Single entry point for fox to resume. Documents the three pipelines used
(forward CWE-407, inverse scanner-then-human, wave breadth), the 6 UNDF
flagships shipped (1300-1305), the 22 wave surveys (waves 7-28; 8
full-clean), the 10 unmoad scanner enhancements clearing ~51679 FPs
across 19 codebases, and 4 borderline candidates flagged for fox review
(ElytronSecurityDomainContextImpl.isValid, log4j2 Log4jMDCAdapter,
WildFly TransactionRollbackSetupAction, nakama MOAD-0004).
Stop condition explicit: per CLAUDE.md 'Unsure = ask. Can't ask = stop.'
The diminishing-returns signal (8 consecutive full-clean waves at
session midpoint, exhausted high-leverage scanner backlog by end) means
the honest move is to pause for fox redirect rather than invent
marginal-value work.
russell@unturf.com
d149f2aaf0