From 9bdea940fc1759c6ec97d02282cacb9ccd3e67e9 Mon Sep 17 00:00:00 2001
From: "russell@unturf.com" <russell@unturf.com>
Date: Mon, 30 Mar 2026 13:55:42 -0400
Subject: [PATCH] undf: assign 828-832; stamp patches;
 tomcat-0001/hibernate-orm-0001/netty-0001/netty-0002

---
 UNDF-REGISTRY.json                               |  11 ++++++++++-
 ...02-fileconfigparser-allroles-list-contains.md |   2 +-
 defects/ansible/unit/AnsibleTest.class           | Bin 0 -> 3701 bytes
 ...ach-MOADX-0001-sanitize-css-gauntlet-redos.md |   1 +
 ...ry-MOADX-0001-get-task-meta-cache-stampede.md |   1 +
 ...mposer-0003-installed-repo-needles-inarray.md |   2 +-
 ...ango-0006-migrations-flatten-bases-diamond.md |   1 +
 ...MOADX-0001-cached-loader-template-stampede.md |   1 +
 .../doctrine-orm-0001-subclasses-list-inarray.md |   2 +-
 ...ticsearch-MOADX-0001-enrich-cache-stampede.md |   1 +
 defects/go/patch/go-0001.patch                   |   2 +-
 .../patch/go-0002-expand1-diamond-recur-flag.md  |   2 +-
 ...ib-0001-http2-rfc9218priority-header-alloc.md |   2 +-
 ...adoop-MOADX-0001-federation-cache-stampede.md |   1 +
 .../patch/helm-0001-resourcelist-contains-map.md |   2 +-
 ...te-orm-0001-fk-secondpass-list-contains.patch |   1 +
 .../test/HibernateOrm0001Test$FkSecondPass.class | Bin 0 -> 810 bytes
 .../test/HibernateOrm0001Test.class              | Bin 0 -> 4950 bytes
 ...X-0001-query-interpretation-cache-stampede.md |   1 +
 ...tus-creation-processed-account-ids-hashset.md |   2 +-
 ...itypub-create-process-hashtag-tags-include.md |   2 +-
 .../patch/netty-0001-alpn-list-contains.patch    |   1 +
 defects/netty-0001/test/Netty0001Test.class      | Bin 0 -> 4011 bytes
 ...ty-0002-dns-resolve-dedup-list-contains.patch |   1 +
 defects/netty-0002/test/Netty0002Test.class      | Bin 0 -> 3975 bytes
 ...a-orm-0001-rbac-role-hierarchy-diamond-bfs.md |   2 +-
 ...x-chat-0004-introduce-to-remaining-notelem.md |   1 +
 ...hat-0004-introduce-to-remaining-notelem.patch |   1 +
 .../solang-0001-emits-events-vec-hashset.md      |   2 +-
 ...actory-getnamesforannotation-list-contains.md |   2 +-
 ...1-fallback-cache-operation-source-stampede.md |   1 +
 defects/terraform/unit/TerraformTest$Graph.class | Bin 0 -> 831 bytes
 defects/terraform/unit/TerraformTest.class       | Bin 0 -> 4744 bytes
 ...001-websocket-subprotocol-list-contains.patch |   1 +
 defects/tomcat-0001/test/Tomcat0001Test.class    | Bin 0 -> 3631 bytes
 ...001-hamanager-nodeleft-nodes-list-contains.md |   2 +-
 36 files changed, 37 insertions(+), 14 deletions(-)
 create mode 100644 defects/ansible/unit/AnsibleTest.class
 create mode 100644 defects/hibernate-orm-0001/test/HibernateOrm0001Test$FkSecondPass.class
 create mode 100644 defects/hibernate-orm-0001/test/HibernateOrm0001Test.class
 create mode 100644 defects/netty-0001/test/Netty0001Test.class
 create mode 100644 defects/netty-0002/test/Netty0002Test.class
 create mode 100644 defects/terraform/unit/TerraformTest$Graph.class
 create mode 100644 defects/terraform/unit/TerraformTest.class
 create mode 100644 defects/tomcat-0001/test/Tomcat0001Test.class

diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json
index b7c521d3a..8c6fa76cb 100644
--- a/UNDF-REGISTRY.json
+++ b/UNDF-REGISTRY.json
@@ -821,5 +821,14 @@
   "hive-0005": "UNDF-2026-000000820",
   "loki-0001": "UNDF-2026-000000821",
   "telegraf-0001": "UNDF-2026-000000822",
-  "ansible-0003": "UNDF-2026-000000823"
+  "ansible-0003": "UNDF-2026-000000823",
+  "bleach-0001": "UNDF-2026-000000824",
+  "go-0001": "UNDF-2026-000000825",
+  "go-0002": "UNDF-2026-000000826",
+  "hibernate-orm-0001": "UNDF-2026-000000827",
+  "hibernate-orm-0001-0001": "UNDF-2026-000000828",
+  "netty-0001-0001": "UNDF-2026-000000829",
+  "netty-0002-0002": "UNDF-2026-000000830",
+  "simplex-chat-0004": "UNDF-2026-000000831",
+  "tomcat-0001-0001": "UNDF-2026-000000832"
 }
diff --git a/defects/activemq-artemis/patch/artemis-0002-fileconfigparser-allroles-list-contains.md b/defects/activemq-artemis/patch/artemis-0002-fileconfigparser-allroles-list-contains.md
index e90dfc270..e1cc38408 100644
--- a/defects/activemq-artemis/patch/artemis-0002-fileconfigparser-allroles-list-contains.md
+++ b/defects/activemq-artemis/patch/artemis-0002-fileconfigparser-allroles-list-contains.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000234
+# UNDF: UNDF-2026-000000602
 # UNDF: (pending)
 # artemis-0002: FileConfigurationParser.parseSecurityRoles — O(N×R) multiple ArrayList.contains in role loop
 
