donghyeon.kang/document-haness
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

refactor: 문서 개선 중

Browse Source
This commit is contained in:
donghyeon-ka
2026-09-21 14:30:55 +09:00
parent c93cdea150
commit 805a18f486
1497 changed files with 525837 additions and 59152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/clean-architecture-backend-template/final/assets/diagrams/redis-admission-stages/redis-admission-stages.alt.md
+15 -8
View File
@@ -1,20 +1,27 @@
# 명령 입장의 단일 지점
# 의도된 guarded path와 실제 direct gateway 우회
## Alternative text
CommandPolicyGuard 에서 카탈로그 통과는 실행으로 미분류와 BLOCKED 는 거절로 갈린다.
의도된 command path는 CommandPolicyGuard를 거쳐 실행 또는 fail-closed 거절로 갈리고, 별도의 semantic adapter 경로는 RedisCommandGateway를 직접 호출해 guard를 우회하는 흐름도
## Long description
SSOT 는 이 구조의 바닥이 카탈로그가 미분류 명령을 fail-closed 로 거부하는 것이라고 적는다.
CommandPolicyGuard는 guarded command path의 admission 지점이다. 그러나 현재 semantic adapter 다섯은 RedisLease에서 gateway를 직접 얻어 호출하므로 catalog, permit, slot, budget, translation, observation 단계가 이 경로에 적용되지 않는다.
## Elements and evidence
- **CommandPolicyGuard** (service): No additional description. Evidence: L13463–L13490.
- **실행** (service): No additional description. Evidence: L13463–L13490.
- **fail-closed 거절** (service): No additional description. Evidence: L13463–L13497.
- **guarded command path** (service): No additional description. Evidence: L13469–L13503.
- **CommandPolicyGuard** (service): No additional description. Evidence: L13469–L13503.
- **승인 후 실행** (result): No additional description. Evidence: L13469–L13503.
- **fail-closed 거절** (result): No additional description. Evidence: L13469–L13503.
- **semantic adapters ×5** (service): No additional description. Evidence: L13469–L13503.
- **RedisCommandGateway 직접 호출** (service): No additional description. Evidence: L13469–L13503.
- **guard stages 우회** (result): No additional description. Evidence: L13469–L13503.
## Relationships
- **CommandPolicyGuard → 실행:** 통과. Evidence: L13463–L13490.
- **CommandPolicyGuard → fail-closed 거절:** 거절. Evidence: L13463–L13497.
- **semantic adapters ×5 → RedisCommandGateway 직접 호출:** lease.gateway(). Evidence: L13469–L13503.
- **guarded command path → CommandPolicyGuard:** admission. Evidence: L13469–L13503.
- **CommandPolicyGuard → 승인 후 실행:** 통과. Evidence: L13469–L13503.
- **CommandPolicyGuard → fail-closed 거절:** 거절. Evidence: L13469–L13503.
- **RedisCommandGateway 직접 호출 → guard stages 우회:** guard 미경유. Evidence: L13469–L13503.
docs/clean-architecture-backend-template/final/assets/diagrams/redis-admission-stages/redis-admission-stages.d2
+22 -7
View File
@@ -1,14 +1,29 @@
# 명령 입장의 단일 지점
# Question: 명령은 어디서 걸러지는가?
# 의도된 guarded path와 실제 direct gateway 우회
# Question: Redis 명령은 guard를 통과하는가, semantic adapter에서 gateway로 우회하는가?
direction: right
n0: "CommandPolicyGuard" {
n0: "guarded command path" {
shape: rectangle
}
n1: "실행" {
n1: "CommandPolicyGuard" {
shape: rectangle
}
n2: "fail-closed 거절" {
n2: "승인 후 실행" {
shape: rectangle
}
n0 -> n1: "통과"
n0 -> n2: "거절"
n3: "fail-closed 거절" {
shape: rectangle
}
n4: "semantic adapters ×5" {
shape: rectangle
}
n5: "RedisCommandGateway 직접 호출" {
shape: rectangle
}
n6: "guard stages 우회" {
shape: rectangle
}
n0 -> n1: "admission"
n1 -> n2: "통과"
n1 -> n3: "거절"
n4 -> n5: "lease.gateway()"
n5 -> n6: "guard 미경유"
docs/clean-architecture-backend-template/final/assets/diagrams/redis-admission-stages/redis-admission-stages.dot
+17
View File
@@ -0,0 +1,17 @@
digraph techviz {
graph [rankdir=LR, splines=ortho, nodesep=0.55, ranksep=0.85];
node [fontname=Helvetica, fontsize=11, margin="0.18,0.12", style="rounded,filled", fillcolor=white, color="#2d4357", penwidth=1.5];
edge [fontname=Helvetica, fontsize=10, color="#364b5f", penwidth=1.4, arrowsize=0.75];
n0 [label="guarded command path", shape=box, style="rounded,filled"];
n1 [label="CommandPolicyGuard", shape=box, style="rounded,filled"];
n2 [label="승인 후 실행", shape=box, style="rounded,filled"];
n3 [label="fail-closed 거절", shape=box, style="rounded,filled"];
n4 [label="semantic adapters ×5", shape=box, style="rounded,filled"];
n5 [label="RedisCommandGateway 직접 호출", shape=box, style="rounded,filled"];
n6 [label="guard stages 우회", shape=box, style="rounded,filled"];
n0 -> n1 [label="admission", style=solid];
n1 -> n2 [label="통과", style=solid];
n1 -> n3 [label="거절", style=solid];
n4 -> n5 [label="lease.gateway()", style=solid];
n5 -> n6 [label="guard 미경유", style=solid];
}
docs/clean-architecture-backend-template/final/assets/diagrams/redis-admission-stages/redis-admission-stages.drawio
+57
View File
@@ -0,0 +1,57 @@
<?xml version="1.0" encoding="UTF-8"?>
<mxfile host="app.diagrams.net" modified="2026-07-23T00:00:00.000Z" agent="techviz-harness" version="24.7.17" type="device">
<diagram id="redis-admission-stages" name="의도된 guarded path와 실제 direct gateway 우회">
<mxGraphModel dx="1055" dy="465" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1055" pageHeight="1169" math="0" shadow="0">
<root>
<mxCell id="0"/>
<mxCell id="1" parent="0"/>
<mxCell id="n_typed-entry" value="guarded command path" tooltip="service | Evidence: L13469-L13503" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="70.0" y="140.0" width="174.0" height="64.0" as="geometry"/>
</mxCell>
<mxCell id="n_semantic" value="semantic adapters ×5" tooltip="service | Evidence: L13469-L13503" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="70.0" y="276.0" width="174.0" height="64.0" as="geometry"/>
</mxCell>
<mxCell id="n_guard" value="CommandPolicyGuard" tooltip="service | Evidence: L13469-L13503" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="418.0" y="135.0" width="160.0" height="64.0" as="geometry"/>
</mxCell>
<mxCell id="n_gateway" value="RedisCommandGateway 직접 호출" tooltip="service | Evidence: L13469-L13503" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="404.0" y="271.0" width="188.0" height="74.0" as="geometry"/>
</mxCell>
<mxCell id="n_deny" value="fail-closed 거절" tooltip="result | Evidence: L13469-L13503" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="806.0" y="60.0" width="150.0" height="64.0" as="geometry"/>
</mxCell>
<mxCell id="n_run" value="승인 후 실행" tooltip="result | Evidence: L13469-L13503" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="806.0" y="196.0" width="150.0" height="64.0" as="geometry"/>
</mxCell>
<mxCell id="n_bypass" value="guard stages 우회&lt;br/&gt;catalog · permit · slot · budget&lt;br/&gt;translation · observation" tooltip="result | Evidence: L13469-L13503" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="752.0" y="332.0" width="258.0" height="88.0" as="geometry"/>
