Public Validation Library

Public corpora • Deterministic outcomes
We publish precedent. We invite comparison. We do not predict.

This page lists public codebases analyzed under a declared governance context. Each entry is tied to bundle hashes and a locked registry version.

Validation entries

CMS ESRD CY212 Mainframe Pricer Release Files

Corpus identity: CMS ESRD CY212 Mainframe Pricer Release Files. Upstream: https://www.cms.gov/pricersourcecodesoftware. Revision: Source archive hash sha256:eafa667da31e8dfee4595f77bbb07fde67cb6469cc10240d84a9d43296334213. Scope: archive scan; programs 21; copybooks 3; files 34.

Declared context (locked): Production / Regulated / High. Declared prior to analysis; immutable; changes require new analysis.

These results describe what occurred under the declared governance context for the listed corpus. They do not predict outcomes for any other system.

Authority outcome: NO-GO. Statement: Authority terminates where provability terminates.

Deterministic verification: Bundle ID 5db4e7429e024197. Registry version 2.0.0. Registry hash: sha256:422af8b19dc69b2c10bf4500223efcacb90240fee7f195dfb5890dbb26211324. Policy hash: not published for this public corpus. Bundle root hash sha256:252e24475360943c63540f085e1af7040cde491a901f8e18d840d07cbae58272. Findings hash sha256:56989365d0ef6762060d419fd7dcdb43e2b288b5c8567f9f6090b1e58a65bada. Discards hash sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

Boundary disclosure: Tier-2 count 20; Not-Provable 0. Boundary rules: BEHAVIOR_DYNAMIC_CALL.

Downloads: Board Decision Record (PDF), Executive Decision Summary (PDF), Engineering Evidence Record (PDF), Regulatory Evidence Packet (PDF).

IBM CICS Banking Sample Application (CBSA)

Corpus identity: IBM CICS Banking Sample Application (CBSA). Upstream: https://github.com/IBM/cics-banking-sample-application. Revision: Source archive hash sha256:6952085983a5e5192c2689236c0d96e919b0c9761f6448c86837c4cb97c30c7c. Scope: archive scan; programs 129; copybooks 44; files 793.

Declared context (locked): Production / Regulated / High. Declared prior to analysis; immutable; changes require new analysis.

These results describe what occurred under the declared governance context for the listed corpus. They do not predict outcomes for any other system.

Authority outcome: NO-GO. Statement: Authority terminates where provability terminates.

Deterministic verification: Bundle ID d3814bdb5892d3ac. Registry version 2.0.0. Registry hash: sha256:342fcfd05b7fadb0cce505bb0a5c04c63d30f010d16c9a756a5aac3d2eeab286. Policy hash: not published for this public corpus. Bundle root hash sha256:7da8dcf18260bc7843f974ab0396ce68d50f628a1d5c7b083d8520153ddec722. Findings hash sha256:0dc490691f80b72110857d08ce8bfb260a80cf0080e1fc9c46141ebbf11026bf. Discards hash sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

Boundary disclosure: Tier-2 count 326; Not-Provable 0. Boundary rules: DATA_CICS_LINK, DATA_CICS_NO_RESP, DATA_CICS_NO_SYNCPOINT, DATA_CICS_RETURN, DATA_TXN_FILE_IO_OPAQUE.

Downloads: Board Decision Record (PDF), Executive Decision Summary (PDF), Engineering Evidence Record (PDF), Regulatory Evidence Packet (PDF).

AWS Mainframe Modernization CardDemo

Corpus identity: AWS Mainframe Modernization CardDemo. Upstream: https://github.com/aws-samples/aws-mainframe-modernization-carddemo. Revision: Source archive hash sha256:d21fbb845a9b79b8d58c76df28905072206f118dcb48d3ee17590ee797561ee8. Scope: archive scan; programs 109; copybooks 65; files 329.

Declared context (locked): Production / Regulated / High. Declared prior to analysis; immutable; changes require new analysis.

These results describe what occurred under the declared governance context for the listed corpus. They do not predict outcomes for any other system.

Authority outcome: NO-GO. Statement: Authority terminates where provability terminates.

Deterministic verification: Bundle ID b5b0ec26e2d8e64b. Registry version 2.0.0. Registry hash: sha256:a5d18c45eec121f997dc2c9818c973f0da8e062149c87261ae62807ae2d1f786. Policy hash: not published for this public corpus. Bundle root hash sha256:0d8068876cdcf74546f0a8de5eaeb0248d459e067f0813f6d0f4ec7c4c1ce808. Findings hash sha256:e972be5f2313c2bfb19a63f61c6573c563117059adc5e00bbe5452645c4fc3a6. Discards hash sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

Boundary disclosure: Tier-2 count 161; Not-Provable 0. Boundary rules: ASSEMBLER_OPAQUE_ENTRY, BEHAVIOR_ALTER, DATA_CICS_NO_RESP, DATA_CICS_RETURN, DATA_TXN_FILE_IO_OPAQUE, IMS_DLI_OPAQUE_RUNTIME.

Downloads: Board Decision Record (PDF), Executive Decision Summary (PDF), Engineering Evidence Record (PDF), Regulatory Evidence Packet (PDF).

IBM CICS GenApp

Corpus identity: IBM CICS GenApp. Upstream: https://github.com/IBM/cics-genapp. Revision: Source archive hash sha256:2bf04e8ed5feddcf88777df6fce60e7033771b9b678100f3bc7c8c7f7fd8af15. Scope: archive scan; programs 60; copybooks 13; files 139.

Declared context (locked): Production / Regulated / High. Declared prior to analysis; immutable; changes require new analysis.

