DataFlowBench v0.2.0

Second immutable release snapshot: the cross-language direct-flow breadth baseline plus the 16-template Java, JavaScript, and Python propagation kernels — now with CodeQL evidence for all three kernel languages — frozen under the freeze/v1 contract with claim scope release.

Freeze identity

• Freeze ID (manifest SHA-256): c8ba343f2db9a8c1cac5570a414bf497c85bbe11d29730639575c9ba3bb70912
• Manifest: reports/freeze.json (merged at 16d0014)
• Benchmark revision: 56673b6 (this tag)
• Fixture revision: sha256:b68d393719bb8eb1ecdf252fbf115f9f596093ae7c2fc358a99f3239acef5e98

Bound evidence

Normalized report	SHA-256	Analyzer
reports/bifrost-smoke.json	aaad007cd17bce497c4f0eba63e2ccb0a96ecde6f861198fed2834ac9090b579	Bifrost 0.10.2
reports/bifrost-python-kernel.json	1d86fd4c245c4f86722bfa584556609954e46c4e51c73dd83e2942e9124fddba	Bifrost 0.10.2
reports/codeql-java-kernel.json	04324829ae3a39fd11a8f7de499af30e365a5fd4380eb55c0249d88c2aee6b6c	CodeQL 2.26.3
reports/codeql-javascript-kernel.json	89eb5141248eb7c3d68feae5c6a1616819a26d5051d43f38b16bbc90cca42d8e	CodeQL 2.26.3
reports/codeql-python-kernel.json	a34862d20f12280b39a4be2f0910b2f7c86ac4a2b17ef52e4ac9146a566072cd	CodeQL 2.26.3

Full analyzer build identities, reproduction commands, and the immutability rules are in docs/releases/v0.2.0.md. The v0.1.0 snapshot remains available at its own release and on the site as an archived snapshot.

Reproduction

git checkout 16d0014
cargo run -- validate-freeze reports/freeze.json
cargo run -- generate-results --manifest reports/freeze.json --output-directory results --check

This release has no DOI and no external review claim.