</mxCell>
<mxCell id="e_direct" value="lease.gateway()" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_semantic" target="n_gateway">
<mxGeometry relative="1" as="geometry">
<mxPoint x="324.0" y="280.0" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_entry" value="admission" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_typed-entry" target="n_guard">
<mxGeometry relative="1" as="geometry">
<mxPoint x="355.0" y="169.5" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_pass" value="통과" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_guard" target="n_run">
<mxGeometry relative="1" as="geometry">
<mxPoint x="716.0" y="202.0" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_reject" value="거절" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_guard" target="n_deny">
<mxGeometry relative="1" as="geometry">
<mxPoint x="716.0" y="125.0" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_skips" value="guard 미경유" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_gateway" target="n_bypass">
<mxGeometry relative="1" as="geometry">
<mxPoint x="696.0" y="342.0" as="offset"/>
</mxGeometry>
</mxCell>
</root>
</mxGraphModel>
</diagram>
</mxfile>
docs/clean-architecture-backend-template/final/assets/diagrams/redis-admission-stages/redis-admission-stages.excalidraw
+991
View File
@@ -0,0 +1,991 @@
{
"type": "excalidraw",
"version": 2,
"source": "techviz-harness",
"elements": [
{
"id": "edge-direct",
"type": "arrow",
"x": 244.0,
"y": 308.0,
"width": 160.0,
"height": 0.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 893186682,
"version": 1,
"versionNonce": 455485550,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
0.0
],
[
80.0,
0.0
],
[
80.0,
0.0
],
[
160.0,
0.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-semantic",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-gateway",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-direct",
"type": "text",
"x": 264.0,
"y": 268.0,
"width": 120,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 687374111,
"version": 1,
"versionNonce": 1753930037,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "lease.gateway()",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "lease.gateway()",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-entry",
"type": "arrow",
"x": 244.0,
"y": 167.0,
"width": 174.0,
"height": 5.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 1091082879,
"version": 1,
"versionNonce": 1327755587,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
5.0
],
[
87.0,
5.0
],
[
87.0,
0.0
],
[
174.0,
0.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-typed-entry",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-guard",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-entry",
"type": "text",
"x": 310.0,
"y": 157.5,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1236462406,
"version": 1,
"versionNonce": 215795817,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "admission",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "admission",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-pass",
"type": "arrow",
"x": 578.0,
"y": 176.0,
"width": 228.0,
"height": 52.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 610606581,
"version": 1,
"versionNonce": 1519236829,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
0.0
],
[
114.0,
0.0
],
[
114.0,
52.0
],
[
228.0,
52.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-guard",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-run",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-pass",
"type": "text",
"x": 671.0,
"y": 190.0,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 783585354,
"version": 1,
"versionNonce": 46708051,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "통과",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "통과",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-reject",
"type": "arrow",
"x": 578.0,
"y": 92.0,
"width": 228.0,
"height": 66.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 1747658786,
"version": 1,
"versionNonce": 322244831,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
66.0
],
[
114.0,
66.0
],
[
114.0,
0.0
],
[
228.0,
0.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-guard",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-deny",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-reject",
"type": "text",
"x": 671.0,
"y": 113.0,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1904447632,
"version": 1,
"versionNonce": 1512441695,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "거절",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "거절",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-skips",
"type": "arrow",
"x": 592.0,
"y": 308.0,
"width": 160.0,
"height": 68.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 1567695484,
"version": 1,
"versionNonce": 138426472,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
0.0
],
[
80.0,
0.0
],
[
80.0,
68.0
],
[
160.0,
68.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-gateway",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-bypass",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-skips",
"type": "text",
"x": 651.0,
"y": 330.0,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 527325182,
"version": 1,
"versionNonce": 1660368872,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "guard 미경유",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "guard 미경유",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-typed-entry",
"type": "rectangle",
"x": 70.0,
"y": 140.0,
"width": 174.0,
"height": 64.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1422067438,
"version": 1,
"versionNonce": 184283477,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-typed-entry",
"type": "text",
"x": 80.0,
"y": 150.0,
"width": 154.0,
"height": 44.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1597371070,
"version": 1,
"versionNonce": 116582098,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "guarded command path",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "guarded command path",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-semantic",
"type": "rectangle",
"x": 70.0,
"y": 276.0,
"width": 174.0,
"height": 64.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1337464297,
"version": 1,
"versionNonce": 101804627,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-semantic",
"type": "text",
"x": 80.0,
"y": 286.0,
"width": 154.0,
"height": 44.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1868596939,
