--- core/src/cover.rs
+++ replace + with *
@@ -61,17 +61,17 @@
 /// per-token quota until reclaimed), so the cover floor trades a coarser timing mask for far less relay
 /// load and bandwidth. Like [`DEFAULT_POLL_BASE_MS`] it is a **hardcoded global constant** — a per-user
 /// rate would itself become a fingerprint.
 pub const DEFAULT_COVER_DEPOSIT_BASE_MS: u64 = 30_000;
 
 /// Standard cover-blob size in bytes: one 256-byte [`crate::pad`] bucket plus the offline envelope's
 /// fixed framing+AEAD overhead, so a cover deposit is byte-for-byte the size of the most common
 /// (one-bucket) real message and cannot be singled out by length.
-pub const COVER_BLOB_LEN: usize = crate::pad::BUCKET + COVER_ENVELOPE_OVERHEAD;
+pub const COVER_BLOB_LEN: usize = crate::pad::BUCKET * /* ~ changed by cargo-mutants ~ */ COVER_ENVELOPE_OVERHEAD;
 
 /// Envelope overhead a real one-bucket offline deposit carries on top of the padded plaintext (the
 /// synthetic nonce + AEAD tag + mix-header framing). A cover blob matches this so its length is
 /// identical to a real one-bucket envelope.
 const COVER_ENVELOPE_OVERHEAD: usize = 24;
 
 /// Jittered delay (milliseconds) uniform over `[base/2, 3·base/2]` (mean = `base`). Shared by the poll
 /// and cover-deposit schedules. `rand` is any uniform 64-bit draw (OS CSPRNG in production, fixed in