wave8b: 438/196 — rails-0017, hanami-0001, spark-0002 + PDF

whitepaper/MD5SUMS

@@ -1 +1 @@
-ea444f47c891c333a154adf269d4e2f7  undefect-cwe407-2026-03-27.pdf
+14b5390769c6d999e50dcadbe8aa6c3e  undefect-cwe407-2026-03-27.pdf

whitepaper/full-paper.md

@@ -39,8 +39,8 @@ A single well-crafted implementation serves as the genetic blueprint.
 4. **Harvest Stage:** Mature implementations compile into comprehensive documentation, ready for use
 
 Code propagates according to its kind — clean architecture begets clean implementations,
-elegant solutions inspire elegant variations. The process of generating 436 validated
-defect patches across 195 ecosystems in a single research wave demonstrates how truth,
+elegant solutions inspire elegant variations. The process of generating 438 validated
+defect patches across 196 ecosystems in a single research wave demonstrates how truth,
 properly seeded, multiplies. Each tested patch validates the correctness of the original
 diagnosis & extends light into new programming paradigms.
 
@@ -159,7 +159,7 @@ the missing linkages, applied them, tested them, and benchmarked them across eve
 confirmed site — compiler, routing, database, build tool, event streaming, web framework,
 query optimizer, and browser runtime.
 
-**436 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds).
+**438 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds).
 1 fixable-upstream (Erlang OTP). 1 fixable-pending (swipl-0003). 2 not-worth-fixing.
 3 unpatched (Minecraft, Create mod). No language left behind.
 
@@ -504,6 +504,8 @@ stacks, Spark schemas — this is the dominant build cost.
 | rails-0014 | Rails | `activejob/lib/active_job/arguments.rb:183` — `symbol_keys.include?(key)` Array O(S) inside `hash.transform_keys` loop; O(H×S) (21×) | **PATCHED** |
 | rails-0015 | Rails | `activerecord/.../abstract/schema_statements.rb:1457` — `inserting.count(v)` in `detect` block; O(V²) duplicate version detection; fix: `tally` hash (250×) | **PATCHED** |
 | rails-0016 | Rails | `activerecord/.../sqlite3_adapter.rb:717` — `to_column_names.include?(column)` Array O(N) inside `indexes.each × columns.select`; O(I×C×N) (6×) | **PATCHED** |
+| rails-0017 | Rails | `activerecord/.../schema_statements.rb` — `rename_column_indexes` `index.columns.include?(new_column_name)` Array O(C) inside `indexes.each`; fix: `col_set = columns.to_set` (30×) | **PATCHED** |
+| hanami-0001 | Hanami | `lib/hanami/slice_registrar.rb` — `filter_slice_names` `Array#&` O(N×M) intersection per boot/reload; fix: `.to_set` on right side O(N+M) (160×) | **PATCHED** |
 | seaorm-0003 | SeaORM | `src/schema/builder.rs:238` — `sorted.contains(&table_name)` Vec O(N) per leftover entity after topo-sort; O(N²) cyclic schema worst-case (500×) | **PATCHED** |
 | seaorm-0004 | SeaORM | `src/schema/topology.rs:213` — `seen: Vec<T>` in `TopologicalSort::from_iter`; O(N) scan per item → O(N²) total; fix: `BTreeSet` (28×) | **PATCHED** |
 | exposed-0002 | Exposed ORM | `IdentifierManagerApi.kt:72` — `keywords.any { equals(it, true) }` O(K) linear scan over ~504 keywords per cache-miss identifier; fix: lowercase `HashSet` (144×) | **PATCHED** |
@@ -705,7 +707,7 @@ where D is the depth of the diamond chain. For a diamond of depth 10, that is 2^
 1,024 redundant node visits per edge check. Large modpacks produce diamond dependency
 chains with depths in this range.
 
-**436 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds). 1 fixable-upstream (Erlang OTP — sltab patch). 1 fixable-pending (swipl-0003 attr_unify_hook). 2 not-worth-fixing. 3 unpatched (Minecraft, Create mod). 4 CLEAN (WireGuard-tools, Solana, git, JGit).**
+**438 sites patched. 3 deferred (PostgreSQL -0001/-0005; MongoDB -0005 IndexBounds). 1 fixable-upstream (Erlang OTP — sltab patch). 1 fixable-pending (swipl-0003 attr_unify_hook). 2 not-worth-fixing. 3 unpatched (Minecraft, Create mod). 4 CLEAN (WireGuard-tools, Solana, git, JGit).**
 
 ---