Аудит сериализации кэша в Java

testing

audit-serialization is a Claude Code skill that verifies the correctness and round-trip safety of cache serialization and deserialization. It covers six audit areas: proxy completeness (max size/weight, expiration, key/value strength, weigher, loader, removal/eviction listeners, ticker, scheduler, executor, initial capacity), state transfer of entries including expired entry filtering and async value handling, deserialized consistency of internal structures such as the frequency sketch, timer wheel, drain status, deques, and weight counters, cross-version compatibility via serialVersionUID and default field values, security against crafted serialized forms that could create inconsistent state, and edge cases like serialization during in-flight operations, pending removal notifications, non-serializable CacheLoader, and incomplete AsyncCache futures. Each defect is reported with the affected field, before/after behavior across the round-trip, and severity level — data loss, incorrect behavior, or security risk. The skill targets Java developers and security teams who need reliable cache serialization in production environments.