feat(v2.0.0): final convergence and trustworthy analysis contract

[ikelaiah]

Summary

ProcFlow v2.0.0 formalises a conservative, auditable SQL analysis contract without adding dialects, backends, cloud services, or AI features.

Contract

• Static evidence is required for asserted semantic relationships.
• Dynamic, ambiguous, malformed, and unsupported SQL remains explicit and conservative.
• Future/corrupt saved workspace payloads are rejected without coercion or automatic deletion.

Semantic qualification

Dialect	Cases	Assertions
T-SQL	7	27
PL/pgSQL	4	13
DB2 SQL PL	3	12
SQLite	1	4

15 adversarial cases; 56 semantic assertions (41 required, 15 forbidden); dialectAdversarialSemanticAssertionRate = 1.0.

Compatibility

Graph edge semantics, provenance, diagnostics, confidence formula, and exports are preserved. Workspace schema 2 retains deterministic older-snapshot migration and now rejects future schemas non-destructively.

Metrics

docs/metrics-v2.0.0.json is fixture-only. Attribution and parity invariants remain evidence, not semantic oracles.

Verification

• npm ci
• npm run typecheck
• npm run build
• npm run test:file
• npm run metrics
• npm run benchmark
• npm run package:runtime
• npm run package:smoke
• git diff --check
• Chrome browser suites: golden 219/219, fuzz 400/400, UI 31/31, security 5/5, critical path 7/7.

Non-goals

No new SQL dialects, execution, database connections, backend, telemetry, cloud persistence, or AI features.

Release gate

Tagging occurs only after all required GitHub Actions, including native Firefox, are green.