Discover and propose Db2 UPDATE result guards

Proprietary

Discover UPDATE statements and their following literal reports across the input source set. Match reusable table and success-message policies. Derive source positions, SQL host bindings and COPY snapshots from the actual source. Reuse the existing result, diagnostics, handler, source preservation and terminal-exit proofs for each candidate. Record missing policies, conflicts and exact proof barriers. Preserve complete existing checks and supported partial checks. Propose guards only when a rejected result can reach the approved success report. This does not undo an UPDATE or establish authorization, unique keys, concurrency protection or transaction completion. Application-team review remains required.

io.moderne.mainframe.security.ProposeDb2UpdateResultGuards

Optional

Strict version 1 JSON with a rules array. Each rule supplies id, table, successMessage, diagnosticMode, notFoundExit, errorExit, resultExit and contractSource. The diagnostic mode must be STDSQL(NO). Each rule approves every matching UPDATE and exact single-literal success DISPLAY in the input source set. Only SQLCODE zero and one affected row may reach that report. Approve existing exits for code 100, other nonzero codes and unexpected row counts. The exits must preserve required messages, cleanup and transaction behavior at every match. No file, program, line or source hash is supplied. Without policies, report candidates and missing approval.

mod run . --recipe=io.moderne.mainframe.security.ProposeDb2UpdateResultGuards

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.