member, so neither `cargo test --workspace` nor `tests/e2e.sh`
+# ever resolves it. Verified 2026-07-21 by running both with no sibling
+# present: 102 tests pass, e2e.sh reports 19/19. echidna-client is gated
+# separately in backend-matrix.yml, which does need the sibling.
+
 name: E2E, Property and Aspect Tests
 on:
   push: { branches: [main] }
@@ -15,27 +41,22 @@ jobs:
       - name: Install Rust
         uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
       - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
-      # echidna-core path-dependency (src/interface/Cargo.toml) — provide as sibling.
-      - name: Provide echidna sibling
-        run: git clone --depth 1 https://github.com/hyperpolymath/echidna ../echidna
       - name: Run E2E validation
         run: bash tests/e2e.sh
   property:
-    name: Property and integration tests
+    name: Root workspace tests
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
       - name: Install Rust
         uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
       - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
-      # echidna-core path-dependency (src/interface/Cargo.toml) — provide as sibling.
-      - name: Provide echidna sibling
-        run: git clone --depth 1 https://github.com/hyperpolymath/echidna ../echidna
-      - name: Run property tests
-        run: cargo test --test property_test
-      - name: Run integration tests
-        run: cargo test --test integration_test
+      # Whole workspace, all targets — not a hand-picked subset. Previously
+      # `--test property_test` + `--test integration_test` only, which silently
+      # skipped tests/e2e_test.rs and tests/fuzz_test.rs.
+      - name: Run root workspace tests (expect 102)
+        run: cargo test --workspace --all-targets --locked
   aspect:
     name: Aspect tests
     runs-on: ubuntu-latest

.github/workflows/satellite-crates-gate.yml

@@ -0,0 +1,85 @@
+# SPDX-License-Identifier: MPL-2.0
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+#
+# satellite-crates-gate.yml — Gates the self-contained satellite workspaces.
+#
+# vcl-ut has FIVE cargo workspace roots, not one. Before this workflow, CI
+# covered only three of them:
+#
+#   /                              e2e.yml
+#   /src/interface/parse           parse-gate.yml
+#   /src/interface/echidna-client  backend-matrix.yml (needs echidna sibling)
+#   /src/interface/attest          NOTHING   <- gated here
+#   /src/interface/recompute-wasm  NOTHING   <- gated here
+#
+# The cost of that gap was measured on 2026-07-21: both ungated crates had
+# stopped compiling. `ast::Statement` gained the S1 consonance field `verb`
+# (DECLARE / ASSERT / RETRACT / MERGE / ...), and neither crate's test module
+# was updated, so both failed with E0063 `missing field 'verb'`. Their
+# libraries still built, so nothing downstream noticed; 12 tests had simply
+# stopped running. Silent rot in exactly the crates that carry the
+# attestation and recompute boundaries.
+#
+# Both crates are self-contained (in-repo path deps only), so unlike
+# echidna-client they need no sibling checkout and can be gated cheaply.
+#
+# Tracked: vcl-ut#25.
+
+name: Satellite Crates Gate
+
+on:
+  pull_request:
+    branches: ['**']
+  push:
+    branches: [main, master]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  satellite-gate:
+    name: ${{ matrix.crate }} — clippy / tests
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+
+    strategy:
+      fail-fast: false
+      matrix:
+        crate: [attest, recompute-wasm]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      # rustup is preinstalled on ubuntu-latest; no third-party action
+      # (avoids the action-pinning / deprecated-cache hazards). Mirrors
+      # parse-gate.yml deliberately.
+      - name: Pin toolchain + components
+        run: |
+          set -euo pipefail
+          rustup show active-toolchain || rustup default stable
+          rustup component add clippy
+          cargo --version && cargo clippy --version
+
+      # Operate via the manifest path so CI never traverses the parent
+      # virtual workspace, whose `src/interface` member carries an external
+      # path-dep that does not resolve in a standalone checkout.
+      #
+      # `--locked` is deliberately NOT used: these two lockfiles drifted while
+      # the crates were ungated. They are regenerated and committed as part of
+      # the repair; once a Dependabot cycle has run against them, `--locked`
+      # should be restored here to make lockfile drift itself a gate.
+      - name: Clippy — warnings are errors
+        run: |
+          set -euo pipefail
+          cargo clippy --manifest-path src/interface/${{ matrix.crate }}/Cargo.toml \
+            --all-targets -- -D warnings
+
+      - name: Tests
+        run: |
+          set -euo pipefail
+          cargo test --manifest-path src/interface/${{ matrix.crate }}/Cargo.toml

src/interface/attest/Cargo.lock

@@ -226,6 +226,10 @@ mod tests {
             linear_annot: None,
             epistemic_clause: None,
             requested_level: SafetyLevel::ParseSafe,
+            // S1 consonance verb. A bare `SELECT * FROM STORE "s"` is the
+            // epistemically-neutral read, so `Select` is the right witness
+            // here; the attestation path is verb-agnostic.
+            verb: Verb::Select,
         }
     }
 

src/interface/attest/src/lib.rs

@@ -181,6 +181,9 @@ mod tests {
             linear_annot: None,
             epistemic_clause: None,
             requested_level: SafetyLevel::ParseSafe,
+            // S1 consonance verb — see the comment above: this is the plain
+            // `SELECT` read, the neutral case for the recompute boundary.
+            verb: Verb::Select,
         };
         let m = |modality, fields| ModalitySchema { modality, fields };
         let sc = OctadSchema {