Two of the ingest verb's containment cases are mutation-vacuous. The in-repo symlink case points at an absolute path, which os.Root refuses on its own, so removing the explicit symlinked-directory refusal leaves it green; and removing the contained write alone leaves every case green because refuseARerun probes the same path first and fails closed. The containment is layered and each layer refuses independently, but a case that names one layer must fail when that layer goes.

Two of the ingest verb's containment cases are mutation-vacuous. The in-repo symlink case points at an absolute path, which os.Root refuses on its own, so removing the explicit symlinked-directory refusal leaves it green; and removing the contained write alone leaves every case green because refuseARerun probes the same path first and fails closed. The containment is layered and each layer refuses independently, but a case that names one layer must fail when that layer goes.

Grounds

• pursued: the containment layers are individually redundant, so a case naming one layer must be mutated at the property rather than the layer; a layer removed silently leaving every case green would show this wrong