refactor(elixir): VCL rename stage C — VQL* modules -> VCL* (internal)

Stage C of the VQL->VCL rename (#84): the Elixir orchestration layer.
VeriSim Consonance Language is the canonical name; "VQL" is the retired
misnomer. These modules are internal — no external Elixir callers, and no
Elixir HTTP route (the /vql/execute surface lives in the Rust api) — so this
is a clean hard-rename with no back-compat shims.

Renamed (git mv + identifiers):
- lib/verisim/query/vql_{bridge,executor,proof_certificate,type_checker}.ex
  -> vcl_*; modules VeriSim.Query.VQL{Bridge,Executor,ProofCertificate,
  TypeChecker} -> VCL*
- test/support/vql_test_helpers.ex -> vcl_test_helpers.ex
  (VeriSim.Test.VQLTestHelpers -> VCLTestHelpers)
- 12 test modules test/verisim/**/vql_*_test.exs -> vcl_*
- fixtures test/fixtures/vql/*.vql -> test/fixtures/vcl/*.vcl

Preserved (cross-layer contracts owned by other stages, NOT Elixir-internal):
- "vql-bridge/vql_parser_port.js" — ReScript/JS parser path (bridge falls
  back to the built-in parser when absent)
- "type:vql_query" — Rust full-text search tag (verisim-api index contract)
- vql_dt_active — telemetry JSON key consumed by the PanLL dashboard
These move with Stage B (Rust/clients) and the JS-bridge/dashboard stages.

Verified locally (hex is proxy-blocked here, so mix cannot fetch deps): all
23 changed Elixir files parse (Code.string_to_quoted!), all are
mix-format-clean, and a case-insensitive grep leaves only the 8 intentional
contract lines. Real mix compile/test runs on CI.

Refs #84.

https://claude.ai/code/session_01W9Voe3JceP66Bna9FT4jME

Author: claude

elixir-orchestration/lib/verisim/hypatia/scan_ingester.ex

@@ -24,7 +24,7 @@ defmodule VeriSim.Hypatia.ScanIngester do
               │
       VeriSimDB storage
               │
-      Hypatia VQL queries
+      Hypatia VCL queries
 
   ## Usage
 

…stration/lib/verisim/query/vql_bridge.ex …stration/lib/verisim/query/vcl_bridge.exelixir-orchestration/lib/verisim/query/vql_bridge.ex renamed to elixir-orchestration/lib/verisim/query/vcl_bridge.ex elixir-orchestration/lib/verisim/query/vql_bridge.ex renamed to elixir-orchestration/lib/verisim/query/vcl_bridge.ex

@@ -1,30 +1,30 @@
 # SPDX-License-Identifier: MPL-2.0
 
-defmodule VeriSim.Query.VQLBridge do
+defmodule VeriSim.Query.VCLBridge do
   @moduledoc """
-  Bridge between the ReScript VQL parser and Elixir VQL executor.
+  Bridge between the ReScript VCL parser and Elixir VCL executor.
 
   Manages a long-running Deno/Node process that runs the compiled ReScript
-  VQL parser. Communication uses JSON over stdin/stdout with length-prefixed
+  VCL parser. Communication uses JSON over stdin/stdout with length-prefixed
   framing for reliable message boundaries.
 
   ## Architecture
 
-      VQL String ──► VQLBridge (GenServer)
+      VCL String ──► VCLBridge (GenServer)
                         │
                         ▼
                      Port (stdin/stdout JSON)
                         │
                         ▼
-                     Deno process running compiled VQLParser.res
+                     Deno process running compiled VCLParser.res
                         │
                         ▼
-                     Parsed AST (JSON) ──► VQLExecutor
+                     Parsed AST (JSON) ──► VCLExecutor
 
   ## Usage
 
-      {:ok, ast} = VQLBridge.parse("SELECT GRAPH, VECTOR FROM HEXAD abc-123")
-      {:ok, results} = VQLExecutor.execute(ast)
+      {:ok, ast} = VCLBridge.parse("SELECT GRAPH, VECTOR FROM HEXAD abc-123")
+      {:ok, results} = VCLExecutor.execute(ast)
   """
 
   use GenServer
@@ -42,9 +42,9 @@ defmodule VeriSim.Query.VQLBridge do
   end
 
   @doc """
-  Parse a VQL query string into an AST map.
+  Parse a VCL query string into an AST map.
 
