The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
95 lines
16 KiB
XML
95 lines
16 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="1624" viewBox="0 0 1200 1624" role="img">
|
|
<title>terminal evidence</title>
|
|
<desc>Terminal-style rendering generated from retained command output. Sensitive-looking values are redacted in the visual asset.</desc>
|
|
<rect x="1" y="1" width="1198" height="1622" rx="14" fill="#0d1117" stroke="#30363d"/>
|
|
<rect x="1" y="1" width="1198" height="44" rx="14" fill="#161b22"/>
|
|
<rect x="1" y="30" width="1198" height="14" fill="#161b22"/>
|
|
<circle cx="24" cy="22" r="6" fill="#ff5f57"/>
|
|
<circle cx="44" cy="22" r="6" fill="#febc2e"/>
|
|
<circle cx="64" cy="22" r="6" fill="#28c840"/>
|
|
<text x="92" y="27" fill="#8b949e" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace">terminal evidence</text>
|
|
<text x="24" y="68" fill="#c9d1d9" font-size="15" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">$ set -e
|
|
set -o pipefail
|
|
NP=adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/pla</tspan><tspan x="24" dy="22">tform/provider
|
|
HP=adapter/outbound/httpclient/src/main/java/dev/caskeleton/adapter/outbound/httpclient/restclient
|
|
echo "</tspan><tspan x="24" dy="22"># Retry-After 를 초로 바꾸는 자리 — 파싱 구문으로 전수 검색"
|
|
grep -rnI 'parseLong\|parseInt\|Duration.parse' --include=</tspan><tspan x="24" dy="22">*.java . --exclude-dir=build \
|
|
| grep -i 'retry\|seconds\|header' | sed 's#.*/##'
|
|
echo
|
|
echo "# 그 네 자리 안에서 부호</tspan><tspan x="24" dy="22">를 보는 줄"
|
|
grep -n 'isNegative\|seconds > 0\|< 0' \
|
|
$NP/ProviderResults.java $NP/fcm/FcmFailureClassifier.java \
|
|
$N</tspan><tspan x="24" dy="22">P/webhook/WebhookNotificationProviderAdapter.java $HP/BlockingAttemptExecutor.java \
|
|
| sed 's#.*/##'
|
|
echo
|
|
echo "# 받는</tspan><tspan x="24" dy="22"> 쪽 검사 — ProviderFailure 정규 생성자"
|
|
grep -n 'isNegative()\|throw new IllegalArgumentException' \
|
|
application-core</tspan><tspan x="24" dy="22">/src/main/java/dev/caskeleton/application/notification/platform/provider/ProviderFailure.java
|
|
echo
|
|
echo "# 공용 파서를 </tspan><tspan x="24" dy="22">쓰는 자리"
|
|
grep -rn 'ProviderResults.retryAfter(' --include=*.java . --exclude-dir=build | sed 's#.*/##'
|
|
echo
|
|
echo "# Fc</tspan><tspan x="24" dy="22">mFailureClassifier 가 나오는 자리 전부"
|
|
grep -rn 'FcmFailureClassifier' --include=*.java . --exclude-dir=build | sed 's#</tspan><tspan x="24" dy="22">.*/##'
|
|
echo
|
|
echo "# 알림 리프의 시험이 넣는 헤더 값"
|
|
grep -rni '"retry-after"' --include=*.java adapter/outbound/notific</tspan><tspan x="24" dy="22">ation --exclude-dir=build \
|
|
| grep -v '/src/main/' | sed 's#.*/##'
|
|
echo
|
|
echo "# 이 헤더를 만드는 다른 자리"
|
|
grep -rn '</tspan><tspan x="24" dy="22">setHeader("Retry-After"' --include=*.java . --exclude-dir=build | sed 's#.*/##'
|
|
</tspan></text>
|
|
<text x="24" y="354" fill="#8b949e" font-size="13" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">cwd: /shared/codebase/clean-architecture-backend-template/src</tspan></text>
|
|
<text x="24" y="376" fill="#8b949e" font-size="13" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">time: 2026-09-02T16:48:38+00:00 · exit 0</tspan></text>
|
|
<line x1="24" y1="390" x2="1176" y2="390" stroke="#30363d"/>
|
|
<text x="24" y="430" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># Retry-After 를 초로 바꾸는 자리 — 파싱 구문으로 전수 검색</tspan></text>
|
|
<text x="24" y="452" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">RabbitBrokerIT.java:116: Long.parseLong(returned.getProperties().getHeaders().get("x-seq").toString())));</tspan></text>
|
|
<text x="24" y="474" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">KafkaDeliveryMapper.java:148: return Integer.parseInt(required(headers, name));</tspan></text>
|
|
<text x="24" y="496" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">KafkaRetryMetadataMapper.java:75: int attempt = Integer.parseInt(value.orElseThrow().value());</tspan></text>
|
|
<text x="24" y="518" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">Draft12UploadController.java:159: long value = Long.parseLong(header.trim());</tspan></text>
|
|
<text x="24" y="540" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">NormalizedForwardedHeaders.java:138: int port = Integer.parseInt(value);</tspan></text>
|
|
<text x="24" y="562" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">WebThrottleHttpContract.java:49: assertThat(Integer.parseInt(fixture().exhaustAndCall().retryAfter())).isGreaterThanOrEqualTo</tspan><tspan x="24" dy="22">(1);</tspan></text>
|
|
<text x="24" y="606" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">BlockingAttemptExecutor.java:238: return Optional.of(Duration.ofSeconds(Long.parseLong(header.get().trim())));</tspan></text>
|
|
<text x="24" y="628" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">LettuceRedisAdminOperations.java:145: Duration.ofSeconds(Long.parseLong(attributes.getOrDefault("age", "0"))),</tspan></text>
|
|
<text x="24" y="650" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">LettuceRedisAdminOperations.java:146: Duration.ofSeconds(Long.parseLong(attributes.getOrDefault("idle", "0"))),</tspan></text>
|
|
<text x="24" y="672" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">ProviderResults.java:94: return Optional.of(Duration.ofSeconds(Long.parseLong(value.trim())));</tspan></text>
|
|
<text x="24" y="694" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmFailureClassifier.java:70: return Optional.of(Duration.ofSeconds(Long.parseLong(value.trim())));</tspan></text>
|
|