"version": 1,
"versionNonce": 1104547463,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "semantic adapters ×5",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "semantic adapters ×5",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-guard",
"type": "rectangle",
"x": 418.0,
"y": 135.0,
"width": 160.0,
"height": 64.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 287186016,
"version": 1,
"versionNonce": 258088240,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-guard",
"type": "text",
"x": 428.0,
"y": 145.0,
"width": 140.0,
"height": 44.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1734755542,
"version": 1,
"versionNonce": 1622291566,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "CommandPolicyGuard",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "CommandPolicyGuard",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-gateway",
"type": "rectangle",
"x": 404.0,
"y": 271.0,
"width": 188.0,
"height": 74.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1264474515,
"version": 1,
"versionNonce": 568841533,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-gateway",
"type": "text",
"x": 414.0,
"y": 281.0,
"width": 168.0,
"height": 54.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 222918616,
"version": 1,
"versionNonce": 1589548629,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "RedisCommandGateway 직접 호출",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "RedisCommandGateway 직접 호출",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-deny",
"type": "rectangle",
"x": 806.0,
"y": 60.0,
"width": 150.0,
"height": 64.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 763196993,
"version": 1,
"versionNonce": 1443081913,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-deny",
"type": "text",
"x": 816.0,
"y": 70.0,
"width": 130.0,
"height": 44.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 804770357,
"version": 1,
"versionNonce": 725474116,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "fail-closed 거절",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "fail-closed 거절",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-run",
"type": "rectangle",
"x": 806.0,
"y": 196.0,
"width": 150.0,
"height": 64.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 993733559,
"version": 1,
"versionNonce": 1523859840,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-run",
"type": "text",
"x": 816.0,
"y": 206.0,
"width": 130.0,
"height": 44.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1656583306,
"version": 1,
"versionNonce": 187733575,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "승인 후 실행",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "승인 후 실행",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-bypass",
"type": "rectangle",
"x": 752.0,
"y": 332.0,
"width": 258.0,
"height": 88.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 994055316,
"version": 1,
"versionNonce": 1666152370,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-bypass",
"type": "text",
"x": 762.0,
"y": 342.0,
"width": 238.0,
"height": 68.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1029604402,
"version": 1,
"versionNonce": 219747915,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "guard stages 우회\ncatalog · permit · slot · budget\ntranslation · observation",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "guard stages 우회\ncatalog · permit · slot · budget\ntranslation · observation",
"autoResize": true,
"lineHeight": 1.25
}
],
"appState": {
"gridSize": 10,
"viewBackgroundColor": "#ffffff",
"currentItemFontFamily": 5
},
"files": {}
}
docs/clean-architecture-backend-template/final/assets/diagrams/redis-admission-stages/redis-admission-stages.manifest.json
+9 -5
View File
@@ -2,19 +2,23 @@
"harness_version": "0.2.0",
"spec_id": "redis-admission-stages",
"spec_version": "1.1",
"spec_sha256": "fe6a87016b5442d9611f3a88010b837794bd92cbcb3f65504f5215dcccc4e187",
"spec_sha256": "1f1dfcffe5be16d6b9303aab638c22acc1ae19d30bd309504f047dc9e673732b",
"source_context": {
"document": "/home/donghyeon/workspace/chat-gpt-container/document-haness/docs/clean-architecture-backend-template/final/document.md",
"document_sha256": "8071fe71b3359d9cf60b95909c26c7b50653ce2f22bbc5fcf6988719bb91236d",
"document": "docs/clean-architecture-backend-template/final/document.md",
"document_sha256": "7c986b30b6ef3c12060b6749ee60d53e37d6994493d2703419732c9cab6077d8",
"anchor": {
"kind": "line",
"value": 13463,
"line": 13463
"value": 13469,
"line": 13469
}
},
"outputs": [
"redis-admission-stages.svg",
"redis-admission-stages.drawio",
"redis-admission-stages.mmd",
"redis-admission-stages.d2",
"redis-admission-stages.dot",
"redis-admission-stages.excalidraw",
"redis-admission-stages.alt.md"
],
"lint_issue_count": 0,
docs/clean-architecture-backend-template/final/assets/diagrams/redis-admission-stages/redis-admission-stages.mmd
+15
View File
@@ -0,0 +1,15 @@
%% 의도된 guarded path와 실제 direct gateway 우회
%% question: Redis 명령은 guard를 통과하는가, semantic adapter에서 gateway로 우회하는가?
flowchart LR
n0["guarded command path"]
n1["CommandPolicyGuard"]
n2["승인 후 실행"]
n3["fail-closed 거절"]
n4["semantic adapters ×5"]
n5["RedisCommandGateway 직접 호출"]
n6["guard stages 우회"]
n0 -->|"admission"| n1
n1 -->|"통과"| n2
n1 -->|"거절"| n3
n4 -->|"lease.gateway()"| n5
n5 -->|"guard 미경유"| n6
docs/clean-architecture-backend-template/final/assets/diagrams/redis-admission-stages/redis-admission-stages.svg
+46 -21
View File
@@ -1,8 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<svg xmlns="http://www.w3.org/2000/svg" width="680" height="319" viewBox="0 0 680 319" role="img" aria-labelledby="diagram-title diagram-description">
<title id="diagram-title">명령 입장의 단일 지점</title>
<desc id="diagram-description">SSOT 는 이 구조의 바닥이 카탈로그가 미분류 명령을 fail-closed 로 거부하는 것이라고 적는다.</desc>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;redis-admission-stages&quot;,&quot;profile&quot;:&quot;component-flow&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;/home/donghyeon/workspace/chat-gpt-container/document-haness/docs/clean-architecture-backend-template/final/document.md&quot;,&quot;document_sha256&quot;:&quot;8071fe71b3359d9cf60b95909c26c7b50653ce2f22bbc5fcf6988719bb91236d&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;line&quot;,&quot;value&quot;:13463,&quot;line&quot;:13463}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<svg xmlns="http://www.w3.org/2000/svg" width="1055" height="465" viewBox="0 0 1055 465" role="img" aria-labelledby="diagram-title diagram-description">
