Audit the codebase for safe publication issues:

• Allowing this to escape the constructor (including indirectly via non-static inner classes)
• Passing mutable objects between threads (including mutable collections)