<text x="24" y="716" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">WebhookNotificationProviderAdapter.java:243: long seconds = Long.parseLong(value.trim());</tspan></text>
|
|
<text x="24" y="738" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="760" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 그 네 자리 안에서 부호를 보는 줄</tspan></text>
|
|
<text x="24" y="782" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">WebhookNotificationProviderAdapter.java:244: return seconds > 0 ? Optional.of(Duration.ofSeconds(seconds)) : Opti</tspan><tspan x="24" dy="22">onal.empty();</tspan></text>
|
|
<text x="24" y="826" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="848" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 받는 쪽 검사 — ProviderFailure 정규 생성자</tspan></text>
|
|
<text x="24" y="870" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">27: throw new IllegalArgumentException("code");</tspan></text>
|
|
<text x="24" y="892" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">31: if (delay.isNegative()) {</tspan></text>
|
|
<text x="24" y="914" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">32: throw new IllegalArgumentException("retryAfter");</tspan></text>
|
|
<text x="24" y="936" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="958" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 공용 파서를 쓰는 자리</tspan></text>
|
|
<text x="24" y="980" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">SesFailureClassifier.java:37: ProviderResults.retryAfter(response.header("retry-after")),</tspan></text>
|
|
<text x="24" y="1002" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">SesFailureClassifier.java:49: response.statusCode(), ProviderResults.retryAfter(response.header("retry-after")));</tspan></text>
|
|
<text x="24" y="1024" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">WebPushFailureClassifier.java:39: status, ProviderResults.retryAfter(response.header("retry-after")));</tspan></text>
|
|
<text x="24" y="1046" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">TwilioFailureClassifier.java:35: ProviderResults.retryAfter(response.header("retry-after")),</tspan></text>
|
|
<text x="24" y="1068" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">TwilioFailureClassifier.java:39: response.statusCode(), ProviderResults.retryAfter(response.header("retry-after")));</tspan></text>
|
|
<text x="24" y="1090" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1112" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># FcmFailureClassifier 가 나오는 자리 전부</tspan></text>
|
|
<text x="24" y="1134" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmBatchAdapterTest.java:122: var classifier = new FcmFailureClassifier();</tspan></text>
|
|
<text x="24" y="1156" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmBatchAdapterTest.java:134: var classifier = new FcmFailureClassifier();</tspan></text>
|
|
<text x="24" y="1178" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmBatchAdapterTest.java:154: new FcmFailureClassifier(),</tspan></text>
|
|
<text x="24" y="1200" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmFailureClassifier.java:16:public final class FcmFailureClassifier {</tspan></text>
|
|
<text x="24" y="1222" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmBatchCoordinator.java:32: private final FcmFailureClassifier classifier;</tspan></text>
|
|
<text x="24" y="1244" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmBatchCoordinator.java:40: FcmFailureClassifier classifier,</tspan></text>
|
|
<text x="24" y="1266" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmContactPointUpdater.java:19: private final FcmFailureClassifier classifier;</tspan></text>
|
|
<text x="24" y="1288" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">FcmContactPointUpdater.java:22: ContactPointStorePort contactPoints, FcmFailureClassifier classifier) {</tspan></text>
|
|
<text x="24" y="1310" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1332" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 알림 리프의 시험이 넣는 헤더 값</tspan></text>
|
|
<text x="24" y="1354" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">TwilioSmsProviderAdapterTest.java:94: harness.respondWith(429, "{\"code\":20429}", Map.of("retry-after", "10"));</tspan></text>
|
|
<text x="24" y="1376" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">ProviderAdapterContract.java:79: .respondWith(429, "{\"reason\":\"TooManyRequests\"}", java.util.Map.of("retry-after", "7</tspan><tspan x="24" dy="22">"));</tspan></text>
|
|
<text x="24" y="1420" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">NotificationChaosSecurityTest.java:120: 429, "{\"reason\":\"TooManyRequests\"}", Map.of("retry-after", "3")),</tspan></text>
|
|
<text x="24" y="1442" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">CrossProviderContractSuiteTest.java:77: harness.respondWith(429, "{\"reason\":\"TooManyRequests\"}", Map.of("retry-after", </tspan><tspan x="24" dy="22">"7"));</tspan></text>
|
|
<text x="24" y="1486" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1508" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 이 헤더를 만드는 다른 자리</tspan></text>
|
|
<text x="24" y="1530" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">WebMvcThrottleFilter.java:133: response.setHeader("Retry-After", retryAfter);</tspan></text>
|
|
<text x="24" y="1552" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">MockHttpServer.java:99: server.enqueue(new MockResponse().setResponseCode(status).setHeader("Retry-After", retryAfter));</tspan></text>
|
|
<text x="24" y="1574" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">StatefulUpstream.java:62: .setHeader("Retry-After", retryAfterSeconds)</tspan></text>
|
|
</svg>
|