<title id="diagram-title">의도된 guarded path와 실제 direct gateway 우회</title>
<desc id="diagram-description">CommandPolicyGuard는 guarded command path의 admission 지점이다. 그러나 현재 semantic adapter 다섯은 RedisLease에서 gateway를 직접 얻어 호출하므로 catalog, permit, slot, budget, translation, observation 단계가 이 경로에 적용되지 않는다.</desc>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;redis-admission-stages&quot;,&quot;profile&quot;:&quot;component-flow&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;docs/clean-architecture-backend-template/final/document.md&quot;,&quot;document_sha256&quot;:&quot;7c986b30b6ef3c12060b6749ee60d53e37d6994493d2703419732c9cab6077d8&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;line&quot;,&quot;value&quot;:13469,&quot;line&quot;:13469}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<defs>
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
<path d="M 0 0 L 10 5 L 0 10 z" />
@@ -49,27 +49,52 @@
.timeline-detail { font-size: 11px; fill: #4b5563; text-anchor: middle; }
</style>
</defs>
<rect class="canvas" width="680" height="319" />
<polyline class="edge kind-request style-solid emphasis-primary" points="230.0,176.0 310.0,176.0 310.0,238.5 390.0,238.5" data-evidence="13463-13490" />
<rect class="edge-label-bg" x="312.0" y="193.2" width="44.0" height="22" rx="3" />
<text class="edge-label" x="334.0" y="208.2">통과</text>
<polyline class="edge kind-request style-dashed emphasis-normal" points="230.0,158.0 310.0,158.0 310.0,95.5 390.0,95.5" data-evidence="13463-13497" />
<rect class="edge-label-bg" x="312.0" y="112.8" width="44.0" height="22" rx="3" />
<text class="edge-label" x="334.0" y="127.8">거절</text>
<rect class="canvas" width="1055" height="465" />
<polyline class="edge kind-request style-dashed emphasis-normal" points="244.0,308.0 324.0,308.0 324.0,308.0 404.0,308.0" data-evidence="13469-13503" />
<rect class="edge-label-bg" x="264.8" y="266.0" width="118.5" height="22" rx="3" />
<text class="edge-label" x="324.0" y="281.0">lease.gateway()</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="244.0,172.0 331.0,172.0 331.0,167.0 418.0,167.0" data-evidence="13469-13503" />
<rect class="edge-label-bg" x="315.9" y="155.5" width="78.3" height="22" rx="3" />
<text class="edge-label" x="355.0" y="170.5">admission</text>
<polyline class="edge kind-data style-solid emphasis-normal" points="578.0,176.0 692.0,176.0 692.0,228.0 806.0,228.0" data-evidence="13469-13503" />
<rect class="edge-label-bg" x="694.0" y="188.0" width="44.0" height="22" rx="3" />
<text class="edge-label" x="716.0" y="203.0">통과</text>
<polyline class="edge kind-data style-solid emphasis-normal" points="578.0,158.0 692.0,158.0 692.0,92.0 806.0,92.0" data-evidence="13469-13503" />
<rect class="edge-label-bg" x="694.0" y="111.0" width="44.0" height="22" rx="3" />
<text class="edge-label" x="716.0" y="126.0">거절</text>
<polyline class="edge kind-data style-dashed emphasis-primary" points="592.0,308.0 672.0,308.0 672.0,376.0 752.0,376.0" data-evidence="13469-13503" />
<rect class="edge-label-bg" x="656.9" y="328.0" width="78.3" height="22" rx="3" />
<text class="edge-label" x="696.0" y="343.0">guard 미경유</text>
<g id="node-typed-entry">
<rect class="node-shape kind-service emphasis-normal role-source" data-evidence="13469-13503" x="70.0" y="140.0" width="174.0" height="64.0" rx="7" />
<text class="node-label" x="157.0" y="170.0">guarded command path</text>
</g>
<g id="node-semantic">
<rect class="node-shape kind-service emphasis-normal role-source" data-evidence="13469-13503" x="70.0" y="276.0" width="174.0" height="64.0" rx="7" />
<text class="node-label" x="157.0" y="306.0">semantic adapters ×5</text>
</g>
<g id="node-guard">
<rect class="node-shape kind-service emphasis-primary role-source" data-evidence="13463-13490" x="70.0" y="135.0" width="160.0" height="64.0" rx="7" />
<text class="node-label" x="150.0" y="165.0">CommandPolicyGuard</text>
<rect class="node-shape kind-service emphasis-primary role-service" data-evidence="13469-13503" x="418.0" y="135.0" width="160.0" height="64.0" rx="7" />
<text class="node-label" x="498.0" y="165.0">CommandPolicyGuard</text>
</g>
<g id="node-gateway">
<rect class="node-shape kind-service emphasis-normal role-sink" data-evidence="13469-13503" x="404.0" y="271.0" width="188.0" height="74.0" rx="7" />
<text class="node-label" x="498.0" y="298.0">RedisCommandGateway 직접</text>
<text class="node-label" x="498.0" y="316.0">호출</text>
</g>
<g id="node-deny">
<rect class="node-shape kind-service emphasis-normal role-sink" data-evidence="13463-13497" x="390.0" y="60.0" width="150.0" height="71.0" rx="7" />
<text class="node-label" x="465.0" y="87.0">fail-closed 거절</text>
<line class="node-detail-divider" x1="404.0" y1="108.0" x2="526.0" y2="108.0" />
<text class="node-detail" x="406.0" y="125.0">미분류 · BLOCKED</text>
<rect class="node-shape kind-result emphasis-normal role-sink" data-evidence="13469-13503" x="806.0" y="60.0" width="150.0" height="64.0" rx="7" />
<text class="node-label" x="881.0" y="90.0">fail-closed 거절</text>
</g>
<g id="node-run">
<rect class="node-shape kind-service emphasis-normal role-sink" data-evidence="13463-13490" x="390.0" y="203.0" width="150.0" height="71.0" rx="7" />
<text class="node-label" x="465.0" y="230.0">실행</text>
<line class="node-detail-divider" x1="404.0" y1="251.0" x2="526.0" y2="251.0" />
<text class="node-detail" x="406.0" y="268.0">카탈로그 통과</text>
<rect class="node-shape kind-result emphasis-normal role-sink" data-evidence="13469-13503" x="806.0" y="196.0" width="150.0" height="64.0" rx="7" />
<text class="node-label" x="881.0" y="226.0">승인 후 실행</text>
</g>
<g id="node-bypass">
<rect class="node-shape kind-result emphasis-primary role-sink" data-evidence="13469-13503" x="752.0" y="332.0" width="258.0" height="88.0" rx="7" />
<text class="node-label" x="881.0" y="359.0">guard stages 우회</text>
<line class="node-detail-divider" x1="766.0" y1="380.0" x2="996.0" y2="380.0" />
<text class="node-detail" x="768.0" y="397.0">catalog · permit · slot · budget</text>
<text class="node-detail" x="768.0" y="413.0">translation · observation</text>
</g>
</svg>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 5.8 KiB

After

Width:  |  Height:  |  Size: 7.8 KiB

docs/clean-architecture-backend-template/final/assets/diagrams/rls-three-preconditions/rls-three-preconditions.alt.md
+10 -10
View File
@@ -1,22 +1,22 @@
# 격리가 성립하는 세 조건
# PostgreSQL RLS 적용 여부를 가르는 분기
## Alternative text
격리 판정이 ENABLE RLS 와 FORCE RLS 와 BYPASSRLS 없는 롤을 차례로 확인하는 순서.