diff --git a/defects/ansible/unit/AnsibleTest.class b/defects/ansible/unit/AnsibleTest.class
new file mode 100644
index 0000000000000000000000000000000000000000..25140ab46978033c7ac57cd20e144639440cf7a7
GIT binary patch
literal 3701
zcmcgvU2qfE75=WY(yryTV+$-W;6y3V*cjOcf+2QHY-|j6WgC!zIJ6;aYi%!<cOC7@
zv1!u$k^a!%q-_GEO<Vfoq;1-1Izu3&nZC8tKBP09P9OTxnZ9(UuYD=g;(m8mHd2Ak
z(1+?__wL<u?mgf6zH{#CH#gq<06-6Z5<>`K6^f1sq5?Iijd`OrXV_D%Bjcyd2~QyU
zuw`4`K7nv!)A0&us8A8pQ3+k3vd4C<@tiqoy0i>CbFP3GR8cLk#$T!6S-IApeBM}0
zTdo&F6~dLMMO?)i9cxi1P<_)*nh0o?XXXvh$qOVJo6<L54;1G+E3ppiRn+U)fQ<t2
zTTKMiX~P{h7i3h8O^->B1|9d}J^{t{r`N8mT>`dK#r<VD$as0no{BS7n{{l#R)KZ1
z#*EqP*b|0#!t$m$ay`TLh`X+Fpct*cV&K{tLlO_@Xhah;X+Bvna=vK*t8{A_WG$L?
zY?r2CBb!yxB2ar1+#$oA&X`PMN+xj!cB<H=<3VX&b<>I#%;AJ%dxmAZ(yloUfz1`z
zi-%Nn=;*}5<scVb&zzO?73f+Qgl0Ldhl$-I4AYqH)Ib63G6J?!ZEbBkJCcVS*K1*%
zr>62wVXm<$nInJ6S#x&W%)8UpT+*E|>=?Syqhh~~Ui7V~qI_|ZH7B>q*)oYGnJK2Q
z>9~e|?%s9xKMjWj)^APib(33nJh*yk<H+4=YZ#<l4{AtL$$jP|<=#jMH)$9ai1k|w
zX14fzSRiuL@GM8eQSzAa46ooyXrnrg;W(#!1d{>}-v+?R5==o=brzLUo(PIX!=pOJ
z@E9{O&GhzUvj=5zgW#-rlk%m^2BqQ0b$mh^)|MLjLC0_kPpB|-jALS@!hEd_8QwIB
zo;4N-sBv(xX)xNomg?qD!xR@k+>^;@usG`P8AxlG5!lG|Wo7zSFKsP5CKvn+#xM(8
zg`;B*Pp*j7-)X@1%qf#Ktj-&`f;qy}B+3h<XhF~}JQW4G#(Y_{X~$+vYZ?bj>q<`2
zX90^U&Pbn6mWjE~DX<?&A@!Ad1=IBF#xqiiQ4P-u>@5-WE(+SPvpF;0VmqESxp+$E
z^$x1m@VvmDyVs-dq2Wc!?vUj0B^{rZ944lNt%v=cSJ{>(pVjd>X%a6p@p;zpd6s%l
zI-Lw?`=UTaW@P9<QgRn#y?<H9SMV~)G#4zEwv-OFs`NTpX6T-@Wt+nVS*@dnpR+3J
zdSYhCm@7Ujvuq)fw^9MG7Nv^wB<D7-R9qAYog82dWt>8O!tA#sBQ+&wMT_iLoZ9a=
zp6lg}xgpb=cCxO9Z&5LRKS>D<-(g`%7E<D#D83uR_waocKaibxNnnfL^L(*c_PjG=
zwg#aE&AH#0;1RMYaK5x4i-y5&0p0GFwByVa<~mD?w1}}}rp$44an8Jrd1)%j%e*wm
zUL%*w@QCXa&<AYW%=hLD*EL-gKNQ${3#QwJs^Z52_x^WNW-h>m`zfLj3!GAshc-u1
zj(OVi`U;;Kco)1!w!I7SGvDy5MI)e^PHaa-)89d%8<4B`In-;Y8he*23U_VVa0!ow
z_cdQdjX;M|uUth!-~v)|v`OHXNOnZtff_UDRv+2)9zFtG#z!weQ}!((y0rXZ!$s6I
z2QRK-TL>r4hQ!kHTXcGx`-LDQ+UW<MU<~Uxs>d2^L>)F^7a?@=Y#+vbIKt!h7$J}I
z{WNv*HTrEp^k1k}Q7d>8D%Q1KN9a0gt}_Xm?4d<;Z*paY_Qy-nT|<f}TZh8?8i=xE
z1;zFTAH-F(g>VrK%`1;G^woE}C5|w0{HhGcHpI9~Bll_|j&1x5+D;@XY(@()w&D@A
zA<em?L?+{}LHGs|j9<kLu{(&GU85NFAGwZ7tJ`tHgti02;dZ6SO{6|j<fciEirhq3
zP}N6MJ}nhWyW;cm`#R+!Dw|Vx<fNTnbU+7V=p>dda<Y&4?j|EWoY~J#+e;jM<m3P&
z?k6u@<YmCe)v(Ho4=*XH*-mQy0X+c8zE?s`gc}{bGd1m`fM7e66)@YS`h0ron&r@^
zMh;eK`E403Evyb;h){+JWrVaGAuUHqO9sst<>JRk&2b#!{4k5+7HW3Ls4MVwyc$Fu
z`ZI~CX5qabeLpr9uEnoM#*|v|_mQzkZTPPvX{GBO?1^_>#v}56pm;y1{Q{w}aC{&$
zro=y%8H>b+GGo#BNM=lpAIV%s=0x*w>VtMA+#acm)G3#6CRG<{X^+-Lui(TURo+hS
zsYs~j5*4v4c>J96Q04l{waC8qI<)xY5+d>Gj;i{q_#~OWh)CEE;&ia7bk1?#gn9*e
zZk?#`@6q*@SMU@AsIT$^I2)m+Ut-Xg@w5#6Q^nAq`ws{&{0|V$1`s~;|AnxLttfs@
zCg%&pz$Z1l1Vy=mFUf`&w4Zs38f+H{JdX7+*l5OC#1quQB(j*o427MCg=cXZFZ1b}
z$l*i2`vV;OiEsYG@0`EE6Sa6sJb(q!f<>_#XT*Mf!HnW*@dTa`ukhV@JSX1Z_r*`~
zg1CkkeVx6E>SdfjRK;s5F0fE82)68H>_)6~N+?R0|LRmE|A{JIm$66wx$}L18|d>L
z@6zpvitc49dUc@?C%Aa5n{#;G&(AlARvs21T%zS0{`K2<lXEdXzl9&+ZPfo8c~e`O

literal 0
HcmV?d00001

diff --git a/defects/bleach/patch/bleach-MOADX-0001-sanitize-css-gauntlet-redos.md b/defects/bleach/patch/bleach-MOADX-0001-sanitize-css-gauntlet-redos.md
index 7f8d3a94b..fab54f4c6 100644
--- a/defects/bleach/patch/bleach-MOADX-0001-sanitize-css-gauntlet-redos.md
+++ b/defects/bleach/patch/bleach-MOADX-0001-sanitize-css-gauntlet-redos.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000824
 # UNDF: (pending)
 # bleach-MOADX-0001: BleachSanitizerFilter.sanitize_css — ReDoS O(2^N) on style attribute
 
diff --git a/defects/celery/patch/celery-MOADX-0001-get-task-meta-cache-stampede.md b/defects/celery/patch/celery-MOADX-0001-get-task-meta-cache-stampede.md
index 0b78931bc..7f3fe72db 100644
--- a/defects/celery/patch/celery-MOADX-0001-get-task-meta-cache-stampede.md
+++ b/defects/celery/patch/celery-MOADX-0001-get-task-meta-cache-stampede.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000025
 # UNDF: (pending)
 # celery-MOADX-0001: BaseBackend.get_task_meta — stampede O(N) concurrent backend fetches on shared result cache
 
diff --git a/defects/composer/patch/composer-0003-installed-repo-needles-inarray.md b/defects/composer/patch/composer-0003-installed-repo-needles-inarray.md
index 215cdac14..b53690e73 100644
--- a/defects/composer/patch/composer-0003-installed-repo-needles-inarray.md
+++ b/defects/composer/patch/composer-0003-installed-repo-needles-inarray.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000045
+# UNDF: UNDF-2026-000000605
 # UNDF: (pending)
 # composer-0003: InstalledRepository::getDependents — O(P²) in_array on growing needles list
 
diff --git a/defects/django/patch/django-0006-migrations-flatten-bases-diamond.md b/defects/django/patch/django-0006-migrations-flatten-bases-diamond.md
index ceebbec4b..efe770d46 100644
--- a/defects/django/patch/django-0006-migrations-flatten-bases-diamond.md
+++ b/defects/django/patch/django-0006-migrations-flatten-bases-diamond.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000379
 # UNDF: (pending)
 # django-0006: migrations.state.flatten_bases — O(2^D) diamond abstract model traversal
 
diff --git a/defects/django/patch/django-MOADX-0001-cached-loader-template-stampede.md b/defects/django/patch/django-MOADX-0001-cached-loader-template-stampede.md
index 207250d32..0b2b436c0 100644
--- a/defects/django/patch/django-MOADX-0001-cached-loader-template-stampede.md
+++ b/defects/django/patch/django-MOADX-0001-cached-loader-template-stampede.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000047
 # UNDF: (pending)
 # django-MOADX-0001: cached.Loader.get_template — stampede O(N) concurrent template compilations
 
diff --git a/defects/doctrine-orm/patch/doctrine-orm-0001-subclasses-list-inarray.md b/defects/doctrine-orm/patch/doctrine-orm-0001-subclasses-list-inarray.md
index 346300159..533e3f502 100644
--- a/defects/doctrine-orm/patch/doctrine-orm-0001-subclasses-list-inarray.md
+++ b/defects/doctrine-orm/patch/doctrine-orm-0001-subclasses-list-inarray.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000002
+# UNDF: UNDF-2026-000000606
 # UNDF: (pending)
 # doctrine-orm-0001: ClassMetadata::addSubClass — O(N²) in_array on subClasses list
 
diff --git a/defects/elasticsearch/patch/elasticsearch-MOADX-0001-enrich-cache-stampede.md b/defects/elasticsearch/patch/elasticsearch-MOADX-0001-enrich-cache-stampede.md
index 343352040..a8b2308eb 100644
--- a/defects/elasticsearch/patch/elasticsearch-MOADX-0001-enrich-cache-stampede.md
+++ b/defects/elasticsearch/patch/elasticsearch-MOADX-0001-enrich-cache-stampede.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000385
 # UNDF: (pending)
 # elasticsearch-MOADX-0001: EnrichCache.computeIfAbsent — cache stampede on enrich index search
 
diff --git a/defects/go/patch/go-0001.patch b/defects/go/patch/go-0001.patch
index b23327bd6..fe325cdaa 100644
--- a/defects/go/patch/go-0001.patch
+++ b/defects/go/patch/go-0001.patch
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000081
+# UNDF: UNDF-2026-000000825
 diff --git a/src/cmd/compile/internal/types2/infer.go b/src/cmd/compile/internal/types2/infer.go
 index eeefb117..cwe407fix 100644
 --- a/src/cmd/compile/internal/types2/infer.go
diff --git a/defects/go/patch/go-0002-expand1-diamond-recur-flag.md b/defects/go/patch/go-0002-expand1-diamond-recur-flag.md
index b756d9f38..fe4b805f2 100644
--- a/defects/go/patch/go-0002-expand1-diamond-recur-flag.md
+++ b/defects/go/patch/go-0002-expand1-diamond-recur-flag.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000562
+# UNDF: UNDF-2026-000000826
 # go-0002: cmd/compile/internal/typecheck expand1 O(2^D) diamond struct embedding
 
