"OK-10" appears in the SRC/DRC column of a CA Top Secret for z/OS TSSUTIL report.
"OK-10" looks strange.
Is that working as designed?
Yes , it is working as designed.
The SRC is set to OK when there is no RC returned for the security call because there is no violation.
The DRC 10 means JOB/SESSION CANCELLED - EXCESSIVE VIOLATIONS
For CA top Secret r15.0 refer to CA Top Secret for z/OS Report And Tracking Guide; chapter #1 TSSUTIL.
For CA Top Secret r16.0 go to docops.ca.com site; signon; choose your product CA Top Secret for z/OS - 16.0; click on "Reporting" link, then click on "TSSUTIL Utility" link to have more information about CA Top Secret TSSUTIL utility.