Report 01
CardDemo: CSI overview
Four findings connect authorisation and paired-update source paths to five not-run checks, with no applicable CVE or lifecycle date established.
Read this report →CSI assessment · Nine reports
CardDemo Wayfinder CSI reports
CSI baseline CSI-CARD-2026-10-22 · 22 October 2026. Limited to the registered source set. Application execution and proposed tests were not run; source findings do not establish runtime behaviour.
Two inspected integrity paths connect authorisation replies and paired account/customer updates to five not-run verification tasks. Installed runtime identities remain missing; no applicable CVE, deprecation notice or support deadline is established.
Read the assessment
Report 02
CardDemo: component inventory
Eight evidenced components, their application roles and the exact installed identity and configuration still required.
Read this report →Report 03
CardDemo: vulnerability assessment
No applicable CVE is established; source integrity findings and exact evidence needed for a defensible future notice match are distinguished.
Read this report →Report 04
CardDemo: deprecation and support assessment
No deprecation or support deadline is assigned; installed identities, support arrangements and affected behaviour are identified for later review.
Read this report →Report 05
CardDemo: impact graphs
Two labelled graphs trace authorisation reply/IMS persistence and paired account/customer rollback using documented, inferred and unresolved edges.
Read this report →Report 06
CardDemo: action plan
A sequenced plan binds the evidence and installed environment, resolves the two integrity questions and keeps notice matching conditional.
Read this report →Report 07
CardDemo: verification plan
Five complete not-run task records specify prerequisites, observations and interpretation without inventing pass/fail results or scenario authority.
Read this report →Report 08
CardDemo: evidence and lookups
Fourteen dated source definitions, official vendor references, coverage outcomes and reference limits.
Read this report →Report 09
CardDemo: baseline and limitations
The retained archive and public PDF remain separate; runtime, notice, execution and lookup limits define what this dated assessment can establish.
Read this report →This Wayfinder CSI assessment is limited to the registered source set. Findings, inference, recommendations and evidence gaps remain distinct. It does not establish a completed migration, production suitability or functional equivalence.
Independent Harten analysis of AWS Samples CardDemo, a public demonstration application. No AWS endorsement is implied. Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. Apache 2.0 source licence. The source-licence reference does not establish the revision analysed by the retained reports.
Inspect the evidence and external lookups · Read the existing application documentation edition.