 ## CWE-407 — Algorithmic Complexity: O(2^D) Exponential Blowup on Diamond-Shaped Struct Embeddings
diff --git a/defects/go/patch/go-stdlib-0001-http2-rfc9218priority-header-alloc.md b/defects/go/patch/go-stdlib-0001-http2-rfc9218priority-header-alloc.md
index e4a0ac286..9d3505dd7 100644
--- a/defects/go/patch/go-stdlib-0001-http2-rfc9218priority-header-alloc.md
+++ b/defects/go/patch/go-stdlib-0001-http2-rfc9218priority-header-alloc.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000081
+# UNDF: UNDF-2026-000000825
 # go-stdlib-0001 — net/http/internal/http2: rfc9218Priority allocates []string per header field
 
 **Severity:** MEDIUM
diff --git a/defects/hadoop/patch/hadoop-MOADX-0001-federation-cache-stampede.md b/defects/hadoop/patch/hadoop-MOADX-0001-federation-cache-stampede.md
index c57b0b7be..08d721813 100644
--- a/defects/hadoop/patch/hadoop-MOADX-0001-federation-cache-stampede.md
+++ b/defects/hadoop/patch/hadoop-MOADX-0001-federation-cache-stampede.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000096
 # UNDF: (pending)
 # hadoop-MOADX-0001: FederationJCache/FederationCaffeineCache — cache stampede on YARN Federation state store
 
diff --git a/defects/helm/patch/helm-0001-resourcelist-contains-map.md b/defects/helm/patch/helm-0001-resourcelist-contains-map.md
index 30c0bb4f3..dd0cc73f0 100644
--- a/defects/helm/patch/helm-0001-resourcelist-contains-map.md
+++ b/defects/helm/patch/helm-0001-resourcelist-contains-map.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000232
+# UNDF: UNDF-2026-000000104
 # UNDF: (pending)
 # helm-0001: ResourceList.Contains/Difference/Intersect — O(N²) linear scan
 
diff --git a/defects/hibernate-orm-0001/patch/hibernate-orm-0001-fk-secondpass-list-contains.patch b/defects/hibernate-orm-0001/patch/hibernate-orm-0001-fk-secondpass-list-contains.patch
index 075bfe640..d2cec8f9f 100644
--- a/defects/hibernate-orm-0001/patch/hibernate-orm-0001-fk-secondpass-list-contains.patch
+++ b/defects/hibernate-orm-0001/patch/hibernate-orm-0001-fk-secondpass-list-contains.patch
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000828
 # UNDF:
 # Defect: hibernate-orm-0001
 # Component: org.hibernate.boot.internal.InFlightMetadataCollectorImpl
diff --git a/defects/hibernate-orm-0001/test/HibernateOrm0001Test$FkSecondPass.class b/defects/hibernate-orm-0001/test/HibernateOrm0001Test$FkSecondPass.class
new file mode 100644
index 0000000000000000000000000000000000000000..cbf02bf88acee3999e8e1915421b216ff428ec4d
GIT binary patch
literal 810
zcmZuv%Wl&^6g}fd#xYLfrgb1ZTS#f*RBaFo7DWhDscNM@kX%(Ntej-jx^<l5IQ$EI
z0Bo{BqJWS<u;rT&;*MhpBV{pj=Z^23bMCqR_2=t%0MF1ep+M!(Ea)gO*k}H0e?9c0
zll6n{ndl`9g~ve@Bu^OBX6vX314Rzg!WCEyOWQ$L#F3wfgLu&CbRHavQPS8t_e5_P
z^`HBr5rdxi-B2)8cmH8~NgPBc8xpN-p(3HmeQ_b8zKD`TS#M$vRgQTJ3vm9^HGNCE
z#H+C%5`ojqAx~9rv|gCFifbHo3)gXjVJ;;fCqbAsMh~@9e{{-FYrdQTu*0yD2hJqt
zDzlr`5g~03`_y7(H;BakctD<{O)!+a#P6N&`4?GkNXlt3*-0FxHyp=3u@y**>a*-z
zlgb&4eX@3YI7&F~Gc3%iWUzLkNW_~V884_oD?bS=lG_SRU4bp9M<-iaPf?|%<0cqx
z(dnW5B`8+h&tPu*65L(AMCk)vG2EuT3XS$M?G+RWq)f9SNpLcNK?d;1ZNG!AP1-+U
zyoIh#+CO0IxgWt-X?=qI1`cH<%1UX*wfE4}34tp)qIqxvw+Y@s4R`3P1&tfO(cmzi
zG9q2XQbxT-q8L@w^lwm(RmtTYYm&tKf|^90wopi`>eT1ml<giGX<Wt%MU%c7SVj}Z
EU(eg6TmS$7

literal 0
HcmV?d00001

diff --git a/defects/hibernate-orm-0001/test/HibernateOrm0001Test.class b/defects/hibernate-orm-0001/test/HibernateOrm0001Test.class
new file mode 100644
index 0000000000000000000000000000000000000000..38620d91322c8eea6d283f1fbad0d14990ac15ca
GIT binary patch
literal 4950
zcmcgwS#%rK8UC&%Yb1FTJH|2*K_G~oIF5}S3JLL&#Bt)p!Er)l5*!L)ERF4nr5Qyt
zGBIm=n$ngobcdz|+LSgeU7!IHFJ);dlv28Hy!WB!v=8k=pK=KFyQ5JoCnn{zr#;6<
zbMKx1{_}s|zuf=&^|xnV0MLUs!>E8yfnP->0s=LMv`MWkqnTrEyGIV`DMujCWtfJu
zQNY)<dS4ZS2q_4wsDdgGam5Rck!jnd<tQ?ybH~c2f%DaLuD)<d!IA|UlDboc2x?R;
zMXf;4aP++9Sb2f^CU3j@rG9U{vkG;HDyUa+DV7P;&Kpw_5m3f8dr&_@t7!fKx#Kbw
z%W=7Y-*lJjO1jHHcPh9-;Hn+Qh@Lk!N8g>#wzs#h9nx*5p>HCorz|tQN3-n^;z+2t
z3Rep(N$WY?OzWmIq>W^Bnp1{2>EsP_tTT)TG%8rBVilSekX;lY+4|vvmazq*i*a}$
zjApD+(4wLh*9g=tW+9hH3PvWqS5Fo4wlS%1(MPR34eIk$x+D%5w$oX(u;e~(>hj<j
zd?5rG0_|9<;93>$lOUGNvo3YgZ)C^O4AYi^*Q;2E^(0?Qr==hJ%QO}PtaJ4~iE4w2
z4s;4!ve5RPQ94`T=8KumxcN_!M6gzd+(v0-lY-3xOXuP2(Cl$Wbr_rAt7W$Is@RHc
z0+(jB3BA`cQ<}5iaK<^Z9nExHr}dY|xkq9x1h%W#fqsEXEtkto30zr<I+y&>f|+s*
z%WUiO1`O>WZd5UVT>{l9E1N4gdjDw8h|TyC=v^c@%6xgDx^k;L+QW?9-7@R<2&^jC
zcM;bs*h>%1Gt`sMYg5weVcY~?5H|}{IPD7dU%(@M6vjUILUi>36}RI3RMfx}((@9y
zz16T~)-Xl{le8VTt2l@|n54FG7ekl1+pl0mV43@IH$;0%o44ijR=$>XEG->GX@=Qi
zeh5Rum_$7OF6rfl_90o?CZxmy9c8RF*20J05G>>r99EGBU0+r>lT)^%XKA!mps%7u
z#~4=I9@YSd?CM&!vlf2zhB1jd6&z79g}X|`E)-+|%gJpS^E{h9FUjPwaF2?6aUWC9
z)J$v0$QBvf8N>$!y7%-XlZl+3XA#J1W=ii!jJO4%yD^=$6Pir0;*iDGu(}(sSvz_p
z(KN`l)s1E);~uEqvN?>S_^^TpRD1*<EoHsyhXKnRqnVRhrl9X0C5)z><>4k@v+zBL
zk1P0u-2KS~WNozyZncayZ7ttbT;{%q@M#5~k^4Sd3M%)j{idUj$<jb)mv8jexpNYq
zSMddWkww*|kfwDl66d!rQjr#QSzxov1yIWnIwnKy%hD$c%=Wwz#G?X@F7a9>lW=%$
z*a`BV7%!bDt#n4KJW~`r&WbXhQUiuLp{Hf(aZ~0o_`*1juPb;$#W&<BS3REry%{DD
z8A$84k=N7b5+dnnPJu7{y;ho`P)(isU?I!H%sZMQlt@jmwt4eV(ir18SCFT~Gv}Au
zu7Sl)nFZ%y=f?92a90_r3+jnm?uhKYDJ`k}cSn-IU;b;W-?LFgXr)8*|Blq3<=HC3
zzC3WxRRcCu87(`K)*7T(L%YC=MPlAdn36Mi>;}718L!O?C#^z0rS}=KiHR-d`)gzf
z3RDd;u6OA&u4Dn+Vp)#u<h9%`-5Iyib`YoJaUg1-RtGR65BXUY-^Wumcq)kJnLA0=
z_C(gOvzn6{??{Nmq@55!yvQ1|%UexoPQqYUbws}Sk-%CvsZv%x&)(G3ZCh^ZyD^cI
zM~R)V@@bu!kT7H)W~7*WQ$f5;61E-5aRc8_Uq;t#CvokOgq_p%bRpN07_*#&ppmbH
z@hX0*;5C`uKNDz}&o#rGv?lbnBGJXezfViCJLO^iNIAuxV3C9!nwie%cEf;WO%!ro
zlDtbaFW5LVmD3jyFZX$=eJV>ePem_rC)quB64KAZcmuys@JkiH!mkCcz5vpI8!xn1
z8!Z8<%9hXG_}|03DE0*}i;R|2v*5MMTlsl#J|zNbziH}uw|44`TeZBQSMYll?h7bd
z%$W-QC~(EaMS1iTJ<lsbGaD2@)GU+D4@UuZg}id{_nVx>`4oIsHlK$0ffU3EPY7%U
zgR<YJ0x9||TL*>DgKJu6pj6-`L^}L2|Et&&^Ut7KprbNYIfF|CzJzW$iV4cZI|8x5
zv$(S56jmI=lIArn?sOWfn`40)v{m33)MlR?U+2S#cV3i6RJca0M2O?7p<)GZW)1Al
z8qtN7*p4Rb#cJYNgWGA~w<vWf{AY2Qf{22;x6q;>eg>DEp`vfQ>YgMLw)q~Cmq|d7
z>xWvT<sK9o|0)hhyCoDF?LpZtM;;U<rVvW23#FP+THX0HZdemjX3!<EMBQO`1@;pZ
z7hO=#&4X%2m|wo0&Hp+c=<Bf-H=r9E&`;}z2=6w|M%noryd<9kw!8$a)dhC>Jh1PO
zqwnH-MQ{3=Ijbgp^-IM+yXLTI_%wQU`8LLv`_sqK6`#cxpu->c-%%V@68|jvfEn!c
zNq^2EJ{<GMDo<l@1`@+jpE&W(%X7Ginv#R9Eww|nLv)?D(BYrMKEAnyp64#_?F}a}
zd<?A&lG|9vNiZLeBR&Uhc){8%Qow19zUW&Qhz5$Uj-$A{r8P>{4H;zdnBN<pLgpB1
zrJiVD7TMzFqXB8*Nti_ivv7b@C@jTm>jJ)YN>r(-JC2T$!NFMYd<?-7hEOaR3zaY&
zRjBrrY23YD@vRF*L(#x-Twc-=j)hBFj)o}rXUf$p`udP3UlpyA@~cYnYUvY^m>P?m
z`$QGDzUghPst-L_U-h81Awnp%_bbn%V%S$7s>27f)A&$w*k50DZd|!6GL4TVhXc!}
z@u}n~d~UzX`0{0uIz0UFqeY6AMP`|YF27RaSIEhH5Wavm2H`d)bRV;8JEFWK#u<XE
zu#+KjBWK$&h~2z6?csH3FUFC?VTR|uTzLfh8E>~>4#W5>pa0;MO5mUf@S0SEl!zfM
zR`52|f>Cij#zYU-x8sl);N@l?GU6bz!r<6~CGNywaS!t10p4UDf+HS5K|I0vlekly
z#FUuh_2doQE&j&m-*Hbx1ou`%ai5zQ8xeV%|Hx4g6lbvMZQQPaH$eVH-a>`ga0ZoU
z*|zds_gN@@KCe8BYWZwFixI!CCM;WmV%{LZ!XT?4W8pEz^H-ndxV#YVWVv|yT+O`B
zl?9g8HlM=Rj#2vw_<he{c%EQcUS<818C;19bu*h{6kngjGhFmjAkLBs*5?3z!r60p
po!7h5m?pDw{zLco1^4$Q_xH#64dvy9GtOPVrTX9D5BL*e{{q!FKGpyL

