DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
2.7 KiB
JSON
15 lines
2.7 KiB
JSON
{
|
|
"assetKey": "a-startup-validator-that-requires-a-key-nothing-signs-with",
|
|
"kind": "terminal",
|
|
"command": "G=adapter/inbound/graphql/src; M=$G/main/java/dev/caskeleton/adapter/inbound/graphql; T=$G/test/java/dev/caskeleton/adapter/inbound/graphql\necho '# 시작 검증기가 거절하는 문구'\nsed -n '43p' $M/autoconfigure/GraphQlPlatformStartupValidator.java\necho -n '# 그 검증기는 실제로 돈다 — 자동설정의 호출 지점: '\ngrep -n 'validator.validate(properties)' $M/autoconfigure/GraphQlPlatformAutoConfiguration.java\necho\necho '# 그 키 설정을 소비하는 main 코드'\ngrep -rn 'cursor().keyIds()' --include=*.java $M | sed 's|.*/||'\necho -n '# 그중 액추에이터 엔드포인트를 만드는 main 코드: '\ngrep -rn 'new GraphQlPlatformActuatorEndpoint' --include=*.java . | grep -c '/main/'\necho\necho '# 서명 코덱과 키링'\necho -n ' GraphQlCursorCodec 구현체 수: '\ngrep -rln 'implements GraphQlCursorCodec' --include=*.java . | wc -l\necho -n ' 그것을 만드는 main 코드: '\ngrep -rn 'new HmacGraphQlCursorCodec\\|GraphQlCursorKeyRing.of(\\|GraphQlCursorKeyRing.single(' --include=*.java . | grep '/main/' | grep -v 'HmacGraphQlCursorCodec.java' | grep -vc 'GraphQlCursorKeyRing.java'\necho\necho '# 서명될 커서가 지금 있는가'\necho -n ' 커넥션 조립기를 만드는 main 코드: '\ngrep -rn 'new GraphQlConnectionAssembler' --include=*.java . | grep -c '/main/'\necho ' 배포되는 스키마 전체'\ngrep -v '^#' $M/../../../../../resources/graphql/skeleton.graphqls 2>/dev/null || grep -v '^#' $G/main/resources/graphql/skeleton.graphqls\necho\necho '# 그런데 릴리스 게이트가 읽는 매니페스트는 이미 승인 목록에 넣어 두었다'\ngrep -n -B3 'SIGNED_CURSOR_CONNECTION' $M/release/GraphQlStableCapabilityManifest.java | head -6\necho\necho '# 그 부재를 고정하는 테스트'\nsed -n '78,84p' $T/autoconfigure/GraphQlPolicyRequestPathTest.java\necho '# 그리고 요구는 남기라고 못 박는 네 번째 케이스'\nsed -n '100,110p' $T/autoconfigure/GraphQlPolicyRequestPathTest.java\necho\necho '# 등급표가 두 능력에 매긴 등급'\ngrep -n 'cursor 서명\\|mutation 멱등성' adapter/inbound/graphql/CLAUDE.md | cut -c1-70\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template/src",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-02T02:41:05+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/a-startup-validator-that-requires-a-key-nothing-signs-with.txt",
|
|
"svg": "evidence/rendered/a-startup-validator-that-requires-a-key-nothing-signs-with.svg",
|
|
"rawSha256": "7c787f63cee203f0036fe508ecdf41069c5402b4b58f2b8a9826af8ae7e64d85",
|
|
"lines": 52,
|
|
"redaction": "none — 출력에 자격증명이 없다"
|
|
}
|