Scanned 2026-03-31 for all 5 MOADs.
MOAD-0001 (CWE-407): 1 defect found — play-0001 (see defects/play-0001/).
  FindIntrHandler() O(H) linear scan per IOP interrupt -> O(1) fix via index array.
MOAD-0002 (Intertangle): CPS2VM is a reasonable orchestrator class, not a god object coupling independent subsystems through shared mutable global state. CLEAN.
MOAD-0003 (Leaked Context): thread_local in BasicBlock.cpp is scoped to AOT_BUILD_CACHE build variant only, holds a JIT compiler instance for a thread — not request-scoped identity. CLEAN.
MOAD-0004 (CWE-312): Iop_Secrman.cpp logs AuthCard port/slot/cnum numbers, not actual cryptographic keys or passwords. CLEAN.
MOAD-0005 (Thundering Herd): no unsynchronized cache get+null+compute+put pattern found. CLEAN.
