DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
4.8 KiB
JSON
15 lines
4.8 KiB
JSON
{
|
|
"assetKey": "analysis-finding-a06-f023",
|
|
"kind": "terminal",
|
|
"command": "#!/bin/bash\nset -euo pipefail\ncd /shared/codebase/clean-architecture-backend-template\n. /tmp/lib.sh\nM=src/adapter/outbound/persistence-mongo/src/main/java/dev/caskeleton/adapter/outbound/mongo\nS=$M/advanced/sharding/admin/MongoShardingAdminGateway.java\nG=$M/security/admin/MongoAdminGateway.java\nO=$M/security/admin/MongoAdminOperation.java\nfor f in \"$S\" \"$G\" \"$O\"; do test -f \"$f\"; done\n\necho \"# 샤딩 게이트웨이의 네 작업\"\nat \"$S\" 33 93 MongoShardingAdminGateway.java\nprintf ' 네 메서드가 부르는 것 : %s 개\\n' \"$(lines 'adminGateway\\.execute\\(' \"$S\")\"\n\necho\necho \"# 그 다섯 인자 오버로드가 하는 일\"\nat \"$G\" 40 68 MongoAdminGateway.java\n\necho\necho \"# 실행 경로가 승인을 요구하는 자리\"\nat \"$G\" 69 111 MongoAdminGateway.java\n\necho\necho \"# 다섯 인자 오버로드로 넘어가는 연산들의 위험 등급\"\nat \"$O\" 3 10 MongoAdminOperation.java\n{ grep -nE 'SHARD_COLLECTION|REFINE_SHARD_KEY|RESHARD_COLLECTION|BALANCER_CONTROL|MANAGE_ENCRYPTION_KEY|CREATE_COLLECTION|COLL_MOD' \"$O\" || true; } \\\n | sed -E 's#^([0-9]+): *# MongoAdminOperation.java:\\1 #'\nprintf ' 그 일곱 가운데 highRisk(true) 인 것 : %s 개\\n' \\\n \"$({ grep -cE '^ (SHARD_COLLECTION|REFINE_SHARD_KEY|RESHARD_COLLECTION|MANAGE_ENCRYPTION_KEY)\\(true\\)' \"$O\" || true; })\"\nprintf ' [대조] 열거형 전체에서 highRisk(true) 인 것 : %s 개\\n' \\\n \"$({ grep -cE '^ [A-Z_]+\\(true\\)' \"$O\" || true; })\"\nprintf ' [대조] 열거형 상수 전체 : %s 개\\n' \\\n \"$({ grep -cE '^ [A-Z_]+\\((true|false)\\)' \"$O\" || true; })\"\n\necho\necho \"# 세 인자 오버로드를 부르는 자리가 있는가\"\nprintf ' 승인을 실제로 넘기는 main 호출 : %s 개\\n' \\\n \"$(lines '[Gg]ateway\\.execute\\([A-Za-z]+Command|execute\\(command, approval' 'src/**/src/main/**/*.java')\"\necho \" execute 를 부르는 main 자리 전부 :\"\nhits '[Gg]ateway\\.execute\\(' 'src/**/src/main/**/*.java' \\\n | sed -E 's#^.*/([A-Za-z0-9_]+\\.java):([0-9]+): *# \\1:\\2 #'\nprintf ' [대조] 시험에서 세 인자 execute 를 부르는 줄 : %s 개\\n' \\\n \"$({ git grep -nE 'gateway\\.execute\\(' -- '**/MongoAdminAuditStateMachineTest.java' || true; } | grep -c . || true)\"\nprintf ' MongoAdminApproval 을 만드는 main 줄 : %s 개\\n' \\\n \"$({ git grep -nE 'MongoAdminApproval\\.of\\(|new MongoAdminApproval' -- 'src/**/src/main/**/*.java' || true; } | { grep -v '/MongoAdminApproval.java:' || true; } | grep -c . || true)\"\necho \" 그 이름이 main 에 나오는 자리 전부 :\"\nhits 'MongoAdminApproval' 'src/**/src/main/**/*.java' \\\n | sed -E 's#^.*/([A-Za-z0-9_]+\\.java):([0-9]+): *# \\1:\\2 #'\nprintf ' [대조] 시험에서 그것을 만드는 줄 : %s 개\\n' \\\n \"$(lines 'MongoAdminApproval\\.of\\(|new MongoAdminApproval' 'src/**/src/*[Tt]est*/**/*.java')\"\n\necho\necho \"# main 에 등장하는 연산 상수와 그 위험 등급\"\nfor c in $({ git grep -hoE 'MongoAdminOperation\\.[A-Z_]+' -- 'src/**/src/main/**/*.java' || true; } | sed 's/.*\\.//' | sort -u); do\n risk=$({ grep -oE \"^ $c\\((true|false)\\)\" \"$O\" || true; } | sed -E 's/.*\\((true|false)\\)/\\1/')\n n=$({ git grep -c \"MongoAdminOperation\\.$c\" -- 'src/**/src/main/**/*.java' || true; } | awk -F: '{s+=$NF} END{print s+0}')\n printf ' %-24s highRisk=%-5s · main 등장 %s 줄\\n' \"$c\" \"${risk:-없음}\" \"$n\"\ndone\necho \" 고위험인데 다섯 인자 오버로드로 넘어가는 자리 :\"\nat \"$M/advanced/sharding/admin/MongoShardingAdminGateway.java\" 64 64 MongoShardingAdminGateway.java\nat \"$M/advanced/sharding/admin/MongoShardingAdminGateway.java\" 75 75 MongoShardingAdminGateway.java\nat \"$M/advanced/sharding/admin/MongoShardingAdminGateway.java\" 86 87 MongoShardingAdminGateway.java\nE=$(git ls-files -- '**/MongoQueryableEncryptionCollectionManager.java')\ntest -f \"$E\"\nat \"$E\" 34 43 MongoQueryableEncryptionCollectionManager.java\nat \"$E\" 61 65 MongoQueryableEncryptionCollectionManager.java\n\necho\necho \"# 두 승인 타입을 잇는 코드가 있는가\"\nprintf ' ReshardApproval 이 main 에 나오는 줄 : %s 개\\n' \"$(lines 'ReshardApproval' 'src/**/src/main/**/*.java')\"\nhits 'ReshardApproval' 'src/**/src/main/**/*.java' \\\n | sed -E 's#^.*/([A-Za-z0-9_]+\\.java):([0-9]+): *# \\1:\\2 #'\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-04T08:40:01+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/analysis-finding-a06-f023.txt",
|
|
"svg": "evidence/rendered/analysis-finding-a06-f023.svg",
|
|
"rawSha256": "99dbf4e9af97dfd3358c609e4e6633a25be71dcea05130330f68c89dead82833",
|
|
"lines": 215,
|
|
"redaction": "없음"
|
|
}
|