Can the Verify tool check that return types and parameters that should implement java.io.Serializable, actually do?
Although this is a good idea, in general it is not the signature type that is required to be an instance of java.io.Serializable, but the actual type. Note however that when running EJBDebug mode, we do attempt to verify the marshalability of your parameters (checking the actual type, not the signature type), and emit warnings when an illegal type is passed. In short, static type checking does not work in most cases, and instead the container does dynamic type checking.