chore(rot): flush silent failures + drop Gleam SDK

[hyperpolymath]

Summary

Three rot-flush moves from the seam-walk audit (#80), bundled because they share a single intent (make silent failures visible; remove SDK rot the architecture doesn't need).

A) Loud failure on unrecognised shapes (8 sites in elixir-orchestration).
Five federation adapters + the VCL executor + the VCL type-checker were silently returning [] on unrecognised response/spec shapes. Each site now logs a structured Logger.warning/1 with a bounded shape summary so failures are visible without crashing the federation query.

• federation/adapters/{verisimdb, surrealdb, object_storage}.ex — 4 response-shape fallbacks
• query/vql_executor.ex — extract_embedding_from_modality/1 ×2, wrap_provenance_results/1, wrap_spatial_results/1
• query/vql_type_checker.ex — parse_proof_specs/1 catch-all

The parse_proof_specs(nil) and verify_multi_proof(_, nil) clauses flagged in #80 turned out correct as written (nil = "no proof requested" is a legitimate shape); the malformed-spec catch-all in verify_multi_proof/2 already errored. No change there.

B) Drop Gleam client SDK (~1,700 LoC, 14 TODOs, no README, 1 test).
BEAM-side cross-language access is the SNIFs WASM bridge's remit (hyperpolymath/snifs — Safe Native Implemented Functions via WebAssembly Sandboxing). Maintaining a parallel Gleam SDK that the Elixir client already covers — and forcing it to track every wire-format change once vcl-ut's Refl-pinned codec is the source of truth — is rot the architecture doesn't need. The connectors/ matrix in connectors/README.adoc and docs/INDEX.md now point to SNIFs for Gleam/Erlang access.

C) Drop 4 aspirational ignored persistence tests (~95 LoC).
InMemory* / BruteForce* stores are in-memory by design; persistence lives in the sibling Persistent* variants under verisim-{vector,tensor,semantic,temporal}/src/persistent.rs. The four #[ignore]-d tests in verisim-octad/tests/integration_tests.rs were testing an API that doesn't exist and isn't planned. Replaced with one comment block pointing at the right targets.

Net

+112 / −2,004 across 20 files. All behavioural changes are observable-loud-where-previously-silent. Zero feature regressions.

Test plan

• cargo check -p verisim-octad --tests clean locally
• CI Elixir build validation green on PR (local mix toolchain 1.14 < required 1.17)
• CI Rust workspace cargo test green on PR
• CI fuzz / benches / cargo doc / llvm-cov green on PR

Closes / refs

• Closes most of Seam walk: 19 stub returns + tantivy compile error + 13 test panics (audit 2026-06-01) #80 (seam walk)
• References Elixir build validation red — undefined fns (CAStore, VeriSim.RustClient.list_octads/2, trigger_normalization/1) treated as errors #83 (Elixir warnings — separate work)
• Architectural note: BEAM-side cross-language via SNIFs (hyperpolymath/snifs)

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 241 issues detected

Severity	Count
🔴 Critical	18
🟠 High	53
🟡 Medium	170

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action actions/checkout@v6 needs attention",
    "type": "unpinned_action",
    "file": "build-validation.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action dtolnay/rust-toolchain@stable needs attention",
    "type": "unpinned_action",
    "file": "build-validation.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action Swatinem/rust-cache@v2 needs attention",
    "type": "unpinned_action",
    "file": "build-validation.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/checkout@v6 needs attention",
    "type": "unpinned_action",
    "file": "build-validation.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action erlef/setup-beam@v1 needs attention",
    "type": "unpinned_action",
    "file": "build-validation.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action ons/checkout@v6\n\n   needs attention",
    "type": "unpinned_action",
    "file": "dogfood-gate.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/checkout@v6 needs attention",
    "type": "unpinned_action",
    "file": "elixir-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action erlef/setup-beam@v1 needs attention",
    "type": "unpinned_action",
    "file": "elixir-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/cache@v5 needs attention",
    "type": "unpinned_action",
    "file": "elixir-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action tions/checkout@v6\n  needs attention",
    "type": "unpinned_action",
    "file": "elixir-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence