MetallGraph method failure corrupts metall store

[rogerpearce]

Limit exposure of mutable metall store to only when mutations occur. Algorithm or input failure should occur when metall is in read-only mode and not corrupt the store.