Discover and propose CICS read guards
ProprietaryDiscover every file READ and READQ TS across the source set. Match exact resource literals to reusable approved policies. Resolve response and output fields from each actual command and reuse the existing response and complete-record proofs. Propose supported guards before unchecked full output copies. Preserve existing handlers, commands and failure actions. Derive source locations and fingerprints during the run and record every candidate with its exact proof barrier or proposed edit. Do not guess dynamic resource identities or choose between conflicting policies. An unresolved candidate is not a vulnerability finding. Source facts do not approve exit suitability. Policies must explicitly apply to every matching use. Application-team review remains required.
io. moderne. mainframe. security. ProposeCicsReadGuardsOptional
Version 1 JSON with a rules array. Each rule supplies id, operation, resource, acceptedResponses, approvedExit and contractSource. READQ_TS also requires expectedRecordLength. READ selects file READs. Resources are exact literal contents with case and padding preserved. The policy approves the complete response set and the named existing exit for every matching use in the input source set. It must cover required messages, cleanup and transaction behavior. No source paths, program IDs, statement lines or caller hashes are accepted. Conflicting policies prevent changes. Without policies, discover candidates and report the missing approval.
mod run . --recipe= io. moderne. mainframe. security. ProposeCicsReadGuardsInstall it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.