RLS 비활성은 policy 미적용으로, superuser와 BYPASSRLS는 우회로, owner는 FORCE 여부로 갈리고, policy 대상인데 applicable policy가 없으면 default deny가 되는 흐름도
## Long description
SSOT 는 RlsPolicyVerifier.requireEnforced 가 런타임 롤의 BYPASSRLS 를 확인하고 current_schema() 의 실제 테이블을 순회하며 tenant-scoped 목록에 든 것만 검사한다고 적는다.
PostgreSQL RLS를 세 개의 동시 전제로 보지 않는다. RLS가 활성화된 뒤 superuser 또는 BYPASSRLS인지, table owner인지와 FORCE RLS 여부를 확인한다. policy 대상 role에 applicable policy가 없으면 default deny이고, policy가 있으면 USING과 WITH CHECK를 평가한다.
## Elements and evidence
- **격리 판정** (service): No additional description. Evidence: L7396–L7420.
- **RlsPolicyVerifier** (service): No additional description. Evidence: L7396–L7420.
- **데이터베이스** (database): No additional description. Evidence: L7396–L7426.
- **Boundary: policy 적용 대상 판정** (boundary): No additional description. Evidence: L7400–L7432.
- **Boundary: policy 존재와 평가** (boundary): No additional description. Evidence: L7400–L7432.
- **RLS 활성 여부** (process): No additional description. Evidence: L7400–L7432.
- **policy 적용 대상** (process): No additional description. Evidence: L7400–L7432.
- **applicable policy** (process): No additional description. Evidence: L7400–L7432.
## Relationships
- **격리 판정 → RlsPolicyVerifier:** 검증 요청. Evidence: L7396–L7420.
- **RlsPolicyVerifier → 데이터베이스:** ENABLE RLS 확인. Evidence: L7396–L7420.
- **RlsPolicyVerifier → 데이터베이스:** FORCE RLS 확인. Evidence: L7396–L7420.
- **RlsPolicyVerifier → 데이터베이스:** BYPASSRLS 없음 확인. Evidence: L7396–L7426.
- **RLS 활성 여부 → policy 적용 대상:** RLS on. Evidence: L7400–L7432.
- **policy 적용 대상 → applicable policy:** 적용. Evidence: L7400–L7432.
docs/clean-architecture-backend-template/final/assets/diagrams/rls-three-preconditions/rls-three-preconditions.d2
+16 -14
View File
@@ -1,16 +1,18 @@
# 격리가 성립하는 세 조건
# Question: RLS 격리는 무엇이 동시에 참이어야 성립하는가?
direction: right
n0: "격리 판정" {
shape: rectangle
# PostgreSQL RLS 적용 여부를 가르는 분기
# Question: 현재 role과 table에서 RLS policy가 실제로 적용되는가?
direction: down
g0: "policy 적용 대상 판정" {
n0: "RLS 활성 여부" {
shape: rectangle
}
n1: "policy 적용 대상" {
shape: rectangle
}
}
n1: "RlsPolicyVerifier" {
shape: rectangle
g1: "policy 존재와 평가" {
n2: "applicable policy" {
shape: rectangle
}
}
n2: "데이터베이스" {
shape: sql_table
}
n0 -> n1: "검증 요청"
n1 -> n2: "ENABLE RLS 확인"
n1 -> n2: "FORCE RLS 확인"
n1 -> n2: "BYPASSRLS 없음 확인"
g0.n0 -> g0.n1: "RLS on"
g0.n1 -> g1.n2: "적용"
docs/clean-architecture-backend-template/final/assets/diagrams/rls-three-preconditions/rls-three-preconditions.dot
+20
View File
@@ -0,0 +1,20 @@
digraph techviz {
graph [rankdir=TB, splines=ortho, nodesep=0.55, ranksep=0.85];
node [fontname=Helvetica, fontsize=11, margin="0.18,0.12", style="rounded,filled", fillcolor=white, color="#2d4357", penwidth=1.5];
edge [fontname=Helvetica, fontsize=10, color="#364b5f", penwidth=1.4, arrowsize=0.75];
subgraph cluster_0 {
label="policy 적용 대상 판정";
style="rounded,dashed";
color="#66788a";
n0 [label="RLS 활성 여부", shape=box, style="rounded,filled"];
n1 [label="policy 적용 대상", shape=box, style="rounded,filled"];
}
subgraph cluster_1 {
label="policy 존재와 평가";
style="rounded,dashed";
color="#66788a";
n2 [label="applicable policy", shape=box, style="rounded,filled"];
}
n0 -> n1 [label="RLS on", style=solid];
n1 -> n2 [label="적용", style=solid];
}
docs/clean-architecture-backend-template/final/assets/diagrams/rls-three-preconditions/rls-three-preconditions.drawio
+36
View File
@@ -0,0 +1,36 @@
<?xml version="1.0" encoding="UTF-8"?>
<mxfile host="app.diagrams.net" modified="2026-07-23T00:00:00.000Z" agent="techviz-harness" version="24.7.17" type="device">
<diagram id="rls-three-preconditions" name="PostgreSQL RLS 적용 여부를 가르는 분기">
<mxGraphModel dx="860" dy="300" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="860" pageHeight="1169" math="0" shadow="0">
<root>
<mxCell id="0"/>
<mxCell id="1" parent="0"/>
<mxCell id="g_role" value="policy 적용 대상 판정" style="swimlane;html=1;rounded=1;startSize=30;horizontal=1;dashed=1;strokeWidth=1.5;fillColor=#f7f9fb;strokeColor=#66788a;fontStyle=1;fontSize=13;" vertex="1" parent="1">
<mxGeometry x="45.0" y="49.0" width="470.0" height="177.0" as="geometry"/>
</mxCell>
<mxCell id="g_policy-zone" value="policy 존재와 평가" style="swimlane;html=1;rounded=1;startSize=30;horizontal=1;dashed=1;strokeWidth=1.5;fillColor=#f7f9fb;strokeColor=#66788a;fontStyle=1;fontSize=13;" vertex="1" parent="1">
<mxGeometry x="565.0" y="49.0" width="250.0" height="160.0" as="geometry"/>
</mxCell>
<mxCell id="n_rls" value="RLS 활성 여부&lt;br/&gt;no → policy 미적용" tooltip="process | Evidence: L7400-L7432" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="75.0" y="95.0" width="190.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="n_subject" value="policy 적용 대상&lt;br/&gt;superuser / BYPASSRLS → 우회&lt;br/&gt;owner + FORCE off → 우회&lt;br/&gt;non-owner 또는 owner + FORCE on → 대상" tooltip="process | Evidence: L7400-L7432" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;" vertex="1" parent="1">
<mxGeometry x="295.0" y="95.0" width="190.0" height="105.0" as="geometry"/>
</mxCell>
<mxCell id="n_policy" value="applicable policy&lt;br/&gt;none → default deny&lt;br/&gt;exists → USING / WITH CHECK 평가" tooltip="process | Evidence: L7400-L7432" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="595.0" y="95.0" width="190.0" height="88.0" as="geometry"/>
</mxCell>