literal 0
HcmV?d00001

diff --git a/defects/hibernate-orm/patch/hibernate-orm-MOADX-0001-query-interpretation-cache-stampede.md b/defects/hibernate-orm/patch/hibernate-orm-MOADX-0001-query-interpretation-cache-stampede.md
index 16dd742b2..7e5190dd7 100644
--- a/defects/hibernate-orm/patch/hibernate-orm-MOADX-0001-query-interpretation-cache-stampede.md
+++ b/defects/hibernate-orm/patch/hibernate-orm-MOADX-0001-query-interpretation-cache-stampede.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000827
 # UNDF: (pending)
 # hibernate-orm-MOADX-0001: QueryInterpretationCacheStandardImpl — cache stampede O(N) concurrent plan builds on cold start
 
diff --git a/defects/mastodon/patch/mastodon-0001-ostatus-creation-processed-account-ids-hashset.md b/defects/mastodon/patch/mastodon-0001-ostatus-creation-processed-account-ids-hashset.md
index bd0baee8f..773ba43f3 100644
--- a/defects/mastodon/patch/mastodon-0001-ostatus-creation-processed-account-ids-hashset.md
+++ b/defects/mastodon/patch/mastodon-0001-ostatus-creation-processed-account-ids-hashset.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000015
+# UNDF: UNDF-2026-000000609
 # UNDF: (pending)
 # mastodon-0001: OStatus::Activity::Creation#save_mentions — O(N²) processed_account_ids Array#include? dedup
 
diff --git a/defects/mastodon/patch/mastodon-0002-activitypub-create-process-hashtag-tags-include.md b/defects/mastodon/patch/mastodon-0002-activitypub-create-process-hashtag-tags-include.md
index fa1f2a253..151b8407a 100644
--- a/defects/mastodon/patch/mastodon-0002-activitypub-create-process-hashtag-tags-include.md
+++ b/defects/mastodon/patch/mastodon-0002-activitypub-create-process-hashtag-tags-include.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000016
+# UNDF: UNDF-2026-000000610
 # UNDF: (pending)
 # mastodon-0002: ActivityPub::Activity::Create#process_hashtag — O(N²) status.tags.include? AR query per tag in loop
 
