Mutation testing baseline (path_jail + OWL patch)¶

Greenfield, not a PR gate. Run locally or via .github/workflows/mutants.yml (workflow_dispatch / weekly cron):

cargo install cargo-mutants --locked
./scripts/run-mutants.sh --timeout 120 --jobs 2

scripts/run-mutants.sh runs ontocore-owl patch mutants with --test-package ontocore-owl --test-package ontocode so workspace tests/owl_patch_oracles.rs participates.

Baseline¶

ontocore-core / path_jail.rs (2026-07-11 / 2026-07-12)¶

Remaining misses (non-blocking): ||/&& edges in resolve_path_in_workspace / is_path_within, is_path_within_lexical → true, and one ensure_extract_path_within match-arm delete (covered by sibling parent-escape checks).

Critical escape paths covered by unit tests: ensure_extract_path_within (.., absolute, empty), symlink escape, sibling prefix trap, multi-root outside reject, discover_git_repo_root.

ontocore-owl / patch.rs — critical arms (2026-07-12)¶

Focused --examine-re 'is_safe_iri|apply_one_patch' with oracle package:

Full patch.rs has ~401 mutants; nightly/manual full runs via ./scripts/run-mutants.sh. Success-path catalog oracles live in tests/owl_patch_oracles.rs; injection/hygiene string tests remain in patch.rs unit tests.

Artifacts: mutants.out/ (gitignored locally when present).