Record Nimble dependency provenance (#164)

Author: Anionix

docs/research-log.md

@@ -34,7 +34,7 @@ The claims runner keeps the corrected TsFile time-series workload as `ADAPTED` a
 
 The 2026-07-17 retry added the exact 13-column mixed-schema case and corrected fatal classification for worker failures and crashes. The lock-pinned Python package could not build under macOS arm64 Clang 21 because `src/table/stats.cpp` promotes a `std::string` null-argument warning to an error. The official C++ `quick_fuzz_test` built after downgrading the two observed warning classes, but all ten pinned cases exited `SIGTRAP`; this is experimental evidence, not an upstream bug claim.
 
-The 2026-07-17 Nimble retry pinned core `9da673...`, Velox `e06dd...`, and OpenZL `6b48...`. A dependency-resolving CMake path reached the bundled xsimd project but stopped at its pre-3.5 minimum-version declaration under CMake 4.1.2. The earlier protobuf/fmt target failure and this newer configure failure are both `UNSUPPORTED` build evidence; the 1,024-column projection comparison was not run.
+The 2026-07-17 Nimble retry pinned core `9da673...`, Velox `e06dd...`, and OpenZL `6b48...`. The dependency provenance was not fully lock-pure: protobuf library `35.1` came from Nix, `protoc 33.4` and fmt `12.1.0` came from Homebrew, and CMake reported the compiler/library mismatch. A dependency-resolving CMake path reached the bundled xsimd project but stopped at its pre-3.5 minimum-version declaration under CMake 4.1.2. The earlier protobuf/fmt target failure and this newer configure failure are both `UNSUPPORTED` build evidence; the 1,024-column projection comparison was not run.
 
 The format survey was inspired in part by [this Japanese overview](https://zenn.dev/mrasu/articles/47dfb30436ebf3), but implementation claims are checked against each project's primary repository or documentation.
 

research/formats/nimble.json

@@ -30,7 +30,11 @@
         "architecture": "arm64",
         "clang": "21.1.8",
         "cmake": "4.1.2",
-        "ninja": "1.13.2"
+        "ninja": "1.13.2",
+        "protobuf_library": "35.1 from /nix/store/3c2m4p8mc0pzc3ksca19asazsk6b8iqp-protobuf-35.1",
+        "protobuf_compiler": "33.4 from /opt/homebrew/bin/protoc",
+        "fmt": "12.1.0 from /opt/homebrew/Cellar/fmt/12.1.0",
+        "dependency_warning": "CMake reported that protoc 33.4 did not match the protobuf library 7.35.1"
       },
       "result": "protobuf and fmt targets resolved, but the bundled xsimd dependency stopped configuration because its CMake minimum version is older than CMake 4.1.2; no build or projection test was attempted"
     }