diff --git a/defects/netty-0001/patch/netty-0001-alpn-list-contains.patch b/defects/netty-0001/patch/netty-0001-alpn-list-contains.patch
index e89e21754..21197beef 100644
--- a/defects/netty-0001/patch/netty-0001-alpn-list-contains.patch
+++ b/defects/netty-0001/patch/netty-0001-alpn-list-contains.patch
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000829
 # UNDF:
 # Defect: netty-0001
 # Component: io.netty.handler.ssl.JdkBaseApplicationProtocolNegotiator
diff --git a/defects/netty-0001/test/Netty0001Test.class b/defects/netty-0001/test/Netty0001Test.class
new file mode 100644
index 0000000000000000000000000000000000000000..48cf2d867706d2017b90add046480d1715bc7743
GIT binary patch
literal 4011
zcmb7HTW}j!8UBuLE3Y=TtXPia+?3Q#?D!Vv;v|w2VmtTRj)`0wCEV81v8`CzRkf>N
z7nl}EX$h3;l(vDk5DMW^XqrNN326(w!85}HGo9gqfhV4Lq0=<{XIF|>j=~HxnmuRt
zzkmPb9R2abmA3&5;P*0Ia7*wg@WRIsyr^DMd$OuF({py}B2SqNzW$7sF^@2~+uA1r
z@S{e8tRMh|VV%WZG&9+r1Sej9#^eRn)C&xaZSBLW)YGN!@c?R3Cn2by9wCO%gDecv
ztZIz%dD2HF&kKnL1z|KYcr@#CLs_@O(YS=B3jY&kA*0O%(2R`|HYwPQEey4*_J%Wt
z@HnMwrkc?VhH#thuv2OKc?nU5`c<)0sxeEk%GiqS0<=dMA|*i!hao+iCEPN)7PsLd
z>pK`WtZEp}XmdPW(&I-PgKKt=AG^qzS<}q-^mh09(MfMcKE2Shx4TzHH+m%OR?v$*
z<rpnv1BHURK(6~#!w#pl?Lw6x9ElKYaT%@HE@MCXBpgt15Qiw0quewXcJJQZJI)0#
zior!3gM3;qaE86k7%BevTAihATj1HylbQX9E9e*M1Gc(>X)1&o`hG;gM{ty3eT!-s
zyddy0j%5sWD$COh?7WOY3`sbq;5bfHB*3mq5j20isAg%ivr6Kspg^fS#n5CW!g6z<
zZ25Shpcni&L-lx$8^x??L~}*MjOJ7`H7nyJhDD}F9#SF`H8_hg2_IE(4vBJpY#<g4
zljo?8^&&wUww=o8J!4dwCZWXDTs%aL_?UtTOj4EP)Hyz+Ybn*7%$T#ZGfY)8DaIYn
z7)$t8g**w0^MZnp;}e9g6>OzJ>aV;opVijHQ`R~m^7bhOpN2{eW9N;h%Z1SDECj2X
z98i~4Q2O>Gr63I|opoguR`MBIoElb3$yqt=q~Ijne#}zOi#G7%BK6tWKq3)M>4gFn
zrp65;TGlKI+8qKzP5@~IcDf2WVtVBjJT4}ITTQ1W5VAH#tL-FWl2H))T*!&}k(VjK
z^9mO51a+mRYWjF4M}g6FI^)OZ7zQoJ^1ML3l2f%5k42}fzB$~Q&KXfv6urHr;h516
zw|4hV&qv!5^es9@kM>s0OH}~W4IY*86uuzgiweGk%jJP(VKc02GnBkbYPQJFPLtzp
zXPhw#GPT^7@r;CLh4fb{O7WOpq}~!KKjxIOKa<>7@iht03AwMA+s(3iS~K|!w+4Cz
zq^0j9nZ!30d<);Ej<gDkT<fn=tq&hemGv3-9ks9kLU7}|BB3ul;C89d{CJ6BvxUBz
z%|=a{Tt<|V5Y@ym>k`vU#`o}j2`?*nMI1PFtL;COrO`tNRhk=_0#Dzc1_@I&i$w4Y
z>1hJ2j^;HVE#{_pVO)$SDrn+J&5fw}(tAxJGoz7=n3EUQ6nFoF-Em~??5xV;Oj0RY
zhC@#6qEM@fK4`N2Ji|e!EVbSLA?nG|2`P?rXAaA~J|W>}RE$+f)GYm}Z0YtOC-h<=
z#ZP1ef}x7Trd#BMigi%eO~Wjx`4Mi;>S@D|HyAcOr0HYPoouHcZ;GR(n9u74lc&3w
zA8#?#=+o1jGAdqw!|=%Q`8*8_o{p+!G|N>Q?0e>;MxOI@G2a=T(ak8U^I=iO5|$;b
zh>E*SV`{ZhGTJ45j`!FR+vE9!nxbpY0>g{WQZF&u{-08{be0<}!@53K%$JhxoN|sl
zRS1qR<arf#C&Kn27<U#)NyQK~LV~VgaXP|JYZ@<DWzG!=Z!@$$5K}c*CA`b9<$tqM
zv)gfD8;yDwbu0@ui6fnM5)ERyP15sKdfQAZqt&}>5$sLcF#Ld?f-G45;`%`f1S_Z2
zLu<#bWk?Jooy%Cq@DeuBW<A5Z*f84BwTy_1zInTDT)+1>c7xbmmcmA|3A&axLqQAH
zVF&8ajv#(WUlq7NfFz-I%lpKA&64>MnWn2r$@DzU8X<q+Hnt`^7O`!__F<IlSw3u~
zjqO9s(;4wBqeXb(i+IS5_Z)6CQ)HmqY7H96jSc8Q6ZVi(`?1k-r4H`92vXeS&9+K!
z=)f&`6QxyP>fhC2h5I_~ov=kqF}y}G&>34ziriZ()l!oBF*)}WTqlhLx_djlH4uod
z+h|St?qEaG9om^ldP41qq&L)&SVGq#_70aQ9fCq+FOi8d($TqueWT(Ti+OJ1@KrQ+
zMLbIwxQcbRaWWY?y@*HOxrx!P6^sM7@G)<N3DObs3d|#30zKxlRBVcPLpzu7$%s!Z
zQ?DW*R4rnf6p;l%p0UZaRFX$S8M0B&{@o{uhhGG>h`CseyH5_wVd)y0A~j)o1zBJj
zx(kz+Wp@4EKW?Kyd}d5`_XWa%uwU@W;lK)tg71>x3kW`oT<`wpHAEsc5t)LYwAYx;
z@b~)l&-MkD@R<XOyRSA}8xCAUeVOxeEvfhy5gQeLpti&m3<n)dq$cQK3O3eWX$)S`
z4}}QA&}aR3;7Yn1Ya8(S+!CIoTr>vn@4Zc-B|M!-`ohu@t|XFD*e}*w_{O9K+s39)
z1HSXZ%LoZHn?fsi9w=oe^dg}qn$zy3tJFQ9?%9G}RJfgpql@n2-MB#IJVWLD1oq--
z?89qB{R8^&C+ed=BZl{g^Dg?C4~JPRUGH~efE~mjJ4*W#IL;oWyZjhVvh#EkpQ3e^
z?%a6{vm#xtpTsD8hSujW#-7JH_6psl-@rKg3$1^}W9&bea4}3;O{Agr9y#Nc@KdXk
znk8(YAISJA3H0XQa*qa2U=7_SF-CM6KJR1WUBS}KX!ikJv~2#6{?&SD({LAcrFG8Z
zrY`&W{du;}8eBkqX#Xu-y$Z>59Uk{vIJ^p9dA5ns<AqB(N_R#4!b10T{F2sY8gsWu
a&#$cK4eNQ+dj1-}CAv(sJ9r1bL*&1){rw04

literal 0
HcmV?d00001

diff --git a/defects/netty-0002/patch/netty-0002-dns-resolve-dedup-list-contains.patch b/defects/netty-0002/patch/netty-0002-dns-resolve-dedup-list-contains.patch
index bcdde8a7f..6bd03472c 100644
--- a/defects/netty-0002/patch/netty-0002-dns-resolve-dedup-list-contains.patch
+++ b/defects/netty-0002/patch/netty-0002-dns-resolve-dedup-list-contains.patch
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000830
 # UNDF:
 # Defect: netty-0002
 # Component: io.netty.resolver.dns.DnsResolveContext
diff --git a/defects/netty-0002/test/Netty0002Test.class b/defects/netty-0002/test/Netty0002Test.class
new file mode 100644
index 0000000000000000000000000000000000000000..6428e0f09891ccd48c65bd57505539937ed1bc4e
GIT binary patch
literal 3975
zcmaJ^TXz%J75<JSYsS*ZvIV{<<}!dy49K$0#ejtgzHl+I4Mh%)NlO_^gFPV42+hdB
zN!zTZv`tAb>18#+O$wzK+O$m*(t>SDlHS+KLtpX}`cNL))z!7q7aE}Z9Lbi9l|E?Z
zoH={%v%ha&&e8k#=idR)gFpG;f?I+|K?S@F)n~LRtu3XQ6KzMv&*%w<!Mn#W4QDTd
zyJgdHKV(!&@G0;^VW<+~Imbw~4H`BH%Z8(8HOI;_)U|9HEG`cezQ_EiLQq1rf*OPv
zLd!)Mq)E*l*3XkY+Vce0SgD{EbqpR;d|tU=yTsF&goY&m;!f5uCnP+=u%ft2Pd2Mf
zb7y@BV-<(Jn#{Hg<gu+)pkf{Et0j{RwJmuBrMqx{WNc8-#O36KWjdN++CFT=qY_#a
zY{F*JEN<9mrBXzsVVO2VrJl|>VtazV0Ai6pf)HV-De4~5?8&%Ju5Q69KiaTXLOVmC
zC_sz+`vw`?h_;UC*66nAb{RWpvLo6V-5K2_V<&@eceJBD+R+j1*y_V>bV-OQ*n{o`
zzJv#Y8S>Gq+4*2Lw>(t_e@RfeSj>mVuunpdf?o8IbHlphOt-hUZynKjMg+3DZKbC4
zUj4L{)fqMvI4y!cQJN=<Cig2i!0jmo{hrg5L6x-EAq4|COfhZJY+KI?V*3qS8&ByJ
zGA6<^s9=bP$E%;qX(?O65rziAnh0gjg5v&c*2?-&k54E#hB&b{rKNKEk<$zt%f-Hg
zj(m2-LR3aiC^(K$hWfO2R`0XSgyxJI&LoX&M>8FwbXTddg648t1s;Tp1tA}XF~*bh
z#K&Z#sK`$$_!Lf38r#M*L@^c3KnM({xL+Dq94KSD5(y+F=n76_Vj&Uodr#Yro+dk1
zjsjSlchs=jj#522<e09d3AYOdw}0j#stS&m+0cg+(h^Js7BUMpxzsELAj3CFnGeBT
zuzFkuwU#ygxlF5;N?A|qNtN;=mvU@1owFS^tvQLw5ZpKwf(Hh#ad(L5dz!m?o;Rg|
za$NX`i)R!(i_cI=o0@5j80kEbhh=<@q5Ei0Jg#Q+Eah-oGZT83Ixh0LyE&P*RgLFn
zen`#Fu)3S09jDK$Eyw8Fre?E(as&wW?(^Y!d_lqmo@`%S=$?Y|LCd5VtY|r0${YVk
z<@IH}AmJ-q=i-tu^;<d0c}`S+saF0o>3tPnlkjz}_l<?7BK8_E9eqL<9eN2Dh3}-9
z!Z#Is3*V*!65*h7*i$BhKfXIGjcUxhPcQ(4;Kj>46t66EyAWX+GYqQ*-4tNep&nwZ
z#JXzow$jS`iVv^iH3{EWaG9SV!D3zarKlxPkdwM?WcB1?na3T?$<czR&q@+u!9l~+
zhjZz1Jv+kN1~n;?NSqzgGKG0%+?X&)hc~RpA8uHCmRIiH*s>;8R*GCm(`mu;u#~*T
z?56D7lSmcLTVLGDWfS@VgL@cS(pIA!GbKZ>WjVH!)iOi6GifDl8NXmq`}JflQ>HGu
zRHjbZDwFXBwZr}AGjuFb0c}%rrg1K(N7M<+;j3>lghd1rRyIpArf%D6k{cxpGOjZ;
zE-LR(pQcu)(we=f|7(V|%k_&TE3DigtaK)|M_H6?&eFlKXj604l&(=VZ#}Qt8J%xj
zupRVb-iKTGt%Tb=jox8sDu&-Mr>wJjTb|8)A3mTZ=rS_R@Jea^76kL89n#EXO1GN^
zE$eJ96I&kKk}pdXN2W7+8S&D<=I>Ck((){r=%eh8(`6|}C)|K(>RFMyIvrKNV`yH6
zshq14{y?qp|BF%u=W$^j9i1*JLss3u&rcdv&=EnGK6+lE*=l+-{&n+Bu(xQy@B@1C
zWk8}U51sC0;0n#=sK4@_c9IQko`b|N+&YH<!zJ|5U<Jc_sPFPb{(|r=gvYAon`j)0
zggtXu<HG1QG&atlO3c^0FaxEy^k6>nXGoE2@Xn(7P1?aFeAtLe8vALckedO5QbiY{
zAa<gf?g%wFf)&){R^lp2t%h`u-%w=<RUe^MLVeX;$amqAdO3(63Zp-w5nV0{aQ;bf
zy!8D!HpGVWfVw=~T><G79~CfF5T-~G(=BWf=vs#(;fg%ERz8Rdm`xm}n0IiPwPj=;
zyjm7-Ct(DgTrNC9hgc)lV-?*lSEC(k(1o?+xJsDU;Uuk0U;{E}hD{P2zY6I-6oJ1@
zP(ZLb1vSeksKk%)6N>H?qWKOnTtgxMk9-^TWA4z__?RcOJw8^!N8V6pd`zP0EOrfU
zanEA!5P$X$U&p~2tdCI4ALj@gZee&VGK-_F^qa>Ba1&3yD}>a@9G;?Fyo@>_BxdvY
z^n%DZSDVKqa06$zcxa0*4}bM{RS5lX*u#kx+XT3U(78q1>v@34xO^G)e5o*<CrSzq
zjEBh-nRkTw8uy(}FAw5P<hmqxr(7%7daoi9miV9|m8oG!6^EI5O!1WGxqCro*B*Qz
zRBG6VS5Y69I31(n)t_JfdyRj#Q=Y~2&PsQuzt&$XUqy96?t-86|3zzcmHJM9K_*Ze
zD9VtLK#5GC&VR8kaM9WwypHkEXQkV4jk)XmEAd=<7N4ge)dd#E6%D~ze2KzUOV#sY
z{03ec72Gv81XtoaFTaKmXQv@JkMAxL6S_ov^J32z+6*NTsI=Ch6^|lH&o(NocI423
z3)qeqv4gG!op^&v?*r_@-w?wc`XBLcbmPC+%hu38iYD~3HoCZXqMvosxDN-}Ask{u
z7+|AxZ$C-zBnDXu!|WX0%b&$j_B_2`z%lj`M%X1h!CuF4_CCG;O1J8N;7Rr&#zb=W
zAaEbYL~>Jo%j@r9SANoTA1b3EyNkAu;G$O}RRQzRV8uNI3-5%-O@&Y0C7<;Ki1#+2
zCiK`1d~XJl=Ndfjw{ft@$U^($rBwl!vX5@X_$f_X_!(ZOcZ7Q59NGD~c>Yp6e<hx8
ZiRatm`5W=PiFZlEN7C=%_xK~i{{u$~=nMb=

