Failing first: the on-disk JSON metadata store does not exist yet. These tests fix its contract before the implementation lands — round-trip fidelity including the binary keys, missing/corrupt files loading empty, a schema-version mismatch discarded as stale cache, atomic writes leaving no temp sibling, and directory 0700 / file 0600 permissions. Model: opus-4-8