What our coverage number did not protect

Engrava's test suite had 3,845 tests and 94.22% line coverage. There was more test code in the repository than production code. By every number we had, the thing was well tested. Then we ran a mutatio