literal 0
HcmV?d00001

diff --git a/defects/sea-orm/patch/sea-orm-0001-rbac-role-hierarchy-diamond-bfs.md b/defects/sea-orm/patch/sea-orm-0001-rbac-role-hierarchy-diamond-bfs.md
index ac26efa88..5f25cbeb8 100644
--- a/defects/sea-orm/patch/sea-orm-0001-rbac-role-hierarchy-diamond-bfs.md
+++ b/defects/sea-orm/patch/sea-orm-0001-rbac-role-hierarchy-diamond-bfs.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000054
+# UNDF: UNDF-2026-000000612
 # UNDF: (pending)
 # sea-orm-0001: enumerate_role / list_role_hierarchy_edges — O(2^D) diamond BFS
 
diff --git a/defects/simplex-chat/patch/simplex-chat-0004-introduce-to-remaining-notelem.md b/defects/simplex-chat/patch/simplex-chat-0004-introduce-to-remaining-notelem.md
index 42f2b3e47..06549ab95 100644
--- a/defects/simplex-chat/patch/simplex-chat-0004-introduce-to-remaining-notelem.md
+++ b/defects/simplex-chat/patch/simplex-chat-0004-introduce-to-remaining-notelem.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000831
 # Defect: simplex-chat-0004 — introduceToRemaining `notElem` O(N×M) member dedup
 
 **Project:** simplex-chat  
diff --git a/defects/simplex-chat/patch/simplex-chat-0004-introduce-to-remaining-notelem.patch b/defects/simplex-chat/patch/simplex-chat-0004-introduce-to-remaining-notelem.patch
index fc6eedff5..ad9839ce3 100644
--- a/defects/simplex-chat/patch/simplex-chat-0004-introduce-to-remaining-notelem.patch
+++ b/defects/simplex-chat/patch/simplex-chat-0004-introduce-to-remaining-notelem.patch
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000831
 # UNDF: (pending)
 --- a/src/Simplex/Chat/Library/Internal.hs
 +++ b/src/Simplex/Chat/Library/Internal.hs
diff --git a/defects/solang/patch/solang-0001-emits-events-vec-hashset.md b/defects/solang/patch/solang-0001-emits-events-vec-hashset.md
index 7633baa5a..6ad437cf1 100644
--- a/defects/solang/patch/solang-0001-emits-events-vec-hashset.md
+++ b/defects/solang/patch/solang-0001-emits-events-vec-hashset.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000055
+# UNDF: UNDF-2026-000000613
 # UNDF: (pending)
 # solang-0001: add_external_functions emits_events Vec::contains O(F×E²) → O(F×E)
 
diff --git a/defects/spring/patch/spring-0002-defaultlistablebeanfactory-getnamesforannotation-list-contains.md b/defects/spring/patch/spring-0002-defaultlistablebeanfactory-getnamesforannotation-list-contains.md
index 71a6f8936..b959add4e 100644
--- a/defects/spring/patch/spring-0002-defaultlistablebeanfactory-getnamesforannotation-list-contains.md
+++ b/defects/spring/patch/spring-0002-defaultlistablebeanfactory-getnamesforannotation-list-contains.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000317
+# UNDF: UNDF-2026-000000614
 # UNDF: (pending)
 # spring-0002: DefaultListableBeanFactory.getBeanNamesForAnnotation — O(B×M) ArrayList.contains inside loop
 
diff --git a/defects/spring/patch/spring-MOADX-0001-fallback-cache-operation-source-stampede.md b/defects/spring/patch/spring-MOADX-0001-fallback-cache-operation-source-stampede.md
index 9b0c2f883..b4105ccdc 100644
--- a/defects/spring/patch/spring-MOADX-0001-fallback-cache-operation-source-stampede.md
+++ b/defects/spring/patch/spring-MOADX-0001-fallback-cache-operation-source-stampede.md
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000295
 # UNDF: (pending)
 # spring-MOADX-0001: AbstractFallbackCacheOperationSource — cache stampede O(N) concurrent annotation scans on cold start
 
diff --git a/defects/terraform/unit/TerraformTest$Graph.class b/defects/terraform/unit/TerraformTest$Graph.class
new file mode 100644
index 0000000000000000000000000000000000000000..98271549e076951368eaaa4cee6a0ca5d4dede9a
GIT binary patch
literal 831
zcmZuwU2hUW6g_vLU7$-_s89;DR$CQNi&cydRFbCgV-sv2AZ_$*V5hi9mu7cq;=8}Z
z7oSaRu$ma3{UiPdAFOv4OhtW|*_k`%o^xl;-ETiXeF3nI`!Q$;=?EK`!ZcyND^5hY
zC!9`suho@ppD?{;JGNgVgbKy|C?bgJh#8oHL0D)?*A<6-_oyj7fBlIoj$aaJpNFYq
zmH`3Zz_)wlZAQMX+nygo9P>&qK?oPj5$S?~OGvSZu)17E{UT4LR8>xB1{o~r$QsBY
zPney=1i2O=RTw4zafxd2h00wqa2czN>qx#=ilzTW#&8vDI@S$b!*xR9;yp~qmmTR6
z^b^q=$h|{CdXi#{s1l+LyW<Fd;7Y=SzwWa2|9w#IZ-!d6#w_8TzQqJ{b=#4<gQJ#o
zo1)d@NW9^T_N!;&c)ZtzWj(Swd@@xq`9TS>Mt|V8<zrjHlM^m&s4Ed7yX@H0zUS+>
z%Zw8cf?+z2ba#5f^Q6bLfwNd;_ciVtHQ0Zip<Dyu2Cp;}f)h5DBSnsQ2qVPbN@)lx
z<xZiOJ|q4-H^kg2lA(wB+*@QzACOehA<}19)Nt@dqj%@u-v^8(p3~eaY7S!&QMNIK
zCEP<6H#wSscFtk$;0O`$gF6Gbh1=r-DqN5%AfrTbXIR$o6`A};Tp39z5rPs?{{gVf
ZTq~Th!D|g=+zGy$ET<6sXxKyrkzaU6ttkKi