-  Returns `{:ok, ast}` where ast is a map matching the VQLParser.AST types,
+  Returns `{:ok, ast}` where ast is a map matching the VCLParser.AST types,
   or `{:error, reason}` on parse failure.
   """
   def parse(query_string, timeout \\ @default_timeout) do
@@ -66,44 +66,44 @@ defmodule VeriSim.Query.VQLBridge do
   end
 
   @doc """
-  Parse a VQL mutation (INSERT / UPDATE / DELETE).
+  Parse a VCL mutation (INSERT / UPDATE / DELETE).
   """
   def parse_mutation(query_string, timeout \\ @default_timeout) do
     GenServer.call(__MODULE__, {:parse_mutation, query_string}, timeout)
   end
 
   @doc """
-  Parse a VQL statement (query or mutation).
+  Parse a VCL statement (query or mutation).
   """
   def parse_statement(query_string, timeout \\ @default_timeout) do
     GenServer.call(__MODULE__, {:parse_statement, query_string}, timeout)
   end
 
   @doc """
-  Parse and execute a VQL query string in one call.
-  Combines VQLBridge.parse/1 with VQLExecutor.execute/2.
+  Parse and execute a VCL query string in one call.
+  Combines VCLBridge.parse/1 with VCLExecutor.execute/2.
   """
   def parse_and_execute(query_string, opts \\ []) do
     case parse(query_string) do
-      {:ok, ast} -> VeriSim.Query.VQLExecutor.execute(ast, opts)
+      {:ok, ast} -> VeriSim.Query.VCLExecutor.execute(ast, opts)
       {:error, _} = error -> error
     end
   end
 
   @doc """
-  Parse and execute a VQL statement (query or mutation).
+  Parse and execute a VCL statement (query or mutation).
   """
   def parse_and_execute_statement(query_string, opts \\ []) do
     case parse_statement(query_string) do
-      {:ok, ast} -> VeriSim.Query.VQLExecutor.execute_statement(ast, opts)
+      {:ok, ast} -> VeriSim.Query.VCLExecutor.execute_statement(ast, opts)
       {:error, _} = error -> error
     end
   end
 
   @doc """
-  Type-check a parsed VQL-DT AST.
+  Type-check a parsed VCL-DT AST.
 
-  Sends the AST to the ReScript type checker (VQLBidir.synthesizeQuery)
+  Sends the AST to the ReScript type checker (VCLBidir.synthesizeQuery)
   via the Deno/Node subprocess. Returns inferred types, proof obligations,
   and composition strategy.
 
@@ -142,12 +142,12 @@ defmodule VeriSim.Query.VQLBridge do
 
     case start_port(state) do
       {:ok, port} ->
-        Logger.info("VQLBridge started with #{runtime}")
+        Logger.info("VCLBridge started with #{runtime}")
         {:ok, %{state | port: port}}
 
       {:error, reason} ->
         Logger.warning(
-          "VQLBridge: parser process unavailable (#{reason}), falling back to built-in parser"
+          "VCLBridge: parser process unavailable (#{reason}), falling back to built-in parser"
         )
 
         {:ok, state}
@@ -157,7 +157,7 @@ defmodule VeriSim.Query.VQLBridge do
   @impl true
   def handle_call({:typecheck, _ast}, _from, %{port: nil} = state) do
     # Type checking requires the ReScript subprocess — no fallback.
-    # Callers MUST handle this error; silently passing would defeat VQL-DT.
+    # Callers MUST handle this error; silently passing would defeat VCL-DT.
     {:reply, {:error, :type_checker_unavailable}, state}
   end
 
@@ -240,14 +240,14 @@ defmodule VeriSim.Query.VQLBridge do
         end
 
       {:error, _} ->
-        Logger.warning("VQLBridge: received malformed data from parser port")
+        Logger.warning("VCLBridge: received malformed data from parser port")
         {:noreply, state}
     end
   end
 
   @impl true
   def handle_info({port, {:exit_status, status}}, %{port: port} = state) do
-    Logger.warning("VQLBridge: parser process exited with status #{status}")
+    Logger.warning("VCLBridge: parser process exited with status #{status}")
 
     # Reply to all pending requests with error
     for {_id, from} <- state.pending do
@@ -257,7 +257,7 @@ defmodule VeriSim.Query.VQLBridge do
     # Try to restart
     case start_port(state) do
       {:ok, new_port} ->
-        Logger.info("VQLBridge: parser process restarted")
+        Logger.info("VCLBridge: parser process restarted")
         {:noreply, %{state | port: new_port, pending: %{}}}
 
       {:error, _} ->
@@ -486,7 +486,7 @@ defmodule VeriSim.Query.VQLBridge do
 
     # Split multi-proof specs on AND/OR connectors into a list.
     # "EXISTENCE(a) AND PROVENANCE(b)" → [%{raw: "EXISTENCE(a)"}, %{raw: "PROVENANCE(b)"}]
-    specs = VeriSim.Query.VQLTypeChecker.parse_proof_specs(%{raw: raw})
+    specs = VeriSim.Query.VCLTypeChecker.parse_proof_specs(%{raw: raw})
 
     proof =
       case specs do
@@ -556,7 +556,7 @@ defmodule VeriSim.Query.VQLBridge do
 
