docs(keycloak-session-store): import the session-storage lab as a new project
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
DongHyeonka
co-authored by
Claude Opus 5
Claude Opus 5
parent
43bccd08a8
commit
b2963105a8
+143
@@ -0,0 +1,143 @@
|
||||
Sub-scope 01 documentation / measured-count drift (deep-analysis-standard 8.4)
|
||||
revision=a24ece9cf797f7ea647e33bf846b115208ed1ba5
|
||||
executedAt=2026-08-29T14:37:39+00:00
|
||||
cwd=/shared/codebase/clean-architecture-backend-template/src
|
||||
observation boundary: tracked files at this revision; build output and untracked paths excluded.
|
||||
|
||||
=== A. registered leaf count (registry SSOT) ===
|
||||
$ grep -c "\"id\"" config/architecture/modules.json
|
||||
44
|
||||
exit=0
|
||||
|
||||
=== B. verifyDocumentedLeafCount search domain (root build.gradle) ===
|
||||
$ sed -n 1316,1345p build.gradle
|
||||
// drift this task exists to fail on, in the files a reader of that module is most likely to
|
||||
// trust. A list that has to be extended whenever a module is added is a gate that silently
|
||||
// narrows, so the scan walks the tree instead.
|
||||
//
|
||||
// This build file is excluded by identity rather than by pattern: it implements the gate, so it
|
||||
// necessarily contains the strings the gate matches.
|
||||
List<File> policyDocuments = []
|
||||
policyDocuments << new File(repositoryDirectory, 'CLAUDE.md')
|
||||
policyDocuments << new File(repositoryDirectory, 'AGENTS.md')
|
||||
rootProject.projectDir.traverse(
|
||||
type: groovy.io.FileType.FILES,
|
||||
// Build output holds copies of both — a stale count in one would be reported at a path
|
||||
// nobody can fix, and the walk would cover a tree far larger than the source.
|
||||
preDir: { File directory ->
|
||||
(directory.name in ['build', '.gradle', '.git'])
|
||||
? java.nio.file.FileVisitResult.SKIP_SUBTREE
|
||||
: java.nio.file.FileVisitResult.CONTINUE
|
||||
}) { File candidate ->
|
||||
if (candidate.name == 'CLAUDE.md') {
|
||||
policyDocuments << candidate
|
||||
} else if (candidate.name == 'build.gradle'
|
||||
&& candidate.canonicalFile != rootProject.buildFile.canonicalFile) {
|
||||
policyDocuments << candidate
|
||||
}
|
||||
}
|
||||
inputs.file(moduleRegistryFile)
|
||||
inputs.files(policyDocuments.findAll { it.isFile() })
|
||||
|
||||
int registeredLeaves = gradle.moduleRegistry.modules.size()
|
||||
|
||||
exit=0
|
||||
|
||||
=== C. surviving 19-leaf claims inside the persistence-jpa leaf and its own adaptation doc ===
|
||||
$ git grep -n "19-leaf\|19 leaf\|19 Gradle" -- adapter/outbound/persistence-jpa ../docs/jpa
|
||||
../docs/jpa/repository-adaptation.md:21:`src/settings.gradle` and `verifyCleanArchitectureDependencies`) declares **exactly 19 leaf
|
||||
../docs/jpa/repository-adaptation.md:101:| `settings.gradle.kts` module registration | Fail-closed 19-leaf registry | No registry change: leaf identity, Gradle path, allowed dependencies, and runtime memberships are unchanged. |
|
||||
adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java:20: * unregistered edge at compile time. This repository's fail-closed 19-leaf registry outranks that
|
||||
exit=0
|
||||
|
||||
=== D. same claim in sibling leaf boundary tests (same guard blind spot) ===
|
||||
$ git grep -ln "19-leaf" -- "*.java"
|
||||
adapter/outbound/cache-redis/src/test/java/dev/caskeleton/adapter/outbound/cache/redis/sdk/RedisSdkModuleBoundaryTest.java
|
||||
adapter/outbound/httpclient/src/test/java/dev/caskeleton/adapter/outbound/httpclient/architecture/HttpClientModuleBoundaryTest.java
|
||||
adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java
|
||||
adapter/outbound/persistence-mongo/src/test/java/dev/caskeleton/adapter/outbound/mongo/architecture/MongoModuleBoundaryTest.java
|
||||
exit=0
|
||||
|
||||
=== E. public top-level type count claim vs measurement ===
|
||||
$ git grep -n "318 of" -- "*.java"
|
||||
adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java:124: * <p>An export list, because 318 of 324 production files declare a public top-level type and
|
||||
app-bootstrap/src/test/java/dev/caskeleton/bootstrap/architecture/CleanArchitectureTest.java:1110: * <p>318 of that leaf's 324 production files declare a public top-level type, and {@code public}
|
||||
exit=0
|
||||
|
||||
$ grep -vc "^#" ../docs/architecture/jpa-api-surface.txt
|
||||
338
|
||||
exit=0
|
||||
|
||||
$ grep -n "^# types:" ../docs/architecture/jpa-api-surface.txt
|
||||
8:# types: 338
|
||||
exit=0
|
||||
|
||||
$ git ls-files "adapter/outbound/persistence-jpa/src/main/java/**/*.java" | wc -l
|
||||
350
|
||||
exit=0
|
||||
|
||||
=== F. leaf README package-root claim vs source package root ===
|
||||
$ sed -n 1,6p adapter/outbound/persistence-jpa/README.md
|
||||
# adapter-persistence-rdbms — 설계 결정 참조
|
||||
|
||||
RDBMS/JPA 퍼시스턴스 베이스 모듈. 패키지 루트: `dev.caskeleton.adapter.persistence`.
