Read-only database scan

Optional and opt-in. It enumerates schemas and counts rows, compares each count against the volume the bank documented, and never writes to the bank's systems.

On-PremisesWritten-down record · 5 Aug 2026

Connection

PlatformIBM Power, Db2 for i
Hostcore-ha01.fcb.internal
Port9471 (ODBC over TLS)
LibraryFCBPROD
Service accountSVCACCT_SMARTERFI_RO
Authority*USE, read-only — no *CHANGE, no *ALL
Reads fromHA replica (Mimix), not the production LPAR
Read-only session enforcedRequired by the tool — it cannot be disabled.

Credentials would be held for the length of a session and never written to disk or sent outside the bank’s network. The scan reads schema metadata; it does not sample rows, and the container is blocked from egress while it runs.

No scanner ran in this build: there is no database driver in it, and this log is a written-down record rather than the output of a session. What it evidences is the shape an examiner would query — actor, action, object, outcome, date — and not that these actions occurred here. The control it describes is real and ordinary, and a bank should take it from its own change record rather than from us.

Status

Completed · 8 schemas · 280 tables · 0 rows extracted

Discovery results

A schema reconciles when the observed count is within 2 per cent of the documented volume.6 of 8 reconciled
SchemaRead fromTablesDocumentedObservedVarianceClassificationMapped domainsStatus
FCBPROD.CFMASTCore (Db2 for i)4232,08332,236+153NPICustomer / CIF, Officer / Branch hierarchyReconciled
FCBPROD.DDMASTCore (Db2 for i)6863,89664,655+759NPIDepositsReconciled
FCBPROD.LNMASTCore (Db2 for i)916,9526,999+47NPILoansReconciled
FCBPROD.GLMASTCore (Db2 for i)249,8559,792-63NoneGeneral Ledger, AccrualsReconciled
EDW.TRANSACTIONSEnterprise Data Warehouse1218,736,34118,687,800-48541NPITransactionsReconciled
EDW.CARD_ACTIVITYEnterprise Data Warehouse1927,99922,959-5040NPI, PCI DSSCards & PaymentsVariance
EDW.DIGITAL_PROFILEEnterprise Data Warehouse1521,15521,245+90NPIDigital BankingReconciled
YHAML.ALERTSYellow Hammer BSA9—4,255—SAR confidential, NPIBSA / AMLOut of scope

1 of 8 schemas did not reconcile, and 1 belongs to a domain the bank kept out of scope, which is a boundary rather than a gap. The bank redacted that schema at review; the package withholds it, and the audit log below records who did so and on what basis.

Audit log

Every discovery action, with its actor, object and outcome.13 entries
DateTimeActorActionObjectOutcome
2026-08-0509:08:12dwhitfield@firstcommunity.bankConfirmed institution profile and core systemInstitution profile; Jack Henry SilverLake 2024.2Recorded
2026-08-0509:31:47dwhitfield@firstcommunity.bankRecorded data domains and scope10 domains; 9 in scopeRecorded
2026-08-0509:33:10apetrakis@firstcommunity.bankExcluded domain from scopeBSA / AMLExcluded — SAR confidential under 31 CFR 1020.320(e); the exclusion is a control, not a gap
2026-08-0509:48:20mreyes@firstcommunity.bankRecorded integration register5 integration points; 4 enabledRecorded
2026-08-0509:52:04dwhitfield@firstcommunity.bankOpened scan sessioncore-ha01.fcb.internal, library FCBPRODGranted
2026-08-0509:52:05SVCACCT_SMARTERFI_ROValidated credentialsRead-only role, *USE authorityGranted
2026-08-0509:52:06SVCACCT_SMARTERFI_ROAttempted write-permission checkFCBPRODDENIED as expected — session enforced read-only
2026-08-0509:52:11SVCACCT_SMARTERFI_ROEnumerated schemas and tables8 schemas / 280 tables across FCBPROD, EDW and YHAMLCompleted — no row data extracted
2026-08-0509:52:58SVCACCT_SMARTERFI_ROCompared observed row counts against documented volumes8 schemas6 reconciled inside tolerance, 1 did not, 1 belongs to an excluded domain
2026-08-0509:53:47SVCACCT_SMARTERFI_ROHashed and stored metadata fingerprintScan result set (SHA-256)Stored
2026-08-0509:53:48SVCACCT_SMARTERFI_ROClosed sessioncore-ha01.fcb.internalConnection torn down
2026-08-0510:06:31mreyes@firstcommunity.bankReviewed scan results8 schemasAccepted
2026-08-0510:07:02apetrakis@firstcommunity.bankRedacted discovered schema from scoring and exportYHAML.ALERTSWithheld from scoring and from the export package — SAR confidential under 31 CFR 1020.320(e)

Brief

Written at build time from the results above.

One schema does not reconcile with the documented volume

The scan enumerated 8 schemas and 280 tables, and extracted 0 rows of data. EDW.CARD_ACTIVITY holds 22,959 rows against 27,999 documented for Cards & Payments, a shortfall of 5,040 rows.

Written from a template The scan enumerated 8 schemas and 280 tables, and extracted 0 rows of data. It reconciled the volume it observed against the volume the bank documented in 6 of 8 schemas; 1 did not reconcile and 1 belongs to a domain the bank excluded from scope. EDW.CARD_ACTIVITY holds 22,959 rows against 27,999 documented for Cards & Payments, a shortfall of 5,040 rows.