       :error ->
         raise ArgumentError,
-              "Unknown VQL token #{inspect(str)} — not in @safe_atoms allowlist"
+              "Unknown VCL token #{inspect(str)} — not in @safe_atoms allowlist"
     end
   end
 

…ration/lib/verisim/query/vql_executor.ex …ration/lib/verisim/query/vcl_executor.exelixir-orchestration/lib/verisim/query/vql_executor.ex renamed to elixir-orchestration/lib/verisim/query/vcl_executor.ex elixir-orchestration/lib/verisim/query/vql_executor.ex renamed to elixir-orchestration/lib/verisim/query/vcl_executor.ex

@@ -1,8 +1,8 @@
 # SPDX-License-Identifier: MPL-2.0
 # Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
-defmodule VeriSim.Query.VQLExecutor do
+defmodule VeriSim.Query.VCLExecutor do
   @moduledoc """
-  VQL Executor - Executes VQL queries and mutations parsed by the ReScript VQL parser.
+  VCL Executor - Executes VCL queries and mutations parsed by the ReScript VCL parser.
 
   Supports three phases:
   1. Dependent-type queries with multi-proof composition
@@ -11,9 +11,9 @@ defmodule VeriSim.Query.VQLExecutor do
 
   ## Execution Pipeline
 
-  1. Parse VQL query (done by ReScript VQLParser)
-  2. Type-check if PROOF clause present (VQLTypeChecker → VQLBidir)
-  3. Generate execution plan (VQLExplain)
+  1. Parse VCL query (done by ReScript VCLParser)
+  2. Type-check if PROOF clause present (VCLTypeChecker → VCLBidir)
+  3. Generate execution plan (VCLExplain)
   4. Classify conditions (pushdown vs cross-modal)
   5. Route to appropriate modality stores
   6. Evaluate cross-modal conditions post-fetch
@@ -23,14 +23,14 @@ defmodule VeriSim.Query.VQLExecutor do
   require Logger
 
   alias VeriSim.{QueryRouter, RustClient, Telemetry}
-  alias VeriSim.Query.VQLProofCertificate
+  alias VeriSim.Query.VCLProofCertificate
 
   @doc """
-  Execute a parsed VQL query.
+  Execute a parsed VCL query.
 
   ## Parameters
 
-  - `query_ast` - Parsed VQL query from ReScript VQLParser
+  - `query_ast` - Parsed VCL query from ReScript VCLParser
   - `opts` - Execution options
 
   ## Options
@@ -56,7 +56,7 @@ defmodule VeriSim.Query.VQLExecutor do
   end
 
   @doc """
-  Execute a VQL mutation (INSERT / UPDATE / DELETE).
+  Execute a VCL mutation (INSERT / UPDATE / DELETE).
   """
   def execute_mutation(mutation_ast, opts \\ []) do
     timeout = Keyword.get(opts, :timeout, 30_000)
@@ -77,7 +77,7 @@ defmodule VeriSim.Query.VQLExecutor do
   end
 
   @doc """
-  Execute a VQL statement (query or mutation).
+  Execute a VCL statement (query or mutation).
   """
   def execute_statement(statement_ast, opts \\ []) do
     case statement_ast do
@@ -91,13 +91,13 @@ defmodule VeriSim.Query.VQLExecutor do
   end
 
   @doc """
-  Execute a VQL query string (includes parsing).
+  Execute a VCL query string (includes parsing).
   """
   def execute_string(query_string, opts \\ []) do
     start_time = System.monotonic_time()
 
     result =
-      case VeriSim.Query.VQLBridge.parse(query_string) do
+      case VeriSim.Query.VCLBridge.parse(query_string) do
         {:ok, ast} -> execute(ast, opts)
         {:error, reason} -> {:error, {:parse_error, reason}}
       end
@@ -165,7 +165,7 @@ defmodule VeriSim.Query.VQLExecutor do
     projections = extract_projections(query_ast)
 
     if proof_specs do
-      # VQL-DT path: type-check → execute → verify proofs → bundle certificate
+      # VCL-DT path: type-check → execute → verify proofs → bundle certificate
       execute_dt_query(
         query_ast,
         proof_specs,
@@ -228,7 +228,7 @@ defmodule VeriSim.Query.VQLExecutor do
     end
   end
 
