# keycloak-session-store command audit — 2026-09-20

현재 작업 트리의 command-bearing Record 전체를 `reference` mode로 다시 분석한 프로젝트 단위 감사 기록이다. 옛 run을 소급 수정하지 않고, 현재 parser와 현재 파일 SHA를 기준으로 남긴다.

## 결과

- Record: 33
- shell block: 992
- deterministic finding: 53
- major finding: 0
- command-like text block: 15
- finding code: hidden-stderr 48 / compound-remote-shell 5
- reviewer verdict: **PASS**

남은 53건은 전역 금지 항목이 아니다. 2026-09-20 후속 리뷰에서 실제 문맥을 다시 확인했고 새 high-confidence command defect를 발견하지 못했다. 따라서 signal은 삭제하지 않고 현재 minor review signal로 보존한다.

## Record별 영수증

| Record | SHA256 | shell | findings | major | text-like | verdict |
|---|---|---:|---:|---:|---:|---|
| `docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/case/case-200ms-of-delay-became-22-seconds.md` | `e5d1f4226e6c` | 1 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/case/case-ghost-rows-are-cleaned-by-the-surviving-coordinator.md` | `76dba710df24` | 1 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a2-database-loss.md` | `9a7e5fa9220b` | 39 | 1 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a3-database-crash.md` | `5d93cbd662a5` | 42 | 1 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a4-node-loss.md` | `6f1460232afa` | 54 | 1 | 0 | 10 | PASS |
| `docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a5-asymmetric-partition.md` | `654fb69b0569` | 58 | 4 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a6-latency-injection.md` | `14f46a092498` | 41 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d1-backup-restore.md` | `2dc589f9367a` | 31 | 1 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d2-version-upgrade.md` | `5185e6b3c2b4` | 32 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d3-secret-exposure.md` | `f868aa7e2da3` | 20 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d4-certificate-renewal.md` | `2e7fc8f1bbb9` | 55 | 10 | 0 | 3 | PASS |
| `docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d4a-deploy-hook.md` | `8a4b1e7f1b09` | 39 | 11 | 0 | 1 | PASS |
| `docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a0-session-sharing-path.md` | `1e9d2586675f` | 50 | 3 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a1-jgroups-transport-block.md` | `080b611a1a02` | 57 | 4 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a7-volatile-comparison.md` | `ea8a580b34cf` | 55 | 2 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a7a-volatile-cause.md` | `41f23c0a12a7` | 47 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a8-rolling-restart.md` | `1711dd816cc2` | 30 | 2 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/case/case-nobody-implemented-backchannel-logout.md` | `242233ace9e8` | 1 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/case/case-orphan-sessions-and-the-ttl-that-finds-them.md` | `5d26b51c23c5` | 1 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-b4-forged-identity-headers.md` | `b0c7c2dd599d` | 28 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-b7-cookie-secret-rotation.md` | `5b1d01e4a359` | 31 | 1 | 0 | 1 | PASS |
| `docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-b7a-orphan-session.md` | `fbeec582b113` | 26 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-c1-multi-app-sso.md` | `81b46166deb8` | 27 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-c2-backchannel-logout.md` | `1bb3fe494a8a` | 28 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/when-the-measurement-lies/concept/concept-the-up-metric-cannot-see-alive-but-useless.md` | `b9eb1a539f60` | 2 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/where-application-state-lives/case/case-moving-the-session-left-the-tokens-behind.md` | `ef7b48d8b745` | 1 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/where-application-state-lives/case/case-the-winner-of-the-rotation-race-also-loses.md` | `81348c4d5c07` | 1 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b0-default-session-store.md` | `0fe7e078997a` | 41 | 1 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b1-redis-session-store.md` | `95c04738e93b` | 38 | 2 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b2-jdbc-token-store.md` | `1e38ce87ff35` | 28 | 2 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b3-refresh-contention.md` | `9e74fa28aa5a` | 31 | 3 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b5-redis-loss.md` | `8ebe88c32acc` | 28 | 0 | 0 | 0 | PASS |
| `docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b6-key-rotation.md` | `e2e38eef9f41` | 28 | 4 | 0 | 0 | PASS |

## Disposition

- `hidden-stderr`: `REVIEWED_ACCEPTED_MINOR` — 측정/필드 추출/reference 문맥에서 사용된 신호이며 이번 리뷰에서 새 결함으로 판정하지 않았다.
- `compound-remote-shell`: `REVIEWED_ACCEPTED_MINOR` — read-only 확인 또는 검증 성공 뒤 변경 같은 문맥을 포함하며, 복합 원격 셸이라는 이유만으로 자동 분해하지 않는다.
- command-like text fence: `REVIEWED_REFERENCE_TEXT` — 역사적 출력/설명/reference 문맥을 보존하며 shell fence로 자동 변환하지 않는다.

JSON artifact에는 각 Record의 전체 SHA256, finding별 block id/code/severity/disposition, text-like block별 SHA와 disposition을 함께 기록했다.