literal 0
HcmV?d00001

diff --git a/defects/terraform/unit/TerraformTest.class b/defects/terraform/unit/TerraformTest.class
new file mode 100644
index 0000000000000000000000000000000000000000..3d59afc01029fbf0bec331a1101dde13fbef28a9
GIT binary patch
literal 4744
zcmb_gX>=3U8NFkTG$VOfq*w;o5NuZO#sLhmG2ogda%Bq;F%<^NV2_Q!mK;eYkOYzv
zvXmq=4M_+~gG&<(fu;#0#>RxCY3UN0HeJ$_o}SZ_pZ(MRY5$Z1aqpXvH>#YTE|xWK
znfJc;E%&?cvp@Rc$~6GB_|%0A*c8Yb>~Kh!yi?z;mv`vV_VVENokmMif@5hU8c8mb
zU@ItWazceuflEUsGzoWYFye8&Ef(+GU?h^W*TnU%9TKD_e*Fq2a)BwYI~nOHujR_U
zfk-0h!UWiyaKoeEE)7}mN|-QCkOXI|(Z<t*T?vY+cX9C)4O8Khkex`zW6}1ySTxE7
zE6rt*-G+qa1%YuwEN!a&&HMyL)ess~-#Kpf7dE+&i)jj`Yq%RTB)CUC;g2Sbb|Wr9
z*{yeU8^JbeQQ$AMgqXfct*FjKK4vPIrC~PaNSHYOSh`SeZI$3H7_-%Kb9Lb+;o5l`
z3Q%aS+sR<usiqKLtf2&@T+(hZINtGkq=boe<r?OrLV_Ae8gV@tqx#teDV@!D_*3&#
zdI1(HSfrs6izRqQl^$L~%XjFBMq>|8Bnmc(9rtReLbU`rYEEYj%N~QBYT?ov4a=}x
z=n+je3HO;I{4Rp;D+=l~ti-BePnmlg^dvE4>x@Jt*bDsrLaudVjfVT+Cr~2MP*QK%
z6^KL)oi=5qd}*3w#?~+N%g0wW1jM;=BJz+SCK@#ah2tD?qcgVKP_S+|$mZVr^u&&k
zL2$0Mz_~%g{Q{Y4TV#*XN+1d?Hfs19!t~KN5Uv(0BsBha0OX-*@tBEbfu+r~c{Czi
zEatar___d?+7gQ<^++@!CUs%p92a5KBC?qp$wUWnt)fjsJLpw~_*>Q5&KQ`UZBig$
zHY$F-9&L?v+DQ%Kr^tl}qC!?o$f_5zB6vVU9860^1fIaRj`2Iujok_!)UXG8hlQE}
z4ed=NjZTI%)-4cgfjSZ^UmGVRLdm$HcUG%-SV9>QX|YM^{Q2`Ms`57I@tt}!FH~2T
zmkN7chZ*<0M2jAEVITG@cvQn<_{K2RjF(F-yTmCS#L~E|<FS!wdv#%xipP0y&42Wx
z;t2^;=aeo<<jtvAIP#d!USdvEMW%|UC1hIMR1oV*6skBR!DZqkHGY;MSg$7|F%^f2
zNn$$LO^EHo^BTU57dT}qPO4ctmMv0xH>V+xw0;$!eNn?pc$qNT-W};^4e0T9gC3;?
zf;-Ytrr7j~hGRG`VN%kJ!5E&MmmcP0sm07gA?2io?+7WGmK4(gBJ)pa=)reImg{>2
z7VGN^>m4hyEZC`dotRo%8w#oDWp8z@Kj6YSyrJN{h6@7sW3DO7BlMT?K)2qJQ1PaO
zT*jtV#Af6%zpSEdj~N~p-oo1oE()5zG>&)zyjBP!;(UyE#Uy#`UGyoqEcWz|JAGxW
zdwU1d$y=~;>@I7X`}X0AfTu&nRc32#AdqL-b&XeCDA=$n&oZtXA87cYnX<;7h)Air
zSS!U&5;WJ?-MQU}Z_v$yCYbEkpm&*L1wWCH(M(=+h9d1zVkpjCUqVE8Mrf&J<_L49
z#^WxuW!1~b@eijDdAh4Ly^!=L{o9kpwJf3VPKr-|26<n?ssE#<<l6Kn{ZH1&o#bnA
z7mv;15js-vD?%{ME7C_O)*Wv#R!0QhJmd1VOfWdJtdT`ngCWpDe%Ab~km7Y6dLm(P
zXg7;9-h*ydeBf6Vl^1)exaZ84i{OBS4>_97R$^-}x(w-Ub|n0WPw^VixQXmQA!6wu
z6n=pFi{629)fKRshCxgSU&f@yR9hv>S6yM79IUcCFJZE+(&2T8m8UVi*y|`ej>$z{
zM{!B1PxjgSk$uo1^$vaRli#A?4D;wRmYl#W9yJ>iF$dY0iy4^5f~kNNQ4yA)7|YoU
zu)iMV_%T=K!8XLMqCiz}-Tcj0z~AdMW7<vH`%_c?&u9><OUocB#50_n|9wfW&tWSI
zmRb$_o6F>FL7$x4kDLMIWnd#Mn43F*q6~b1`~j3ns8W2&0Pd0Kpmn0RMB=O5J}j+N
zOS~%W%rEk)mYF^W4K2+r%`GeCn|`ba_9Dk8d)0odK8DHW8?ncHGjyKoN^;A3P&@2V
zg}#ypP*1vO9YBN7!8*vN2pK6Ay=rdH&}TloP)4XMf@yiQ9v=1=(b`ISbTK`;1T$IH
z1yPMAEJZ77kYx3?pMHIYtbG`DILdmh2W!yJa_l<%xPf|nN}mgF=fZIdl?oQzLXC72
z**B4K3vT-RCKjd~{c}2+b)4mB?1Ib>P*G&MuAwC5xS8yX_-)xmOm^vn%=FwI*yRho
zLw~eg7_lLnF$8P2=~zchtY`c~4EP399}Tu!BK8YrQ<IbeA5j5bNht+B=1ArKZFfR<
zEup)96uQG6w-003K@5j%m5NufFg&B!t1z~nBCk?h;*(41ZU(pMph6V?$!8x$@jXl)
zAWWZcqR*S@^UXx@7GiiSDp=Glf=*9wr;}Q+k^L=bGi{kAki0~|cm&DKCX!QNzI!~F
zS*2PgN>9;17mxgcU{)+Ji-!Gw0kh9;0ee$=V5>eg6`yUQHxi&qXNlKI<7X9lox{NP
zDYQNXZD$JF^DZJJ0vYnzy-pLJTQZm>!#GbZ8#+0R^AY!}UxIVzh@frM*r%qX=5gS4
z67)BG4xy+RkAl9*B)bj<ppyZJG5|4xz6)inYMYUu>yzwt;{YDSA=a|Tuoq|W2<wmi
zxQIu|b_eiVJdV$C5P!iF_#2+YZ9F}i0Q{?l39y_AFl$T#)TZ!vgW+H`Mj92=`61!&
zV5<*84d-0O_JFNsT8`X$8t&q0)8uV^Fb-xALVqphq>ZCNM8a9vbs3!vwq?_E96L^9
zZb?obx+-O>v3u=a`4lpXy|ULXw%fS<55;!^@L3Yvb4>rk$YGm@=Lx_U_*dN#ru~ad
z^Ou;`FB3yY2+3DW+or&N8<~V34a>TXECmsX2HGj;7x>t+CnJ+?C8tR99D?iJ(%*w&
z*=_rCFl=`#p9BLJk@P&&het$vAk`jJ-$O>&=6Ny{mOW2}!gkL$Lt%&KnNV2qJQwQ2
zw>HW(#f_!cDrH-xY20a?E%n;V#Qo8aBZ6-GakNS$ODuMZ{)wtg0&TG-LQiV+WtvS7
z6uB3aF)`bDC|h&&<JCj4dnZkul!enrPhf&~;xVY6*Lq?1oT+mA+@9C^aP~Otwi==A
z_bnyGi8<6WoACVsRn6AS)-iQbKi;9jKDVjxK|6iEk^A~Ez~?j}c~D4xk2Z6p*r<uz
zkM~DWxfN3ggOfz#tE@3k@oMWKseTWQc%3wShD>>msC<K%JWm{6ApYLO30AUaiOKhI
zi8TB!K0_b=!S*)mXB!42C$3027?kGXsu{s3GKa`14h6py7ohm^797F~Xk(}Nf)tZ4
zi!ZQ3x{Z9vR;%FLEll8Zh!+L_VPuK`)+yLG#Ndz2WN?D3Tq`(-PiRvHevRL-mAOh~
O=74M@dT#s<>OTRWF>hi3