<mxCell id="e_e1" value="RLS on" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_rls" target="n_subject">
<mxGeometry relative="1" as="geometry">
<mxPoint x="271.5" y="31.0" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_e2" value="적용" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_subject" target="n_policy">
<mxGeometry relative="1" as="geometry">
<mxPoint x="564.0" y="143.2" as="offset"/>
</mxGeometry>
</mxCell>
</root>
</mxGraphModel>
</diagram>
</mxfile>
docs/clean-architecture-backend-template/final/assets/diagrams/rls-three-preconditions/rls-three-preconditions.excalidraw
+564
View File
@@ -0,0 +1,564 @@
{
"type": "excalidraw",
"version": 2,
"source": "techviz-harness",
"elements": [
{
"id": "group-role",
"type": "rectangle",
"x": 45.0,
"y": 49.0,
"width": 470.0,
"height": 177.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#f8f9fa",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "dashed",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1777472244,
"version": 1,
"versionNonce": 1516900995,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "group-label-role",
"type": "text",
"x": 61.0,
"y": 55.0,
"width": 135,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 715621186,
"version": 1,
"versionNonce": 87917954,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 14,
"fontFamily": 5,
"text": "policy 적용 대상 판정",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "policy 적용 대상 판정",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "group-policy-zone",
"type": "rectangle",
"x": 565.0,
"y": 49.0,
"width": 250.0,
"height": 160.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#f8f9fa",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "dashed",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 169725814,
"version": 1,
"versionNonce": 1032311414,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "group-label-policy-zone",
"type": "text",
"x": 581.0,
"y": 55.0,
"width": 117,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1265739546,
"version": 1,
"versionNonce": 1075054467,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 14,
"fontFamily": 5,
"text": "policy 존재와 평가",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "policy 존재와 평가",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-e1",
"type": "arrow",
"x": 265.0,
"y": 59.0,
"width": 30.0,
"height": 88.5,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 71197658,
"version": 1,
"versionNonce": 618174464,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
71.5
],
[
30.0,
71.5
],
[
30.0,
0.0
],
[
0.0,
0.0
],
[
0.0,
88.5
],
[
30.0,
88.5
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-rls",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-subject",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-e1",
"type": "text",
"x": 226.5,
"y": 19.0,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 246258267,
"version": 1,
"versionNonce": 768010045,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "RLS on",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "RLS on",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "edge-e2",
"type": "arrow",
"x": 485.0,
"y": 139.0,
"width": 110.0,
"height": 8.5,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": null,
"seed": 804950317,
"version": 1,
"versionNonce": 629875261,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"points": [
[
0.0,
8.5
],
[
55.0,
8.5
],
[
55.0,
0.0
],
[
110.0,
0.0
]
],
"lastCommittedPoint": null,
"startBinding": {
"elementId": "node-subject",
"focus": 0,
"gap": 4
},
"endBinding": {
"elementId": "node-policy",
"focus": 0,
"gap": 4
},
"startArrowhead": null,
"endArrowhead": "arrow",
"elbowed": true
},
{
"id": "edge-label-e2",
"type": "text",
"x": 519.0,
"y": 131.25,
"width": 90,
"height": 24,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 340809808,
"version": 1,
"versionNonce": 1429402641,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 13,
"fontFamily": 5,
"text": "적용",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "적용",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-rls",
"type": "rectangle",
"x": 75.0,
"y": 95.0,
"width": 190.0,
"height": 71.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 46671207,
"version": 1,
"versionNonce": 1454808113,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-rls",
"type": "text",
"x": 85.0,
"y": 105.0,
"width": 170.0,
"height": 51.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1139089945,
"version": 1,
"versionNonce": 19559202,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "RLS 활성 여부\nno → policy 미적용",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "RLS 활성 여부\nno → policy 미적용",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-subject",
"type": "rectangle",
"x": 295.0,
"y": 95.0,
"width": 190.0,
"height": 105.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 809707623,
"version": 1,
"versionNonce": 308999550,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-subject",
"type": "text",
"x": 305.0,
"y": 105.0,
"width": 170.0,
"height": 85.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 651634604,
"version": 1,
"versionNonce": 1863011863,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "policy 적용 대상\nsuperuser / BYPASSRLS → 우회\nowner + FORCE off → 우회\nnon-owner 또는 owner + FORCE on → 대상",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "policy 적용 대상\nsuperuser / BYPASSRLS → 우회\nowner + FORCE off → 우회\nnon-owner 또는 owner + FORCE on → 대상",
