bug: 15/16 nightly workflows fail — provable-contracts path deps unresolvable on GitHub runners

[noahgift]

Summary

15 out of 16 repos with nightly workflows are failing. Only copia passes. The root cause is provable-contracts (and other sibling) path deps that cannot resolve on GitHub-hosted runners.

Three Failure Categories (Same Root Cause)

Category 1 — Path dep resolution failure (11 repos)

bashrs, decy, depyler, presentar, realizar, forjar, aprender, pmat, batuta, simular, trueno

Error: failed to read /.../provable-contracts/crates/provable-contracts/Cargo.toml: No such file or directory

Category 2 — Missing generated_contracts.rs (3 repos)

alimentar, trueno-rag, simular — mod generated_contracts; references a build artifact that isn't generated in CI

Category 3 — Unrelated (2 repos)

• pforge: missing libssl-dev for openssl-sys
• trueno-viz: cargo audit RUSTSEC-2026-0002 (lru 0.12.5 unsound IterMut)

Five-Whys

1. Why fail? — Cargo can't resolve path deps to provable-contracts
2. Why unresolvable? — Nightly workflows only checkout single repo
3. Why path deps? — Clean-room dual-source pattern (path + version)
4. Why no fallback? — Cargo doesn't fall back to registry when path exists but is broken
5. Why not caught? — Nightly workflows were added before provable-contracts integration

Systemic Fix Options

1. Per-workflow: Clone provable-contracts in each nightly.yml (11 files)
2. Workspace override: Use [patch.crates-io] at workspace level
3. Remove path deps: Only use version deps (breaks local dev convenience)

Option 1 is the pragmatic immediate fix. Long-term, consider whether path deps are needed.