We document that objects placed in the HttpSession that are annotated with @net.jcip.Immutable will only replicate following calls to HttpSession.setAttribute(...). However, given that the module containing this annotation is not exposed to deployments by default, deployments need to explicitly add this dependency (via MANIFEST.MF or jboss-deployment.xml) in order for these classes to be recognized as immutable.