Discover and propose approved public DISPLAY traces

Proprietary

Discover DISPLAY operations and bind reusable incoming-record classification and public-trace policies throughout the input source set. Derive program identities, statement locations and COPY snapshots. Reuse the existing entry-value, storage-layout and nonoverlapping public-field proofs. Replace classified whole-record output only at a proven first entry statement under the approved replacement audit contract. Do not infer public classification from names or from missing sensitive origins. Preserve following code, comments and sentence periods. Locate candidates by syntax identity after earlier replacements and record every proof outcome. No source paths, program IDs, statement lines or caller hashes are required. Application team review remains required.

io.moderne.mainframe.security.ProposeApprovedDisplayTraces

Optional

Strict JSON with version 1 and a rules array. Each rule supplies id, record, prohibitedFields, approvedTraceField, approvedTraceLabel and contractSource. The reusable record contract approves classification, the public field value at every entry and required replacement audit behavior for every matching DISPLAY. Conflicting record policies prevent changes. Omit this option to inventory data-bearing DISPLAY statements without edits or inferred classifications.

mod run . --recipe=io.moderne.mainframe.security.ProposeApprovedDisplayTraces

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.