The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
3.6 KiB
JSON
15 lines
3.6 KiB
JSON
{
|
|
"assetKey": "an-active-transaction-check-that-asked-the-wrong-question",
|
|
"kind": "terminal",
|
|
"command": "#!/bin/bash\nset -euo pipefail\ncd /shared/codebase/clean-architecture-backend-template\nB=src/adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/postgresql/idempotency\nG=$B/IdempotencyCapabilityGuard.java\nS=$B/PostgreSqlOwnerSafeIdempotencyStore.java\ntest -f \"$G\"; test -f \"$S\"\n\necho \"# 가드가 자기 존재 이유로 적는 것\"\nawk 'NR>=9 && NR<=23 {printf \" IdempotencyCapabilityGuard.java:%d %s\\n\", NR, $0}' $G\n\necho\necho \"# 그 데이터소스 필드는 어떻게 들어오는가\"\nawk 'NR>=28 && NR<=39 {printf \" IdempotencyCapabilityGuard.java:%d %s\\n\", NR, $0}' $G\n\necho\necho \"# 세 번째 질문을 지금 어떻게 묻는가\"\nawk 'NR>=87 && NR<=109 {printf \" IdempotencyCapabilityGuard.java:%d %s\\n\", NR, $0}' $G\n\necho\necho \"# 그 필드 값을 정하는 곳\"\nawk 'NR>=84 && NR<=109 {printf \" PostgreSqlOwnerSafeIdempotencyStore.java:%d %s\\n\", NR, $0}' $S\n\necho\necho \"# 이 저장소를 만드는 자리 전부와 각각이 넘기는 것\"\ngit grep -n 'new PostgreSqlOwnerSafeIdempotencyStore' \\\n | sed -E 's#^src/[^:]*/src/([a-zA-Z]+)/java/dev/caskeleton/[^:]*/([^:/]+):([0-9]+):# \\1 · \\2:\\3 #'\necho \" 그 자리들이 넘기는 JdbcOperations 의 출처 :\"\nP=src/app-bootstrap/src/main/java/dev/caskeleton/bootstrap/idempotency/PostgreSqlIdempotencyProviderConfig.java\nawk 'NR>=55 && NR<=62 {printf \" PostgreSqlIdempotencyProviderConfig.java:%d %s\\n\", NR, $0}' $P\nU=src/adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/postgresql/idempotency/OwnerSafeIdempotencyPreconditionTest.java\nawk 'NR>=44 && NR<=48 {printf \" OwnerSafeIdempotencyPreconditionTest.java:%d %s\\n\", NR, $0}' $U\necho \" 저장소에 JdbcOperations 구현이나 JdbcTemplate 하위 클래스가 있는가 :\"\n{ git grep -ln 'implements JdbcOperations\\|extends JdbcTemplate' -- 'src/**/*.java' || echo \" 0 건\"; } | sed 's/^/ /'\n\necho\necho \"# 세 번째 검사를 덮는 시험이 있는가\"\n{ git grep -n \"belongs to another one\" -- 'src' || echo \" 0 건\"; } | sed 's#.*/# #'\necho \" 전제 시험이 단언하는 것 :\"\ngrep -n ' void ' $U | sed -E 's#^([0-9]+): *# OwnerSafeIdempotencyPreconditionTest.java:\\1 #'\n\necho\necho \"# 가드를 부르는 자리\"\ngit grep -n 'requirePrimaryWriteTransaction\\|requireActiveCapability' -- 'src/**/*.java' \\\n | sed -E 's#^src/[^:]*/src/([a-zA-Z]+)/java/dev/caskeleton/[^:]*/([^:/]+):([0-9]+):# \\1 · \\2:\\3 #' | cut -c1-120\n\necho\necho \"# 형제 어댑터는 같은 질문을 어떻게 묻고 데이터소스를 어떻게 받는가\"\nfor f in PostgreSqlImmutableOutboxAppendAdapter PostgreSqlSameStoreInboxAdapter; do\n p=$(find src -name $f.java -path '*/main/*')\n echo \" $f :\"\n grep -nE 'private final DataSource|public '\"$f\"'\\(DataSource|requireNonNull\\(dataSource|requireSameResourcePrimaryWriteTransaction\\(\\) \\{|isActualTransactionActive|isCurrentTransactionReadOnly|hasResource' $p \\\n | sed -E \"s#^([0-9]+): *# $f.java:\\1 #\"\ndone\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-04T03:26:45+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/an-active-transaction-check-that-asked-the-wrong-question.txt",
|
|
"svg": "evidence/rendered/an-active-transaction-check-that-asked-the-wrong-question.svg",
|
|
"rawSha256": "b68dc2055391efaa71518721e2a49687802ff9515efbe9f507ac68f159ff529e",
|
|
"lines": 149,
|
|
"redaction": "비밀값 없음"
|
|
}
|