These results describe what occurred under the declared governance context for the listed corpus. They do not predict outcomes for any other system.

Authority outcome: NO-GO. Statement: Authority terminates where provability terminates.

Deterministic verification: Bundle ID b0a0145263043420. Registry version 2.0.0. Registry hash: sha256:591e42c66e2f520e043323df56180d1be1599220bce8e40ec4cc324e6fa89099. Policy hash: not published for this public corpus. Bundle root hash sha256:607847b5c757cf2c4d96cba039ac480b67cfcaba39448a2eb0bab8f6a91942db. Findings hash sha256:d185bf646288ffeb4113360f08fad7b74470dc0be8f64557e0514f2989ebcdd6. Discards hash sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

Boundary disclosure: Tier-2 count 346; Not-Provable 0. Boundary rules: DATA_CICS_HANDLE_CONDITION, DATA_CICS_LINK, DATA_CICS_NO_RESP, DATA_CICS_NO_SYNCPOINT, DATA_CICS_RETURN, DATA_CICS_START.

Downloads: Board Decision Record (PDF), Executive Decision Summary (PDF), Engineering Evidence Record (PDF), Regulatory Evidence Packet (PDF).

Cobol-bank-system

Corpus identity: Cobol-bank-system. Upstream repo URL unverified. Revision: Source archive hash sha256:ce6d564735d7211d49b3dabc26005cecd20eb4e494991e4ccadf650bbaaa783d. Scope: archive scan; programs 9; copybooks 0; files 267.

Declared context (locked): Production / Regulated / High. Declared prior to analysis; immutable; changes require new analysis.

These results describe what occurred under the declared governance context for the listed corpus. They do not predict outcomes for any other system.

Authority outcome: GO. Statement: Authority issued under the declared governance context.

Deterministic verification: Bundle ID 66df011d414386ce. Registry version 2.0.0. Registry hash: sha256:b1324f658a1d79be0ff0b7e91e853e41cac1d6d4c76163e21cc4caf3063cd0a1. Policy hash: not published for this public corpus. Bundle root hash sha256:6da137c316bbd319b3af39ec3ff3f6da02e085ba7a4fc0ea045bb6790c559f01. Findings hash sha256:1ecb418475e897213e07063729f2d2d29144103a1ae3c4586f6f1189d1fd4c44. Discards hash sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

Boundary disclosure: Tier-2 count 0; Not-Provable 0. Boundary rules: none detected.

Downloads: Board Decision Record (PDF), Executive Decision Summary (PDF), Engineering Evidence Record (PDF), Regulatory Evidence Packet (PDF).

cobol-apps

Corpus identity: cobol-apps. Upstream repo URL unverified. Revision: Source archive hash sha256:bcbb228bbd2aa7e6cb76bfbbc0cc05213e380666ac7dbf1d6785534f7838fcbd. Scope: archive scan; programs 19; copybooks 0; files 47.

Declared context (locked): Production / Regulated / High. Declared prior to analysis; immutable; changes require new analysis.

These results describe what occurred under the declared governance context for the listed corpus. They do not predict outcomes for any other system.

Authority outcome: GO. Statement: Authority issued under the declared governance context.

Deterministic verification: Bundle ID 408f1808488df9e4. Registry version 2.0.0. Registry hash: sha256:b402ff0fb8572887d4ac809bb41f7b6e2862ad1ab1edadf1b4c76ff32fbb8c03. Policy hash: not published for this public corpus. Bundle root hash sha256:16384f6273b9a7493ebdb109276cbb6cb2b6230b67cb3e9bebe3d4cc491ef074. Findings hash sha256:4da252c4c9c34c84248fead892c5f8e885e48699a22ce0658689e32634be7a60. Discards hash sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

Boundary disclosure: Tier-2 count 0; Not-Provable 0. Boundary rules: none detected.

Downloads: Board Decision Record (PDF), Executive Decision Summary (PDF), Engineering Evidence Record (PDF), Regulatory Evidence Packet (PDF).

COBOL master

Corpus identity: COBOL master. Upstream repo URL unverified. Revision: Source archive hash sha256:c2f501ae2104d62dc2ca8c328e6671c6864806d917abd8be1fa3200550d4fc9f. Scope: archive scan; programs 889; copybooks 71; files 3028.

Declared context (locked): Production / Regulated / High. Declared prior to analysis; immutable; changes require new analysis.

These results describe what occurred under the declared governance context for the listed corpus. They do not predict outcomes for any other system.

Authority outcome: NO-GO. Statement: Authority terminates where provability terminates.

Deterministic verification: Bundle ID a7fe5090354b1803. Registry version 2.0.0. Registry hash: sha256:388b2e160aea656c55f5e53bedc0e92ad2fd4d8be690ecd06250a36b3c536ed0. Policy hash: not published for this public corpus. Bundle root hash sha256:f96bffd51959c8df9aea40eebce2dab7ee054b0cb7495cdea517ef39bbb156ef. Findings hash sha256:82413063d1e90cc579625bd68b959e095bc3518d3fec06ed24ee3588c8906971. Discards hash sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.

Boundary disclosure: Tier-2 count 158; Not-Provable 0. Boundary rules: BEHAVIOR_ALTER, BEHAVIOR_COMPUTED_GOTO, BEHAVIOR_DYNAMIC_CALL, DATA_CICS_NO_RESP, DATA_CICS_RETURN, DATA_TXN_FILE_IO_OPAQUE, DEPENDENCY_EXTERNAL_UNRESOLVED.

Downloads: Board Decision Record (PDF), Executive Decision Summary (PDF), Engineering Evidence Record (PDF), Regulatory Evidence Packet (PDF).