DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
3.4 KiB
JSON
15 lines
3.4 KiB
JSON
{
|
|
"assetKey": "a05-f022-stable",
|
|
"kind": "terminal",
|
|
"command": "V=adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/security/PostgreSqlRuntimeRoleVerifier.java\nD=adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/security/DatabaseRolePolicy.java\nR=app-bootstrap/src/main/java/dev/caskeleton/bootstrap/autoconfigure/jpa/JpaPlatformReport.java\nA=app-bootstrap/src/main/java/dev/caskeleton/bootstrap/autoconfigure/jpa/JpaPlatformAutoConfiguration.java\nC=adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/api/capability/SupportLevel.java\n\necho '# 검증기 자신의 javadoc 이 하는 주장'\ngrep -n '' \"$V\" | sed -n '18,19p'\n\necho\necho '# 정책이 검사하는 네 항목'\ngrep -n 'allowedRoles.contains\\|report.canCreateInSchema()\\|report.canCreateInDatabase()\\|searchPathPolicy.requireSafe' \"$D\"\n\necho\necho '# 검증기는 프로덕션에서 실제로 불린다 — 다만 기동이 아니라 리포트를 만들 때다'\ngrep -n -A5 'private DatabasePrivilegeReport readPrivileges' \"$A\"\ngrep -n 'roleVerifier.verify(dataSource)' \"$A\"\n\necho\necho '# 정책을 넘기는 두 인자짜리 호출'\ngrep -n -A3 'public void requireSafe(DataSource dataSource' \"$V\"\necho -n '# 그 호출을 하는 곳 (레포 전체): '\ngrep -rn 'requireSafe([a-zA-Z]*, *[a-zA-Z]*)' --include=*.java --exclude-dir=build . | grep -c 'requireSafe(runtime\\|requireSafe(dataSource'\ngrep -rn '\\.requireSafe([a-zA-Z]*, *[a-zA-Z]*)' --include=*.java --exclude-dir=build . | sed 's|^\\./||'\necho -n '# DatabaseRolePolicy 를 만드는 main 코드: '\ngrep -rn 'new DatabaseRolePolicy\\|DatabaseRolePolicy\\.of' --include=*.java --exclude-dir=build . | grep -c '/main/'\necho -n '# DatabaseRolePolicy 를 언급하는 파일 전부: '\ngrep -rl 'DatabaseRolePolicy' --include=*.java --exclude-dir=build . | sed 's|.*/||' | tr '\\n' ' '; echo\n\necho\necho '# 기동 검사 빈이 실행하는 것'\ngrep -n -A6 'InitializingBean jpaPlatformStartupCheck' \"$A\" 2>/dev/null || \\\n grep -n -A6 'InitializingBean jpaPlatformStartupCheck' app-bootstrap/src/main/java/dev/caskeleton/bootstrap/autoconfigure/jpa/JpaPlatformRuntimeAutoConfiguration.java\n\necho\necho '# 액추에이터의 검증 완료 표시가 보는 것'\ngrep -n '' \"$R\" | sed -n '36,41p'\ngrep -n 'privileges != null' \"$R\"\ngrep -n 'openInViewDisabled && runtimeRoleVerified' \"$R\"\n\necho\necho '# 그 표시를 고정하는 시험이 넣는 입력'\ngrep -n 'new DatabasePrivilegeReport' app-bootstrap/src/test/java/dev/caskeleton/bootstrap/autoconfigure/jpa/JpaPlatformAutoConfigurationTest.java\necho '# 정책 쪽 단위 시험은 그 두 조합을 실제로 넣는다'\ngrep -n 'new DatabasePrivilegeReport' adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/security/DatabaseRolePolicyTest.java\n\necho\necho '# 안정 등급의 정의'\ngrep -n -B2 ' STABLE,' \"$C\"",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template/src",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-02T04:41:19+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/a05-f022-stable.txt",
|
|
"svg": "evidence/rendered/a05-f022-stable.svg",
|
|
"rawSha256": "b720c6eb9a7f10aff1a99cdb2ccd425547700dfb409f8e8eddfbdfb01e302076",
|
|
"lines": 63,
|
|
"redaction": "none — 코드베이스 정적 검색"
|
|
}
|