"autoResize": true,
"lineHeight": 1.25
},
{
"id": "node-policy",
"type": "rectangle",
"x": 595.0,
"y": 95.0,
"width": 190.0,
"height": 88.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "#ffffff",
"fillStyle": "solid",
"strokeWidth": 2,
"strokeStyle": "solid",
"roughness": 1,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1953932615,
"version": 1,
"versionNonce": 1148359251,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false
},
{
"id": "node-label-policy",
"type": "text",
"x": 605.0,
"y": 105.0,
"width": 170.0,
"height": 68.0,
"angle": 0,
"strokeColor": "#1e1e1e",
"backgroundColor": "transparent",
"fillStyle": "solid",
"strokeWidth": 1,
"strokeStyle": "solid",
"roughness": 0,
"opacity": 100,
"groupIds": [],
"frameId": null,
"index": null,
"roundness": {
"type": 3
},
"seed": 1771766625,
"version": 1,
"versionNonce": 252892369,
"isDeleted": false,
"boundElements": [],
"updated": 0,
"link": null,
"locked": false,
"fontSize": 15,
"fontFamily": 5,
"text": "applicable policy\nnone → default deny\nexists → USING / WITH CHECK 평가",
"textAlign": "center",
"verticalAlign": "middle",
"containerId": null,
"originalText": "applicable policy\nnone → default deny\nexists → USING / WITH CHECK 평가",
"autoResize": true,
"lineHeight": 1.25
}
],
"appState": {
"gridSize": 10,
"viewBackgroundColor": "#ffffff",
"currentItemFontFamily": 5
},
"files": {}
}
docs/clean-architecture-backend-template/final/assets/diagrams/rls-three-preconditions/rls-three-preconditions.manifest.json
+11 -7
View File
@@ -2,27 +2,31 @@
"harness_version": "0.2.0",
"spec_id": "rls-three-preconditions",
"spec_version": "1.1",
"spec_sha256": "f6268a244e162b30af9d251df67dbe2d8d3e23e84198f91656f865e0f5f96a1c",
"spec_sha256": "f49733b25ed5a35fa7ebbe452adbf1a606aad7108643d443b43a9fae25d15ebf",
"source_context": {
"document": "/home/donghyeon/workspace/chat-gpt-container/document-haness/docs/clean-architecture-backend-template/final/document.md",
"document_sha256": "8071fe71b3359d9cf60b95909c26c7b50653ce2f22bbc5fcf6988719bb91236d",
"document": "docs/clean-architecture-backend-template/final/document.md",
"document_sha256": "7c986b30b6ef3c12060b6749ee60d53e37d6994493d2703419732c9cab6077d8",
"anchor": {
"kind": "line",
"value": 7398,
"line": 7398
"value": 7400,
"line": 7400
}
},
"outputs": [
"rls-three-preconditions.svg",
"rls-three-preconditions.drawio",
"rls-three-preconditions.mmd",
"rls-three-preconditions.d2",
"rls-three-preconditions.dot",
"rls-three-preconditions.excalidraw",
"rls-three-preconditions.alt.md"
],
"lint_issue_count": 0,
"assumption_count": 0,
"assumptions_allowed": false,
"composition_profile": "sequence",
"composition_profile": "two-zone-pipeline",
"reference_ids": [
"payment-approval-sequence"
"localization-pipeline"
],
"diagram_only": true
}
docs/clean-architecture-backend-template/final/assets/diagrams/rls-three-preconditions/rls-three-preconditions.mmd
+12
View File
@@ -0,0 +1,12 @@
%% PostgreSQL RLS 적용 여부를 가르는 분기
%% question: 현재 role과 table에서 RLS policy가 실제로 적용되는가?
flowchart TB
subgraph g_role["policy 적용 대상 판정"]
n0["RLS 활성 여부"]
n1["policy 적용 대상"]
end
subgraph g_policy_zone["policy 존재와 평가"]
n2["applicable policy"]
end
n0 -->|"RLS on"| n1
n1 -->|"적용"| n2
docs/clean-architecture-backend-template/final/assets/diagrams/rls-three-preconditions/rls-three-preconditions.svg
+38 -26
View File
@@ -1,8 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<svg xmlns="http://www.w3.org/2000/svg" width="680" height="418" viewBox="0 0 680 418" role="img" aria-labelledby="diagram-title diagram-description">
<title id="diagram-title">격리가 성립하는 세 조건</title>
<desc id="diagram-description">SSOT 는 RlsPolicyVerifier.requireEnforced 가 런타임 롤의 BYPASSRLS 를 확인하고 current_schema() 의 실제 테이블을 순회하며 tenant-scoped 목록에 든 것만 검사한다고 적는다.</desc>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;rls-three-preconditions&quot;,&quot;profile&quot;:&quot;sequence&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;/home/donghyeon/workspace/chat-gpt-container/document-haness/docs/clean-architecture-backend-template/final/document.md&quot;,&quot;document_sha256&quot;:&quot;8071fe71b3359d9cf60b95909c26c7b50653ce2f22bbc5fcf6988719bb91236d&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;line&quot;,&quot;value&quot;:7398,&quot;line&quot;:7398}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<svg xmlns="http://www.w3.org/2000/svg" width="860" height="300" viewBox="0 0 860 300" role="img" aria-labelledby="diagram-title diagram-description">
<title id="diagram-title">PostgreSQL RLS 적용 여부를 가르는 분기</title>
<desc id="diagram-description">PostgreSQL RLS를 세 개의 동시 전제로 보지 않는다. RLS가 활성화된 뒤 superuser 또는 BYPASSRLS인지, table owner인지와 FORCE RLS 여부를 확인한다. policy 대상 role에 applicable policy가 없으면 default deny이고, policy가 있으면 USING과 WITH CHECK를 평가한다.</desc>
<metadata>{&quot;techviz&quot;:{&quot;spec_version&quot;:&quot;1.1&quot;,&quot;id&quot;:&quot;rls-three-preconditions&quot;,&quot;profile&quot;:&quot;two-zone-pipeline&quot;},&quot;source_context&quot;:{&quot;document&quot;:&quot;docs/clean-architecture-backend-template/final/document.md&quot;,&quot;document_sha256&quot;:&quot;7c986b30b6ef3c12060b6749ee60d53e37d6994493d2703419732c9cab6077d8&quot;,&quot;anchor&quot;:{&quot;kind&quot;:&quot;line&quot;,&quot;value&quot;:7400,&quot;line&quot;:7400}},&quot;evidence_policy&quot;:&quot;Each factual element cites source lines or is marked assumption.&quot;,&quot;diagram_only&quot;:true}</metadata>
