tomcat-0001/0002: BeanSupportFull/Standalone populateFromInterfaces diamond O(2^D); count 666→668

defects/activemq/patch/CLEAN.md

@@ -0,0 +1,12 @@
+# CLEAN — Apache ActiveMQ Classic
+
+Scanned 2026-03-29 for CWE-407 (algorithmic complexity).
+
+## Findings
+
+- `IntrospectionSupport.java` — CLEAN: reflection on methods only, no recursive class traversal
+- `AnnotatedMBean.java` — CLEAN: simple non-recursive `getInterfaces()` iteration
+- `AsyncAnnotatedMBean.java` — CLEAN: same pattern, non-recursive
+- OpenWire generator files — CLEAN: code generation context, no runtime recursion
+
+**Result: No actionable CWE-407 defects.**