feat(manifest): drop unimplemented json sidecar store (V-L2-F2, #112)

[hyperpolymath]

V-L2-F2: resolve the json sidecar storage option (#112)

Split from #45, whose acceptance left [sidecar].storage = "json" rejected with a "tracked by #112" pointer. #112 asks for a decision: implement the JSON store, or drop it.

Decision: drop json

The octad data layer is intrinsically relational, so a JSON store "with the same octad-dimension coverage as the sqlite path" would mean reimplementing the whole layer against a non-relational model:

• provenance hash-chains depend on BEGIN IMMEDIATE serialisation + multi-head fork sets;
• temporal "exactly one current version" is a partial UNIQUE index;
• enum columns are CHECK-constrained;
• lineage acyclicity is a recursive-CTE concern;
• gc and drift are SQL DELETE/SELECT over those tables.

The ROADMAP reinforces this: Phase 1 lists only the SQLite provenance sidecar, and "Phase 2: Multi-Backend Support" is about interception sources (SQLite/MongoDB/Redis/MySQL), not sidecar storage formats. A JSON sidecar appears nowhere across the six phases. Implementing it is a multi-phase feature, not a single-issue completion — so this PR takes the bounded, roadmap-aligned path and removes the never-implemented option.

Changes (the "drop" acceptance items)

Acceptance item	Change
storage enum	SqlDialect::from_storage no longer special-cases json; it falls into the generic unsupported-value error, which advertises only the supported stores (sqlite, postgres/postgresql) — no #112/"coming soon" pointer. Remains the single source of truth.
SidecarConfig docs	Updated in both src/manifest/mod.rs and src/abi/mod.rs.
manifest template	[sidecar] block now documents the supported values; no json.
validate/doctor	New sidecar-storage-supported check delegates to from_storage, so a dropped/typo'd backend is surfaced before it reaches codegen. doctor inherits it via validate_manifest.

User-facing surfaces no longer mention json. The only remaining references are (1) a maintainer decision-record on the enforcement fn explaining why it was dropped, and (2) the regression tests that assert json is rejected plainly — both intentional.

Tests

• manifest::…::unsupported_storage_fails — validate fails on storage = "json" with a plain "unsupported" detail and no #112 pointer.
• codegen::overlay::…::test_storage_to_dialect_mapping — updated: json rejected as unsupported, must not advertise itself as planned.
• Full suite green: 119 lib unit tests + all integration tests; cargo clippy --all-targets -- -D warnings and cargo fmt --check clean.

Closes #112.

Note: if a JSON sidecar is in fact wanted later, it should be reopened as a dedicated multi-backend feature (Phase 2+) with its own storage-abstraction design, since it can't reuse the SQL-bound invariants above.

https://claude.ai/code/session_01S2xDQQU5o85N3xTpeFUSfN

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 80 issues detected

Severity	Count
🔴 Critical	1
🟠 High	7
🟡 Medium	72

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/checkout@v4 needs attention",
    "type": "unpinned_action",
    "file": "rust-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action dtolnay/rust-toolchain@stable needs attention",
    "type": "unpinned_action",
    "file": "rust-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action Swatinem/rust-cache@v2 needs attention",
    "type": "unpinned_action",
    "file": "rust-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/checkout@v4 needs attention",
    "type": "unpinned_action",
    "file": "rust-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action dtolnay/rust-toolchain@master needs attention",
    "type": "unpinned_action",
    "file": "rust-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action Swatinem/rust-cache@v2 needs attention",
    "type": "unpinned_action",
    "file": "rust-ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence