Analyze required Db2 version checks

Proprietary

Analyze a supported UPDATE that omits a version-column equality required by an explicit application contract. Use the complete bounded UPDATE grammar and require a resolved ordinary saved-version field. Unsupported SQL remains unresolved. For another host, track current byte equality through bounded equal-width character copies. Unknown effects or overwritten values discard the proof. Predicate presence does not prove saved-value freshness, concurrency protection, affected rows, authorization or SQLCODE handling. Produce tables without marking source. Do not add predicates or invent a stale-data exit.

io.moderne.mainframe.security.AnalyzeDb2VersionChecks

Required

Exact repository-relative source path covered by the approved version contract. Globs are not supported.

Program ID covered by that contract. Retain quotes for literal IDs. Their contents match case exactly.

Exact unquoted schema and table name. The approved contract must require a prior-version equality predicate on every UPDATE in this scope.

Plain unquoted SQL column required by the approved concurrency contract. Its role is not inferred from its name or data type.

Exact outermost-first dotted COBOL declaration name designated to hold the prior version. Its runtime value and provenance are not inferred.

Provenance of the approved table, version column and saved-field contract. Recorded as evidence. The contract is not fetched.

mod run . --recipe=io.moderne.mainframe.security.AnalyzeDb2VersionChecks \ -P sourcePath=security/cbl/VSUPBASE.cbl \ -P programName=VSUPBASE \ -P protectedTable=VTEST.VERSIONED_ITEM \ -P versionColumn=LAST_UPDATE_TS \ -P savedVersionField=VS-SAVED-TS \ -P contractSource='mainframe-fixtures/README.md fictional version contract'

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.