DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
2.5 KiB
JSON
15 lines
2.5 KiB
JSON
{
|
|
"assetKey": "a13-f008-host",
|
|
"kind": "terminal",
|
|
"command": "set -e\nset -o pipefail\nP=adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/platform/provider\nW=adapter/inbound/web/src/main/java/dev/caskeleton/adapter/inbound/web\necho \"# 매퍼가 서명 대상에 넣는 값과, 요청에 싣는 헤더\"\ngrep -n 'String host = properties.endpoint().getHost()\\|Map.of(\"host\", host' $P/ses/SesRequestMapper.java\nsed -n '122,126p' $P/ses/SesRequestMapper.java\necho\necho \"# 게이트웨이가 host 를 거르는 자리 (공급되었을 때를 지킨다)\"\ngrep -n 'Set.of(\"connection\"\\|if (!RESTRICTED.contains(name))' $P/http/JdkNotificationHttpGateway.java\necho\necho \"# 엔드포인트 가드가 포트를 보는가\"\n{ grep -n 'getPort' $P/http/NotificationEndpoints.java || echo \" (일치 0)\"; }\ngrep -n 'requireExternallyRoutable(endpoint, \"SES endpoint\"' $P/ses/SesProviderProperties.java\necho\necho \"# 비기본 포트 URI 를 실제 매퍼에 먹이는 자리\"\ngrep -rn 'URI.create(\"http://127.0.0.1:\" + server.getAddress().getPort())' --include=*.java adapter/outbound/notification --exclude-dir=build \\\n | sed -E 's#^[^:]*/src/(main|test)/[^:]*/([^:/]+):#\\1 · \\2:#'\ngrep -rn 'harness.baseUri()' --include=*.java adapter/outbound/notification --exclude-dir=build \\\n | grep -iE 'ses|webpush|Contract' \\\n | sed -E 's#^[^:]*/src/(main|test)/[^:]*/([^:/]+):#\\1 · \\2:#'\necho\necho \"# 같은 모양의 다른 서명기\"\ngrep -n 'String audience = endpoint.getScheme()' $P/webpush/VapidJwtSigner.java\necho\necho \"# 저장소가 이미 쓰는 수정식과 그 이유\"\nsed -n '11,12p' $W/notification/platform/callback/ExternalRequestUrlResolver.java\nsed -n '57,63p' $W/notification/platform/callback/ExternalRequestUrlResolver.java\necho \" — 같은 판정을 하는 자리 전부 (규칙으로 검색)\"\ngrep -rn 'port == 443\\|port == 80' --include=*.java . --exclude-dir=build | grep '/src/main/' \\\n | sed -E 's#^[^:]*/src/(main|test)/[^:]*/([^:/]+):#\\1 · \\2:#'\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template/src",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-02T17:55:54+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/a13-f008-host.txt",
|
|
"svg": "evidence/rendered/a13-f008-host.svg",
|
|
"rawSha256": "1f04d762e3d8ca7ca5c6c380da597506f3d09d6af3e66aadd3705c0521000b9d",
|
|
"lines": 46,
|
|
"redaction": "none — 코드베이스 정적 검색"
|
|
}
|