DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
4.4 KiB
JSON
15 lines
4.4 KiB
JSON
{
|
|
"assetKey": "a16-f004-graphqloperationnamepolicy",
|
|
"kind": "terminal",
|
|
"command": "set -e\nset -o pipefail\nG=src/adapter/inbound/graphql/src/main/java/dev/caskeleton/adapter/inbound/graphql\nstrip() { sed -E 's#^src/[^:]*/src/(main|test|testFixtures)/[^:]*/([^:/]+):([0-9]+):# \\1 · \\2:\\3 #'; }\n\necho \"# 이름 요구를 읽는 세 클래스의 줄 수\"\nwc -l $G/execution/GraphQlOperationNamePolicy.java \\\n $G/runtime/GraphQlOperationSelectionHandler.java \\\n $G/http/GraphQlRequestEnvelopeValidator.java \\\n | sed -E 's#^ *([0-9]+) .*/([^/]+)$# \\2 : \\1 줄#' | grep -v total\n\necho\necho \"# GraphQlOperationNamePolicy 를 자기 파일 밖에서 쓰는 자리\"\ngit grep -n 'GraphQlOperationNamePolicy' -- 'src/**/*.java' \\\n | grep -v '/GraphQlOperationNamePolicy.java:' | strip\n\necho\necho \"# GraphQlOperationNameInterceptor 를 자기 파일 밖에서 쓰는 자리\"\ngit grep -n 'GraphQlOperationNameInterceptor' -- 'src/**/*.java' \\\n | grep -v '/GraphQlOperationNameInterceptor.java:' | strip\n\necho\necho \"# GraphQlRequestEnvelopeValidator 를 실제로 만드는 자리 전부\"\ngit grep -n 'GraphQlRequestEnvelopeValidator\\.\\(forPolicy\\|maxVariablesBytes\\)' -- 'src/**/*.java' \\\n | grep -v '/GraphQlRequestEnvelopeValidator.java:' \\\n | sed -E 's#^src/[^:]*/src/([a-zA-Z]+)/[^:]*/([^:/]+):([0-9]+):.*# \\1 · \\2:\\3#'\n\necho\necho \"# namedOperationRequired 를 읽는 프로덕션 코드\"\ngit grep -n 'policy.namedOperationRequired()\\|namedOperationRequired &&' -- 'src/**/*.java' | strip\n\necho\necho \"# GraphQlClientPolicy 인스턴스를 만드는 프로덕션 코드 전부\"\ngit grep -n 'new GraphQlClientPolicy(\\|GraphQlClientPolicy.defaults(' -- 'src/**/*.java' | grep '/main/' | strip\necho \" 그 빈을 내놓는 자리 :\"\nawk 'NR>=300 && NR<=308 {printf \" GraphQlPlatformAutoConfiguration.java:%d %s\\n\", NR, $0}' \\\n $G/autoconfigure/GraphQlPlatformAutoConfiguration.java\necho \" defaults 가 마지막 세 성분에 넣는 값과 그 성분의 이름 :\"\ngrep -n 'introspectionAllowed,$' $G/policy/GraphQlClientPolicy.java | tail -1 \\\n | sed -E 's#^([0-9]+):# 값 GraphQlClientPolicy.java:\\1 #'\ngrep -n '^ false,$\\|^ false);$' $G/policy/GraphQlClientPolicy.java \\\n | sed -E 's#^([0-9]+):# 값 GraphQlClientPolicy.java:\\1 #'\ngrep -n 'boolean introspectionAllowed,\\|boolean persistedOperationOnly,\\|boolean namedOperationRequired)' $G/policy/GraphQlClientPolicy.java \\\n | sed -E 's#^([0-9]+):# 이름 GraphQlClientPolicy.java:\\1 #'\n\necho\necho \"# 배선된 핸들러가 요청 경로에 오르는 사슬\"\ngit grep -n 'new GraphQlOperationSelectionHandler(\\|GraphQlExecutionChain.stable(\\|new GraphQlPlatformInstrumentation(' -- 'src/**/*.java' | grep '/main/' | strip\ngrep -n 'chain.run(' $G/runtime/GraphQlPlatformInstrumentation.java \\\n | sed -E 's#^([0-9]+):# GraphQlPlatformInstrumentation.java:\\1 #'\necho \" 그 사슬이 붙는 어댑터 자체의 조건 :\"\ngrep -n 'ConditionalOnProperty' $G/autoconfigure/GraphQlRootAutoConfiguration.java \\\n | sed -E 's#^([0-9]+):# GraphQlRootAutoConfiguration.java:\\1 #'\n\necho\necho \"# GraphQlRequestContext.operationId 를 읽는 프로덕션 코드\"\nhits=$(git grep -n 'requestContext()\\.operationId()' -- 'src/adapter/inbound/graphql/**/*.java' | grep '/main/' || true)\nif [ -z \"$hits\" ]; then echo \" main 에서 0 건\"; else echo \"$hits\" | strip; fi\necho \" 참고 — 이 모듈 main 에서 operationId() 로 잡히는 둘은 별개 타입이다 :\"\ngit grep -n '\\.operationId()' -- 'src/adapter/inbound/graphql/**/*.java' | grep '/main/' | strip\n\necho\necho \"# 미배선 정책이 이름을 검사하는 방식과 GraphQlOperationName.parse 의 계약\"\nawk 'NR>=54 && NR<=61 {printf \" GraphQlOperationNamePolicy.java:%d %s\\n\", NR, $0}' \\\n $G/execution/GraphQlOperationNamePolicy.java\nawk 'NR>=37 && NR<=42 {printf \" GraphQlOperationName.java:%d %s\\n\", NR, $0}' \\\n $G/api/GraphQlOperationName.java\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-03T09:18:12+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/a16-f004-graphqloperationnamepolicy.txt",
|
|
"svg": "evidence/rendered/a16-f004-graphqloperationnamepolicy.svg",
|
|
"rawSha256": "4d31267893d2352c81dd3f8fe7cac57c9f9c084dabb8d14c0d553320a7fe87c0",
|
|
"lines": 89,
|
|
"redaction": "코드베이스 측정으로 교체"
|
|
}
|