Both were flagged in Wave 17 survey as borderline real defects deferred
for follow-up because the fix needed careful design beyond a single-line
set hoist. Both shipped now with full bench + ticket + intel.
UNDF-1310 symfony-0001 (HIGH) - PropertyAccessor::writeCollection.
Doctrine entity collection diff: in_array($item, $collection, true)
per item in $previousValue, then in_array($item, $previousValue, true)
per item in $collection. O(P*C). Fix: dual lookup
(SplObjectStorage for objects + serialize-keyed array for scalars,
in_array fallback for resources). Bench: 5.2x at P=C=100,
88x at P=C=2000.
UNDF-1311 pyright-0001 (HIGH) - CallHierarchyProvider outgoing/incoming
call dedup. _outgoingCalls.find / _incomingCalls.find with composite
key (uri, range) walks the list per call expression. O(C^2). Fix:
parallel Map<string, entry> keyed by composite serialized form
(uri|start.line|start.char|end.line|end.char). Bench: 2.7x at C=100,
22x at C=2000.
Total session flagships: 11 (was 9) — 7 CWE-407 + 3 MOAD-0003 + 1 MOAD-0004.
Wave 17 borderline backlog now empty.
russell@unturf.com
24052ec668