literal 0
HcmV?d00001

diff --git a/defects/tomcat-0001/patch/tomcat-0001-websocket-subprotocol-list-contains.patch b/defects/tomcat-0001/patch/tomcat-0001-websocket-subprotocol-list-contains.patch
index cdfa41c40..01fe3aaf1 100644
--- a/defects/tomcat-0001/patch/tomcat-0001-websocket-subprotocol-list-contains.patch
+++ b/defects/tomcat-0001/patch/tomcat-0001-websocket-subprotocol-list-contains.patch
@@ -1,3 +1,4 @@
+# UNDF: UNDF-2026-000000832
 # UNDF:
 # Defect: tomcat-0001
 # Component: org.apache.tomcat.websocket.server.DefaultServerEndpointConfigurator
diff --git a/defects/tomcat-0001/test/Tomcat0001Test.class b/defects/tomcat-0001/test/Tomcat0001Test.class
new file mode 100644
index 0000000000000000000000000000000000000000..15d85ebc02676803cba147f639c5600b3b8a04dc
GIT binary patch
literal 3631
zcmaJ^TT~R;72TJ9RCiI>bVCD;qm~gAgcfxiR2m%tQ89pyO(f{#QFLFRq`RuEswR@>
zBrzFhGMT*RK{A=dJe<58CsDvPNj~zGmG7*4WF;#fS;<$v^5yc8bE~?cK_+Xl>fXNh
zoO{mMXP<K~e|)(7TL68yEu#uP34R3u1Q}{CX>(dvPBW&v&P-n78HXX*s~fs=l)=~5
ze!dzZgeAxds-ZA!a>a{|p6eRcZ4wUY4!1PNv=|!N+J{%Shf3?IYHUJ8Lal-*Vhpjz
zMHr+R%^u}f=sdD{L1@$~h@*kQZ@A0#<+Ce1O-X246F}OrbYoh0+^k?To*?fsrr~J1
zVKc<rJm)G8XulA`Rt88=8KSF>ozm=?G<Rfd!}|nII~WorbvN_@GnXT%bkj%)gj&%o
zVJAb)>ItMBLL0fCnbByrn;~o$3*7R4c9Lg#KCOvgGWMWL!d?aYu)iFRYo*V!w0ZJ8
zsM#LYt!)=Kh@k>=A(jf^07GC-&vH{nHx5cTq~I`mD0yRMKBGB%_wL;{#zpd)4L)r;
zy5{h7ak5~Uj+rrY{d~%_IKzR;h~1OdTPmg7MbyJSB`o$TI3mm?Hafj;ig*zwsizej
zLmxw3i)P#05@6cLbz7Uv@hk(oAfpij3XY332KnWpma`?CU}$ndc5U{R6$dTLv_d#V
z>^jHoV$QMEe9?B)yyj$PWDMf8$m09og9PV87-6VS&zQwrR-Mv~tXfV^7-w)+!ZQla
zAze<67w^37@I3L=EE14$4;tO<I!hFE2n?>}Q!%Qz4=6Z~afZgcHp>T0gYX~Mof(?h
zj%GNN-kp`iEWx-TvJ<!<;i7_P@gaiEg<-8hs-uE1pEK4)T0WH`{RnYGD`s`##vptl
zOfslv`_gIEFq1A^J?f<C%%~Q3ik6}Be8HKQKpF82t`bu)LPiF@7#OBSlrzHW&<3uH
zioB#?R;1FWWwSAALDMopYbY>LpkgpI!yMD|#5$_~(;-kd>36-Nk|8$cH6z2xF_)P~
zTC;gu)dY{cDYYNnJkq*n-_#YgElq3cIr_A>8Uex|i1Z(mF^7*yxT0VlA1^mCH;u!l
zF-@?|X}KalGeuFhovsW(Y!jzHiBC!Rw9x*{8WJ2gi$qru_VG$BZ<+Kyi_b~;ywJN^
z?k}#@A;aO*+-;d_@G7m7<^;Z|;CWml?z<@^*LpYL$$R&MwaiEbkGWU?G5GM3$kvx1
zbGyWn5Wd2&)kR;+<y40{g{@K&RLAWeNzp!Jd<|ch@C^mu6g@q%T9X4gDrdS2vfS1!
zo?R)?w4*si+VBsUSwbu_tQ&l^n4jd<m?(K_o+Oc(9nlJ<-{G`AZIF&=MbEBpMZFb$
zu;lj9)VlVxp-g3(N{ZxDo~{USe^tV{QZo|XAYN>+MZE3J<Vts?oHmPAhM&+yEOl!e
z?H&OS5vSiY9ow<A!U%U}%&Z;44;Z$)NM}sTq8r8Fw!O9hcd=a|{D`g(w>>BABn#oj
z%1=xD{0YO3!7Bw)=UG*A)Ew8S_wB!;+6B(D#X_e_O<rY@Abuv}=lF$$UkU>JilJpS
zZ@MvO&hjoVYOhb7&@yzd&ojJM$-I)F7s4sc$mY1+GHjZ&#X>0qUVn7&;>wjZievKy
zUb$I9yAoyZIg+Z(Sm}rX;$@oN9VrH7$S}C&l8)2;aEqb!v6wb;Rl=`{<o{okYR`)c
z+v&clq5@*IP2$p`S%8`zy`Sj&E&8>EMtVjdu=@_!+d>ep&{u4W$3;k7zjS~QoubiC
zV`s+_B!-dBCDbsyjwfhR$MAbJj_yt_AyGwZf#l5_kNy$ca+Bn%+!GtfDCi~D3<WKy
z!A?Zbj#|7*s|tMgAxYS@^&UyT=IXpow&^Y|*`BA`7y5_pV%r3{x_!iRVw4QJPHdxz
z=R}XcGvQxCi*O^D@RJ{ZtMsFpVgo(U!e}5r8qtL&>?g0DqGy-zB?8|A)JkY2ceYo$
z6UG9*O|TFYzOAHQN0Ir0@1k+S7u%Jd@W<NI6M<MqdJ)Ot((;pHxkD`P63ZhUor`#C
zRD4rC{#!V@fQDqke;fS^sJV;5iP*_I82X*J5$i}+Yz%uFqse8A0k`qNfM?jX@L_Ry
zPr%hn#I|%K0%XQjt`?`>!AHF_%X_Kyd!sRpj*PPZb_c~rx{C~H@t%;cI~)(kgV)iN
z2*tz8L;);8ufq7%FuU>SUuC(luUn4GaY@L9<MJ|cD{``sbGM_ue_ux;5lV!~yK!$!
zjb9Z4|BTjM>y{UhKUnSSu8G&g<?D!+C9l?y#D8eBp_(78DG5d5kqRL?CQ>03X{dRz
zA@ZVmIC=}CvCE-%Q8nRfsHumYUqq2|(hymh2b!Xb_(Xal7!NMux%7k-m&AA*Ul@1s
z+}sqc#|y8%ftY}@DY}d=0i|TbUMAE;&3Fu7AWj1+acVm~jCbGw@he3y>@ix;V;5be
zyYUh_@D@7p2PE+)?8Tqy>HK%%-$OjfBzpbs#6h+XhuC2pW_>h2iC#90BkUO*Wf$=@
z%h0IP+w(F8*c^_t=P<~w(fBe>vR5#~-o$Bklb(xzq4BR6X7?~sRfSQP**YSR$eDnI
z?@(d8e~l7(i>CYNp`V){Q8$p+?b13U&qCA=?qTx-REs&y?xTu^Ef48GD?d%@A0Sd1
zXZ=1Z-S4h+m;-Jr0iv<)+xY4NB>xTgeedAtDsts+BkC`JD&-hGrtqc<?Dz0}8k?!{
d{FKhQ?tXvhet+zK--2i{GVQ&Mckmk|{s(7ooErcD

literal 0
HcmV?d00001

diff --git a/defects/vertx-core/patch/vertx-core-0001-hamanager-nodeleft-nodes-list-contains.md b/defects/vertx-core/patch/vertx-core-0001-hamanager-nodeleft-nodes-list-contains.md
index 6da52e607..a8aa602f6 100644
--- a/defects/vertx-core/patch/vertx-core-0001-hamanager-nodeleft-nodes-list-contains.md
+++ b/defects/vertx-core/patch/vertx-core-0001-hamanager-nodeleft-nodes-list-contains.md
@@ -1,4 +1,4 @@
-# UNDF: UNDF-2026-000000233
+# UNDF: UNDF-2026-000000615
 # UNDF: (pending)
 # vertx-core-0001: HAManager.nodeLeft — O(N×M) nodes List.contains inside clusterMap loop