[squid-protocol]

Part of #4269.

Checklist: partial [c:fe6377e7] -- DESCRIBE, CONNECT, CALL and host-variable statement text stay refused (now by named form); modelling waits on a burned program that uses them.

What

• det/sql.py: the generic EXEC SQL <verb> refusal becomes a per-verb reason (_REFUSED_VERBS) naming the form and pointing at register Q4.
• test_sql_dynamic.py: DESCRIBE, CONNECT (TO / RESET), CALL and SET CURRENT refusal cases.
• register/Q4.md: the Refused bullet is now one line per form, with "burned estates using it: none".

No translation behaviour changes, so no port or golden moves.

Facts checked

• A grep of the six burned corpora finds no EXEC SQL DESCRIBE / CONNECT / CALL / PREPARE / EXECUTE / WHENEVER.
• The WHENEVER, EXECUTE IMMEDIATE, PREPARE and EXECUTE ... USING parts of the item were already merged (det: EXEC SQL WHENEVER SQLERROR / NOT FOUND / SQLWARNING (Part of #4269) #5338, det: EXEC SQL EXECUTE IMMEDIATE literal INSERT ... VALUES (Part of #4269) #5415, det: EXEC SQL PREPARE FROM literal + EXECUTE name (Part of #4269) #5594, det: EXEC SQL EXECUTE name USING :host-vars for a prepared INSERT (Part of #4269) #6040).
• audit_check.py is clear; pr_gates --fast passes 7/7; tests/cobol_mainframe -k "sql or register" gives 190 passed.

Sibling gaps (none used by a burned program, frontier scope)

Scroll FETCH (PRIOR / ABSOLUTE / RELATIVE; GenApp uses only plain FETCH), rowset FETCH / INSERT, ALLOCATE / ASSOCIATE, DSNTIAR (DSNTIAC is #5858).

🤖 Generated with Claude Code

[squid-protocol]

No description provided.

[github-actions]

🐦‍⬛ Muninn Security Scan

✅ No security issues found.

🐦‍⬛ Powered by Muninn · Skald Lab

[squid-protocol]

No description provided.