Now that's very interesting. The Conformance Clauses are very coarse-grained: 5 Conformance 168 5.1 Conformance targets 168 5.2 Conformance Clause 1: SARIF log file 168 5.3 Conformance Clause 2: SARIF producer 168 5.4 Conformance Clause 3: Direct producer 168 5.5 Conformance Clause 4: Deterministic producer 169 5.6 Conformance Clause 5: Converter 169 5.7 Conformance Clause 6: SARIF post-processor 169 5.8 Conformance Clause 7: SARIF consumer 169 5.9 Conformance Clause 8: Viewer 169 5.10 Conformance Clause 9: Result management system 169 5.11 Conformance Clause 10: Engineering system 169 ... so you just have to say "I implemented a SARIF producer" (5.3) and it was a "direct producer" (5.4) and it was "deterministic" (5.5) and it produced "log files" (5.2). At least three companies have done that. That's the good news. More good news: MS has implemented a SARIF-based "result management system" (5.9) and "engineering system" (5.10), with converters (5.6), post-processors (5.7) and viewers (5.9). The bad news: Who aside from MS has done those other things? Do we need three users of _every conformance clause_? Larry