<defs>
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
<path d="M 0 0 L 10 5 L 0 10 z" />
@@ -49,26 +49,38 @@
.timeline-detail { font-size: 11px; fill: #4b5563; text-anchor: middle; }
</style>
</defs>
<rect class="canvas" width="680" height="418" />
<rect class="node-shape kind-service emphasis-normal role-participant" data-evidence="7396-7420" x="45.0" y="35.0" width="150.0" height="64.0" rx="7" />
<text class="node-label" x="120.0" y="65.0">격리 판정</text>
<line class="lifeline" x1="120.0" y1="99.0" x2="120.0" y2="388.0" />
<rect class="node-shape kind-service emphasis-primary role-participant" data-evidence="7396-7420" x="255.0" y="35.0" width="153.0" height="64.0" rx="7" />
<text class="node-label" x="331.5" y="65.0">RlsPolicyVerifier</text>
<line class="lifeline" x1="331.5" y1="99.0" x2="331.5" y2="388.0" />
<rect class="node-shape kind-database emphasis-normal role-participant" data-evidence="7396-7426" x="465.0" y="48.0" width="150.0" height="52.0" /><ellipse class="node-shape kind-database emphasis-normal role-participant" cx="540.0" cy="48.0" rx="75.0" ry="13.0" /><path class="storage-bottom" d="M 465.0 100.0 A 75.0 13.0 0 0 0 615.0 100.0" />
<text class="node-label" x="540.0" y="75.0">데이터베이스</text>
<line class="lifeline" x1="540.0" y1="113.0" x2="540.0" y2="388.0" />
<polyline class="edge kind-request style-solid emphasis-normal" points="120.0,140.0 331.5,140.0" data-evidence="7396-7420" />
<rect class="edge-label-bg" x="189.9" y="114.0" width="71.6" height="22" rx="3" />
<text class="edge-label" x="225.8" y="129.0">1. 검증 요청</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="331.5,202.0 540.0,202.0" data-evidence="7396-7420" />
<rect class="edge-label-bg" x="373.1" y="176.0" width="125.2" height="22" rx="3" />
<text class="edge-label" x="435.8" y="191.0">2. ENABLE RLS 확인</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="331.5,264.0 540.0,264.0" data-evidence="7396-7420" />
<rect class="edge-label-bg" x="376.5" y="238.0" width="118.5" height="22" rx="3" />
<text class="edge-label" x="435.8" y="253.0">3. FORCE RLS 확인</text>
<polyline class="edge kind-request style-solid emphasis-primary" points="331.5,326.0 540.0,326.0" data-evidence="7396-7426" />
<rect class="edge-label-bg" x="366.4" y="300.0" width="138.6" height="22" rx="3" />
<text class="edge-label" x="435.8" y="315.0">4. BYPASSRLS 없음 확인</text>
<rect class="canvas" width="860" height="300" />
<rect class="group-box" x="45.0" y="49.0" width="470.0" height="177.0" rx="8" />
<rect class="group-label-bg" x="59.0" y="39.0" width="127.0" height="22" />
<text class="group-label" x="69.0" y="54.0">policy 적용 대상 판정</text>
<rect class="group-box" x="565.0" y="49.0" width="250.0" height="160.0" rx="8" />
<rect class="group-label-bg" x="579.0" y="39.0" width="113.0" height="22" />
<text class="group-label" x="589.0" y="54.0">policy 존재와 평가</text>
<polyline class="edge kind-request style-solid emphasis-normal" points="265.0,130.5 295.0,130.5 295.0,59.0 265.0,59.0 265.0,147.5 295.0,147.5" data-evidence="7400-7432" />
<rect class="edge-label-bg" x="242.4" y="17.0" width="58.2" height="22" rx="3" />
<text class="edge-label" x="271.5" y="32.0">RLS on</text>
<polyline class="edge kind-request style-solid emphasis-primary" points="485.0,147.5 540.0,147.5 540.0,139.0 595.0,139.0" data-evidence="7400-7432" />
<rect class="edge-label-bg" x="542.0" y="129.2" width="44.0" height="22" rx="3" />
<text class="edge-label" x="564.0" y="144.2">적용</text>
<g id="node-rls">
<rect class="node-shape kind-process emphasis-normal role-stage" data-evidence="7400-7432" x="75.0" y="95.0" width="190.0" height="71.0" rx="7" />
<text class="node-label" x="170.0" y="122.0">RLS 활성 여부</text>
<line class="node-detail-divider" x1="89.0" y1="143.0" x2="251.0" y2="143.0" />
<text class="node-detail" x="91.0" y="160.0">no → policy 미적용</text>
</g>
<g id="node-subject">
<rect class="node-shape kind-process emphasis-normal role-stage" data-evidence="7400-7432" x="295.0" y="95.0" width="190.0" height="105.0" rx="7" />
<text class="node-label" x="390.0" y="122.0">policy 적용 대상</text>
<line class="node-detail-divider" x1="309.0" y1="143.0" x2="471.0" y2="143.0" />
<text class="node-detail" x="311.0" y="160.0">superuser / BYPASSRLS → 우회</text>
<text class="node-detail" x="311.0" y="176.0">owner + FORCE off → 우회</text>
<text class="node-detail" x="311.0" y="192.0">non-owner 또는 owner + FORCE on → 대상</text>
</g>
<g id="node-policy">
<rect class="node-shape kind-process emphasis-primary role-stage" data-evidence="7400-7432" x="595.0" y="95.0" width="190.0" height="88.0" rx="7" />
<text class="node-label" x="690.0" y="122.0">applicable policy</text>
<line class="node-detail-divider" x1="609.0" y1="143.0" x2="771.0" y2="143.0" />
<text class="node-detail" x="611.0" y="160.0">none → default deny</text>
<text class="node-detail" x="611.0" y="176.0">exists → USING / WITH CHECK 평가</text>
</g>
</svg>
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 6.4 KiB

After

Width:  |  Height:  |  Size: 6.8 KiB