diff --git a/CLAUDE.md b/CLAUDE.md
index fa7963dc3..66714e72d 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -78,6 +78,19 @@ before cloning. If a target is already in ~/git/, scan it directly. Priority
 targets not yet cloned: pygame, three.js, Unity (DOTS/ECS packages), SDL3,
 libGDX, Bevy, Panda3D, OGRE3D, Bullet Physics, Box2D.
 
+**Image/video editors & creative suites** — undo/redo history stacks, layer
+membership, selection tracking, and filter chain dedup are prime CWE-407 territory.
+Anything that tracks history is suspect for forward/backward Möbius tape reversals:
+ImageMagick, OpenCV, GIMP, Inkscape, Blender, Krita, Kdenlive, Shotcut, Audacity,
+darktable, RawTherapee, Scribus.
+
+**Office suites** — document model undo/redo, style inheritance scanning, cell
+dependency tracking, formula evaluation visited sets: LibreOffice (core, Calc,
+Writer, Impress), Apache OpenOffice, OnlyOffice, Calligra.
+
+**BitTorrent clients** — peer/piece/tracker list membership: libtorrent,
+qBittorrent, Transmission, Deluge, aria2.
+
 **Credential priority:** `~/.unsandbox/accounts.csv` — use `--account 1` (russ-test) and `--account 0` (portal-playground) for parallel `-j2` runs. No env vars needed.
 
 **No stone unturned complete as of 2026-03-29.** All 320 defect directories have a patch or CLEAN marker. 629 confirmed sites, 571 UNDF assigned. Next wave: deeper scans on single-defect targets (allegro5, caddy, ceph, grafana, etc.) or clone new targets not yet in defects/.
@@ -124,7 +137,7 @@ git push
 
 ### Current counts (update when generator runs)
 
-**757** assigned | **757** UNDF posts | last run: 2026-03-30
+**794** assigned | **794** UNDF posts | last run: 2026-03-30
 
 ### Patch stamp format