Analyze current authorization at Db2 selects

Tie a current checked identity, exact resource mapping and complete allow check to one actual SQL SELECT. Accept one structure qualifier in SQL host names. Require exact declaration identity for keys and disjoint ordinary output storage. Require exact source, ordinary COPY and complete schema snapshots. Match every CHAR primary-key predicate to the current authorized key field and every selected CHAR column to explicit read permission. Require ordinary equal-width PIC X outputs disjoint from the authorization records, key inputs and other outputs. Require explicit approval of authorizer input preservation, the table resource binding, SQL encoding and column-specific read permissions. Join identity, resource and result evidence by the actual authorization CALL. Unknown effects, watched writes, intervening calls or SQL prevent reuse of the decision. Reuse bounded local identity and result proofs. Each protected operation consumes its receipt. Nested sequences start with fresh evidence. Report source lines, field mappings and component status without changing source, assigning a CWE or recording identity, key or payload values. A positive result is conditional on reaching this SELECT and on the supplied interface semantics. It does not establish authorizer internals, concurrency protection, successful SQL results or whole-program coverage.