-  # VQL-DT execution — type check, execute, verify proofs, bundle certificate
+  # VCL-DT execution — type check, execute, verify proofs, bundle certificate
   defp execute_dt_query(
          query_ast,
          proof_specs,
@@ -243,42 +243,42 @@ defmodule VeriSim.Query.VQLExecutor do
          projections,
          timeout
        ) do
-    alias VeriSim.Query.{VQLBridge, VQLTypeChecker}
+    alias VeriSim.Query.{VCLBridge, VCLTypeChecker}
 
     # Step 1: Type-check the query to get proof obligations and composition strategy.
     # Tries three strategies in order:
-    #   1. ReScript bidirectional type checker (VQLBridge.typecheck — full formal system)
-    #   2. Elixir-native type checker (VQLTypeChecker — validates types, generates obligations)
+    #   1. ReScript bidirectional type checker (VCLBridge.typecheck — full formal system)
+    #   2. Elixir-native type checker (VCLTypeChecker — validates types, generates obligations)
     #   3. Bare AST extraction (last resort — no validation, just structuring)
     type_info =
-      case VQLBridge.typecheck(query_ast) do
+      case VCLBridge.typecheck(query_ast) do
         {:ok, info} ->
           info
 
         {:error, :type_checker_unavailable} ->
           # ReScript subprocess not running. Use the Elixir-native type checker
           # which validates proof types, modality compatibility, and composition.
           Logger.info(
-            "VQL-DT: Using Elixir-native type checker (ReScript subprocess unavailable)"
+            "VCL-DT: Using Elixir-native type checker (ReScript subprocess unavailable)"
           )
 
-          case VQLTypeChecker.typecheck(query_ast) do
+          case VCLTypeChecker.typecheck(query_ast) do
             {:ok, info} ->
               info
 
             {:error, reason} ->
               # Native type checker rejected the query — this is a real type error.
-              Logger.error("VQL-DT: Type checking failed: #{inspect(reason)}")
+              Logger.error("VCL-DT: Type checking failed: #{inspect(reason)}")
               nil
           end
 
         {:error, reason} ->
-          Logger.error("VQL-DT: Type checking failed: #{inspect(reason)}")
+          Logger.error("VCL-DT: Type checking failed: #{inspect(reason)}")
           nil
       end
 
     if is_nil(type_info) do
-      {:error, {:type_check_failed, "VQL-DT query type checking failed"}}
+      {:error, {:type_check_failed, "VCL-DT query type checking failed"}}
     else
       # Step 2: Execute the query (get data)
       {pushdown_conditions, cross_modal_conditions} = classify_conditions(where_clause)
@@ -314,7 +314,7 @@ defmodule VeriSim.Query.VQLExecutor do
                   :conjunction
 
               # Step 4b: Generate independently verifiable certificates for
-              # each proof obligation using VQLProofCertificate. Each artifact
+              # each proof obligation using VCLProofCertificate. Each artifact
               # from the verifier becomes the witness for its corresponding
               # obligation, yielding a hash-sealed certificate.
               verifiable_certificates =
@@ -323,7 +323,7 @@ defmodule VeriSim.Query.VQLExecutor do
                 |> Enum.map(fn {obligation, artifact} ->
                   witness = if is_map(artifact), do: artifact, else: %{raw: artifact}
 
-                  case VQLProofCertificate.generate_certificate(obligation, witness) do
+                  case VCLProofCertificate.generate_certificate(obligation, witness) do
                     {:ok, cert} -> cert
                     {:error, _} -> nil
                   end
@@ -875,7 +875,7 @@ defmodule VeriSim.Query.VQLExecutor do
         else
           # No specific entity — log a warning but allow for global queries.
           Logger.warning(
-            "VQL-DT: Access proof without entity ID — global query, skipping entity-level check"
+            "VCL-DT: Access proof without entity ID — global query, skipping entity-level check"
           )
 
           {:ok, %{type: :access, entity_id: nil, authorized: true, scope: :global}}
@@ -1209,7 +1209,7 @@ defmodule VeriSim.Query.VQLExecutor do
   # ---------------------------------------------------------------------------
 
   # Proof obligation structuring and composition determination are now handled
-  # by VeriSim.Query.VQLTypeChecker, which provides richer validation and
+  # by VeriSim.Query.VCLTypeChecker, which provides richer validation and
   # enrichment (witness fields, circuit names, time estimates).
 
   # ===========================================================================
@@ -2019,7 +2019,7 @@ defmodule VeriSim.Query.VQLExecutor do
         steps = []
 
         # Step 1: Parse (already done)
-        steps = [%{operation: "Parse VQL", cost_ms: 1, notes: "Already completed"} | steps]
+        steps = [%{operation: "Parse VCL", cost_ms: 1, notes: "Already completed"} | steps]
 
         # Step 2: Type check (if proofs present)
         steps =