Most automation tools treat the mainframe as a black box behind a screen scraper. Progull is built by engineers with deep, pre-existing expertise across z/OS, CICS, DB2 and JCL — with first-class instrumentation of SDSF, SYSLOG and the JES spool.
Each source is parsed natively into a typed event and fused into the agent's working memory for the incident.
Continuous message stream ingestion with line-level parsing of IEF/IEC/IGZ message families. No polling, no screen scrape.
Structured extraction of step-level return codes, condition codes, sysout segments and dump datasets across JES2 and JES3.
Static analysis of JCL semantics — PROCs, overrides, DD allocations, step dependencies — required for any safe restart decision.
Region state, transaction context and recycle orchestration with explicit safety checks and pre-flight resource validation.
SQLCODE, SQLSTATE, deadlocks, plan/package failures and resource contention mapped into the agent's reasoning context.
Correlates abends with recent change records, deploys and CI relationships from ServiceNow — the missing link for explainability.
A representative S0C7 abend, captured exactly as Progull sees it. Every line is a parsed, typed event — not OCR, not regex over a 3270 screen.
[00:00.142] SYSLOG IEF450I PAYRUN02 STEP0040 ABEND=S0C7 [00:00.310] SDSF fetch SYSOUT.PAYRUN02 (38 KB) [00:00.412] SDSF fetch SYSUDUMP.PAYRUN02 (1.2 MB) [00:00.580] JCL parse STEP0040 EXEC PGM=PAYCALC PARM='CLEAN' [00:00.722] DB2 SQLCODE=000 — no SQL fault path [00:01.014] CHANGE correlated CHG0044021 (COBOL deploy 21:42) [00:01.380] AGENT hypothesis: packed-decimal overflow in PAYCALC [00:01.612] AGENT confidence 0.94 — select playbook PB-MF-014 [00:01.701] SN INC0098231 created · severity 2 [00:01.940] AGENT HOLD GLFEED01 [00:02.013] AGENT SUBMIT PAYRUN02.STEP0040 PARM='CLEAN' [02:11.402] z/OS RC=00 — STEP0040 complete [02:13.118] DB2 PAY.OUT 142,408 rows verified [02:13.901] AGENT RELEASE GLFEED01 [02:14.000] SN INC0098231 closed — auto-resolved
Every Progull action runs under a named, auditable surrogate ID with the minimum SAF authority required.
Deploy fully on-prem with private LLM endpoints, or run hybrid with brokered egress. You choose where reasoning happens.
Telemetry is read-only by default. Any state-changing action requires a policy match and is logged with signature and worknote.
A non-exhaustive view of system, user and subsystem abends with first-class diagnosis paths shipped out of the box.
| Code | Family | Typical root cause | Default playbook |
|---|---|---|---|
| S0C4 | Storage | Address-space protection / bad pointer in COBOL/PL/I | Capture dump · isolate module · open CR |
| S0C7 | Data exception | Invalid packed-decimal in COBOL arithmetic | Resubmit with PARM=CLEAN · hold downstream |
| S322 | Time | CPU time exceeded for step | Re-time JCL · split step · escalate to capacity |
| S806 | Linkage | Load module not found | Verify STEPLIB · refresh LLA · resubmit |
| S913 | Security | RACF access denied to dataset | Open access request · pause job class |
| SB37/SD37/SE37 | Space | Dataset out of space / extents | Reallocate · compress · resubmit |
| U0016 | DB2 | Bind/plan failure | Rebind package · resubmit |
| SQLCODE-911 | DB2 | Deadlock / timeout | Retry with backoff · escalate on N retries |
| SQLCODE-904 | DB2 | Resource unavailable | Verify image copy · check utility · resubmit |
| AICA | CICS | Runaway transaction | Purge TRAN · cycle region if pattern repeats |
Progull runtime and private LLM endpoint inside the mainframe data centre. Zero outbound egress. Operated under your existing change control.
Runtime in your VPC; reasoning brokered to an approved hosted model via signed, audited egress. Telemetry never leaves your tenant unredacted.
Single-tenant managed deployment with customer-held keys, dedicated VPC peering and a transparent SOC 2 control plane.