CLAUDE.md: update UNDF count to 892

This commit is contained in:
russell@unturf.com 2026-03-30 17:34:31 -04:00
parent c12412cda6
commit 716a789008

View file

@ -45,17 +45,28 @@ pwd # /home/fox/git/java-topology
git log --oneline -3
```
## #1 Priority — MOAD-1 No Stone Unturned
## #1 Priority — All MOADs, No Stone Unturned
**Active mission: CWE-407 (MOAD-2026-0001) exhaustive sweep. Keep scanning, patching, and publishing until every reachable target has been triaged.**
**Every scan checks ALL 5 MOADs. Never single-thread on one MOAD per target. Extract maximum value per clone.**
Protocol:
- Pick next unscanned target from the defects/ directory or clone fresh
- Scan → patch → unit test → whitepaper/outreach → commit → generate_undf.py → push both repos
- After every new defect: update MOAD-1 count in `~/git/undefect.com/content/moad/moad-2026-0001.md`
- Targets with no scan result and no CLEAN marker = unturned stone → scan them next
- Widen the keyword net: `visited|seen|path|stack|ancestors|predecessors|worklist|open_list|contains`
- "No stone unturned" completes when every defect directory has either a patch or a CLEAN marker
### The 5 MOADs
| MOAD | Codename | Pattern | Fix |
|------|----------|---------|-----|
| 0001 | The Sedimentary Defect (CWE-407) | list.contains inside loop, O(N^2) | hash set O(1) |
| 0002 | The Intertangle Defect | independent subsystems coupled through shared mutable global state / god object | phase snapshot, clean interface, separate execution context |
| 0003 | The Leaked Context | ThreadLocal / thread-scoped carrier holding request-scoped identity | ScopedValue, context.Context, ContextVar |
| 0004 | The Logged Secret (CWE-312) | HTTP headers logged verbatim exposing credentials | credential denylist at log serialization layer |
| 0005 | The Thundering Herd (CWE-362) | cache get+null+compute+put without synchronization | computeIfAbsent, singleflight, sync=true |
### Protocol
- Pick next unscanned target from SCAN-TODO.md or clone fresh
- Scan ALL 5 MOADs per target
- Patch + unit test (MOAD-0001) or document findings (MOAD-0002/0003/0004/0005)
- Commit → generate_undf.py → push both repos
- Delete clone after scanning to save disk
- Targets with no scan result and no CLEAN marker = unturned stone
## Operating Mode — AUTONOMOUS
@ -143,7 +154,7 @@ git push
### Current counts (update when generator runs)
**865** assigned | **865** UNDF posts | last run: 2026-03-30
**892** assigned | **892** UNDF posts | last run: 2026-03-30
### Patch stamp format