Composable adversarial mutation pipeline

[rudrakshkarpe]

Summary

mutations.py currently supports only 3 basic transforms (HTML comment, markdown quote, authority claim). Expand to a composable pipeline of mutation chains for stress-testing.

Scope

• Unicode homoglyph substitution
• Token-splitting attacks
• Semantic paraphrasing mutations
• Encoding-based evasion (base64, rot13, URL encoding)
• Composable chains: mutate(sample, [html_comment, unicode_homoglyph, authority_claim])
• Mutation registry for user-defined transforms

Acceptance Criteria

• At least 8-10 mutation types
• Composable mutate() accepts a list of mutations applied sequentially
• Tests for each mutation and composition
• Documentation with examples