DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
3.2 KiB
JSON
15 lines
3.2 KiB
JSON
{
|
|
"assetKey": "analysis-finding-a06-f007",
|
|
"kind": "terminal",
|
|
"command": "#!/bin/bash\nset -euo pipefail\ncd /shared/codebase/clean-architecture-backend-template\n. /tmp/lib.sh\nN=src/adapter/outbound/persistence-mongo/src/main/java/dev/caskeleton/adapter/outbound/mongo/nativecap\nG=$N/PolicyAwareMongoNativeGateway.java\nP=$N/MongoNativeOperationPolicy.java\nA=$N/ApprovedMongoNativeOperation.java\nR=src/adapter/outbound/persistence-mongo/README.md\nfor f in \"$G\" \"$P\" \"$A\" \"$R\"; do test -f \"$f\"; done\n\necho \"# 게이트웨이가 적은 검사 순서\"\nat \"$G\" 8 15 PolicyAwareMongoNativeGateway.java\necho\necho \" README 가 적은 순서 :\"\n{ grep -n -A2 'D3는 raw client escape가 아니다' \"$R\" || true; } \\\n | sed -E 's#^([0-9]+)[:-] *# README.md:\\1 #'\n\necho\necho \"# 게이트웨이가 실제로 하는 일\"\nat \"$G\" 33 46 PolicyAwareMongoNativeGateway.java\n\necho\necho \"# 정책이 실제로 거부하는 것\"\nat \"$P\" 52 100 MongoNativeOperationPolicy.java\nprintf ' require 안에서 예외를 던지는 자리 : %s 개\\n' \\\n \"$(awk 'NR>=52 && NR<=104 && /throw MongoOperationRejectedException/' \"$P\" | grep -c .)\"\n\necho\necho \"# 승인된 연산 값 타입이 선언한 것\"\nat \"$A\" 20 67 ApprovedMongoNativeOperation.java\n\necho\necho \"# 그 타입의 timeout 과 maxResults 를 읽는 자리\"\necho \" ApprovedMongoNativeOperation 을 참조하는 main 파일 :\"\nmapfile -t FILES < <(git grep -l 'ApprovedMongoNativeOperation' -- 'src/**/src/main/**/*.java')\n[ \"${#FILES[@]}\" -eq 4 ] || { echo \"EXPECTED 4 FILES, GOT ${#FILES[@]}\" >&2; exit 3; }\nprintf '%s\\n' \"${FILES[@]}\" | sed 's#.*/# #'\nprintf ' 그 파일들 안에서 .timeout() 또는 .maxResults() 를 부르는 줄 : %s 개\\n' \\\n \"$(lines '\\.(timeout|maxResults)\\(\\)' \"${FILES[@]}\")\"\nhits '\\.(timeout|maxResults)\\(\\)|timeout' \"${FILES[@]}\" \\\n | sed -E 's#^.*/([A-Za-z0-9_]+\\.java):([0-9]+): *# \\1:\\2 #'\nprintf ' hasBody 를 부르는 줄 (선언 제외) : %s 개\\n' \\\n \"$({ git grep -nE '\\.hasBody\\(\\)' -- 'src/**/*.java' || true; } | grep -c . || true)\"\n\necho\necho \"# [대조] 같은 이름의 접근자를 실제로 적용하는 다른 타입들\"\nhits '\\.(timeout|maxResults)\\(\\)' 'src/adapter/outbound/persistence-mongo/src/main/**/*.java' \\\n | sed -E 's#^.*/([A-Za-z0-9_]+\\.java):([0-9]+): *# \\1:\\2 #'\n\necho\necho \"# 이 게이트웨이가 조립되는가\"\necho \" 두 이름이 나오는 자리 전부 :\"\nhits 'PolicyAwareMongoNativeGateway|MongoNativeCapabilityGateway' 'src/**/*.java' \\\n | sed -E 's#^src/(.*)/src/([a-zA-Z]+)/java/.*/([A-Za-z0-9_$]+\\.java):([0-9]+): *# \\2 · \\3:\\4 #'\nprintf ' Bean 이나 Configuration 이 이 타입을 만드는 줄 : %s 개\\n' \\\n \"$(lines 'new PolicyAwareMongoNativeGateway' 'src/**/src/main/**/*.java')\"\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-04T07:45:17+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/analysis-finding-a06-f007.txt",
|
|
"svg": "evidence/rendered/analysis-finding-a06-f007.svg",
|
|
"rawSha256": "a9496558cc8335a5fc6be74e33fe815ae3196964ebf04c5a2d21e48205b7ae31",
|
|
"lines": 180,
|
|
"redaction": "없음"
|
|
}
|