|
||||
|
||||
허용/금지 의존, 테스트 명령, 그리고 **계약 테이블**(TransactionPort 모드표, SQLState → Error
|
||||
Code 매트릭스, auditing 계약, 분산 락 provider 선택표)의 SSOT 는 [CLAUDE.md](CLAUDE.md) 다.
|
||||
exit=0
|
||||
|
||||
$ git grep -c "^package dev.caskeleton.adapter.outbound.persistence" -- adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/package-info.java
|
||||
adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/package-info.java:1
|
||||
exit=0
|
||||
|
||||
$ git grep -rn "dev.caskeleton.adapter.persistence" -- adapter/outbound/persistence-jpa
|
||||
adapter/outbound/persistence-jpa/README.md:3:RDBMS/JPA 퍼시스턴스 베이스 모듈. 패키지 루트: `dev.caskeleton.adapter.persistence`.
|
||||
adapter/outbound/persistence-jpa/README.md:77:앵커로 삼는 기본 엔티티/리포지토리 스캔이 `dev.caskeleton.adapter.persistence.*` 를 놓친다.
|
||||
exit=0
|
||||
|
||||
=== G. CLAUDE.md lane task names vs registered Gradle tasks ===
|
||||
$ git grep -n "gradlew" -- adapter/outbound/persistence-jpa/CLAUDE.md
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:7:- Focused test (derived from Gradle path): `./gradlew :adapter:outbound:persistence-jpa:test --console=plain`
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:55:./gradlew :adapter:outbound:persistence-jpa:test # hermetic unit lane
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:56:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformContractTest # real PostgreSQL
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:57:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformMigrationTest # Flyway upgrade scenarios
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:58:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformFailureTest # deadlock, commit ambiguity
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:59:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformQueryPlanTest # EXPLAIN structure
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:60:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformSecurityTest # runtime role privileges
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:61:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformPoolContractTest # pool behaviour
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:62:./gradlew jpaReleaseGate # every gate, from the root
|
||||
adapter/outbound/persistence-jpa/CLAUDE.md:294:./gradlew :adapter:outbound:persistence-jpa:test --console=plain
|
||||
exit=0
|
||||
|
||||
$ git grep -n "tasks.register" -- adapter/outbound/persistence-jpa/build.gradle
|
||||
adapter/outbound/persistence-jpa/build.gradle:100: tasks.register(taskName, Test) {
|
||||
adapter/outbound/persistence-jpa/build.gradle:163:def verifyJpaSqlConstructionSafety = tasks.register('verifyJpaSqlConstructionSafety') {
|
||||
adapter/outbound/persistence-jpa/build.gradle:195:def verifyJpaSecurityFixtures = tasks.register('verifyJpaSecurityFixtures') {
|
||||
adapter/outbound/persistence-jpa/build.gradle:232: tasks.register(taskName, Test) {
|
||||
adapter/outbound/persistence-jpa/build.gradle:287:def jpaPlatformPoolContractTest = tasks.register('jpaPlatformPoolContractTest', Test) {
|
||||
adapter/outbound/persistence-jpa/build.gradle:300:tasks.register('jpaPlatformReleaseGate') {
|
||||
exit=0
|
||||
|
||||
$ git grep -n "register..jpaReleaseGate" -- build.gradle
|
||||
build.gradle:1097:tasks.register('jpaReleaseGate') {
|
||||
exit=0
|
||||
|
||||
=== H. PersistenceJpaConfig entity-scan vs repository-scan list parity (measured, not asserted by any test) ===
|
||||
$ sed -n 38,60p adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/config/PersistenceJpaConfig.java | grep -c persistence\.
|
||||
20
|
||||
$ sed -n 61,83p adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/config/PersistenceJpaConfig.java | grep -c persistence\.
|
||||
20
|
||||
$ diff <(sed -n 38,60p adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/config/PersistenceJpaConfig.java | grep -o "persistence\.[a-z]*\"") <(sed -n 61,83p adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/config/PersistenceJpaConfig.java | grep -o "persistence\.[a-z]*\"")
|
||||
(identical)
|
||||
exit=0
|
||||
|
||||
=== I. JpaModuleBoundaryTest PACKAGE_CATALOG targets that are not top-level packages ===
|
||||
$ ls -d src/main/java/dev/caskeleton/adapter/outbound/persistence/inbox
|
||||
ls: cannot access 'adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/inbox': No such file or directory
|
||||
exit=2
|
||||
$ git grep -n "\"inbox\"" -- adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java
|
||||
adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java:110: "inbox",
|
||||
exit=0
|
||||
$ ls src/main/java/dev/caskeleton/adapter/outbound/persistence | tr "\n" " "
|
||||
api audit auditing cache config envers experimental failure fileserver h2 hibernate idempotency liveevent lock migration notification observation operation outbox package-info.java postgresql querydsl security springdata transaction
|
||||
exit=0
|
||||
Reference in New Issue
Block a user