DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
2.9 KiB
JSON
15 lines
2.9 KiB
JSON
{
|
|
"assetKey": "a-report-that-cannot-carry-a-datasource",
|
|
"kind": "terminal",
|
|
"command": "P=adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence\nB=app-bootstrap/src/main/java/dev/caskeleton/bootstrap/autoconfigure/jpa\necho '# 능력 선언 — 제약을 평범한 문자열로만 담는 이유'\nsed -n '10,17p' $P/api/capability/CapabilitySupport.java\necho '# 컴팩트 생성자가 강제하는 것'\nsed -n '19,28p' $P/api/capability/CapabilitySupport.java\necho\necho '# 특권 리포트 — 담지 않는 것이 정의다'\nsed -n '8,14p' $P/security/DatabasePrivilegeReport.java\necho\necho '# 밖으로 나가는 리포트 — 담을 수 없는 것'\nsed -n '8,17p' $B/JpaPlatformReport.java\necho '# 그 리포트가 특권 리포트를 담는 방식과, 그 불리언이 실제로 계산하는 것'\nsed -n '35,40p' $B/JpaPlatformReport.java\nsed -n '55,57p' $B/JpaPlatformReport.java\necho -n '# 역할 이름과 search_path 를 검사하는 정책의 main 호출자: '\ngrep -rn 'requireSafe(' --include=*.java . | grep '/main/' | grep -vc '/persistence/security/'\necho\necho '# 두 리포트의 컴포넌트 선언부에 있는 provider/자격증명 식별자 수'\nfor f in $B/JpaPlatformReport.java $P/security/DatabasePrivilegeReport.java; do\n echo -n \" $(basename $f): \"\n sed -n '/^public record/,/) {$/p' \"$f\" | grep -ic 'jdbcurl\\|password\\|host\\|url\\|datasource\\|entitymanager\\|sessionfactory'\ndone\necho\necho '# 그 리포트를 내보내는 엔드포인트'\ngrep -n '@Endpoint\\|@ReadOperation' $B/JpaPlatformEndpoint.java\necho -n ' @WriteOperation / @DeleteOperation / @Selector 매치: '\ngrep -c '@WriteOperation\\|@DeleteOperation\\|@Selector' $B/JpaPlatformEndpoint.java\nsed -n '10,14p' $B/JpaPlatformEndpoint.java\necho\necho '# 다만 그 엔드포인트는 지금 노출되지 않는다'\necho -n \" 저장소에서 'jpaplatform' 이 나오는 곳: \"\ngrep -rn 'jpaplatform' --include=*.yml --include=*.yaml --include=*.properties --include=*.java . | grep -vc /build/\ngrep -rn 'jpaplatform' --include=*.yml --include=*.yaml --include=*.properties --include=*.java . | grep -v /build/ | sed 's|.*/||'\necho ' 출하 설정의 노출 목록'\ngrep -n -A2 'include: health' app-bootstrap/src/main/resources/application.yml\necho ' 등록 지점이 그것을 적어 둔다'\nsed -n '131,133p' $B/JpaPlatformRuntimeAutoConfiguration.java\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template/src",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-02T02:10:16+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/a-report-that-cannot-carry-a-datasource.txt",
|
|
"svg": "evidence/rendered/a-report-that-cannot-carry-a-datasource.svg",
|
|
"rawSha256": "0509f66ce40017d18a4aa74259e013c9865443a8a72c54a5290f2899ec33206f",
|
|
"lines": 78,
|
|
"redaction": "none — 출력에 자격증명이 없다"
|
|
}
|