# Coverage threshold exceptions
The crate enforces the shared `rs-ci` thresholds: functions at least 95%,
lines above 90%, and regions above 85%. The audit in this file was generated
from `cargo-llvm-cov 0.8.6`, Rust 1.94.0, with `./coverage.sh json` and all
features enabled on 2026-09-10. The raw report is `target/llvm-cov/coverage.json`
and is intentionally not committed.
Three former exceptions were removed after this run because their measured
coverage met every threshold:
- `src/multi_values/multi_values_identity.rs` (100% / 94.74% / 96.67%).
- `src/value/value_identity.rs` (100% / 100% / 93.94%).
- `src/value_missing.rs` (100% / 97.73% / 95.45%).
The remaining entries are retained after the same run. Each is a broad public
API or protocol boundary whose low branch coverage is caused by defensive,
feature-specific, or failure-only paths. The regular all-feature integration
suite and focused contract tests remain the replacement evidence for reachable
behavior; adding synthetic tests solely to execute impossible branches would
make the suite less representative.
| `src/identity/json_identity.rs` | `hash_json_iterative` and equality visitor exits (42-99, 126-140) | `cargo test --all-features`; `identity::json_identity_tests` exercises deep, unordered, budgeted, and mismatch cases | The uncovered branches are coupled to the iterative state machine and cannot be isolated without duplicating its implementation. |
| `src/multi_values/multi_values.rs` | `get_first_ref`, `get_slice`, and generic `set`/`add` arms (186-214, 914-970) | `cargo test --all-features`; `multi_values_*_tests` cover every storage variant and conversion policy | The macro-generated variant surface is one public API; per-arm exceptions would hide the same generic implementation. |
| `src/named_multi_values.rs` | `serialize`, `deserialize`, and bounded writer paths (413-468, 248-298) | `cargo test --all-features`; `named_multi_values_tests` and wire contract tests | These paths are coupled to `MultiValues` and the named envelope, so a line-level split would not represent an independent unit. |
| `src/named_value.rs` | `serialize`, `deserialize`, and bounded writer paths (363-408, 231-281) | `cargo test --all-features`; `named_value_tests` and bounded wire tests | The wrapper's branches depend on downstream type combinations and protocol envelopes. |
| `src/value/value.rs` | generic `get_or`, `to_or`, and conversion dispatch (446-640) | `cargo test --all-features`; `value::*_tests` cover all supported feature variants | The remaining paths are generated by the feature matrix and cannot be reduced to one stable public scenario. |
| `src/value_container.rs` | `set`, `add`, and `add_scalar` (497-773) | `cargo test --all-features`; `value_container_tests` and core feature tests | Scalar/collection shape is one transaction; splitting the exception would make the threshold configuration track implementation details. |
| `src/value_error.rs` | `PartialEq::eq` and conversion `From` implementations (105-199) | `cargo test --all-features`; `value_error_tests` covers all public error constructors and sources | Failure variants are selected by generic conversion context, so a narrower file or line exemption would be brittle. |
| `src/value_wire/value_wire_payload_v1.rs` | `to_json_writer_with_limits` and `deserialize` (255-360) | `cargo test --all-features`; payload golden, decode, and error tests | These branches are protocol boundary handling and only occur for malformed external input or injected writer errors. |
| `src/value_wire/value_wire_ref_v1.rs` | `from_container` and `to_json_writer_with_limits` (102-218) | `cargo test --all-features`; borrowed wire and bounded writer tests | The branches share the borrowed wire serializer and cannot be tested independently without bypassing its ownership contract. |
| `src/value_wire/value_wire_v1.rs` | `decode_json_slice_with_limits` and `to_json_writer_with_limits` (160-275) | `cargo test --all-features`; V1 golden, decode, and limit tests | These are defensive protocol branches requiring malformed bytes or injected I/O; broad file scope preserves audit visibility. |
| `src/wire.rs` | `deserialize_canonical`, vector visitor, and type serializers (90-206) | `cargo test --all-features`; wire golden and strict decode tests | The wire enum is the single dispatch boundary for all optional value types. |
| `src/wire/internal/strict_string_map.rs` | `StrictStringMapVisitor::visit_map` (48-84) | `cargo test --all-features`; strict string-map and wire rejection tests | Rejection paths require malformed serialized maps and are inseparable from the strict visitor state. |
Re-run the audit with:
```text
COVERAGE_OPEN_HTML=0 ./coverage.sh json
```