Files

T

DongHyeonkaandClaude Opus 5 75bed382c8 docs(keycloak-session-store): remake all 28 diagrams through the techviz pipeline

The originating repository's SVGs were drawn by hand and every one of them
put a title, a subtitle and an explanation band inside the canvas. This
repository forbids both, so they could not be carried over — the whole set
was rebuilt through the skill's pipeline instead.

Each diagram went through prepare, references, prompt, a VizSpec 1.1 citing
document line ranges, lint, and render. All 28 pass lint and produce the
same eight formats the existing keycloak project has. Sentences moved out of
the canvas into <desc> and the paragraph beside each figure; the drawings
carry names only.

Two lint rules did real work rather than formatting work:

  edge-through-node                  caught arrows crossing an unrelated
                                     node and implying an adjacency that
                                     does not exist — four diagrams had to
                                     be restructured, not just relaid out
  evidence-outside-prepared-context  caught a diagram citing another
                                     section; its anchor moved from B-0 to
                                     B-1 so all three sections it draws on
                                     are inside the prepared context

lab-topology also had to change profile: its context offers a different
candidate set, and query-fanout with shard roles is what the section
actually shows — one entry point spreading to two Keycloak nodes.

The document now carries all 28 inline, one per claim that needed one, and
the section recording what was still missing is updated: the diagram gap is
closed, Studio records remain.

verify-pipeline.py passes. audit-records.py reports no issues.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-09-05 11:03:10 +09:00

1.5 KiB

Raw Blame History

훅 하나가 만드는 차이

Alternative text

certbot 이 갱신에 성공한 뒤 deploy 훅이 nginx 를 reload 하는 경로와, 그 훅이 없어 사람이 개입해야 하는 경로가 갈리는 구성.

Long description

훅이 없을 때 새 인증서가 디스크에 기록된 08:20:27 과 실제로 서빙된 08:58:52 사이가 2305초였고, 그것도 사람이 nginx -s reload 를 쳤기 때문이다. deploy 훅을 넣자 발급에서 서빙까지 1~2초가 됐다. 판정은 문구가 아니라 워커 PID 로 한다. certbot 이 Hook 'deploy-hook' ran with error output 이라고 찍지만 실패가 아니며 nginx 의 types_hash 경고가 stderr 로 나갔을 뿐이다. 로그에서 error 를 grep 하는 감시는 성공한 훅을 실패로 오독한다.

Elements and evidence

certbot 갱신 성공 (process): archive 에 쓰고 live 링크를 옮긴다. Evidence: L560–L570.
deploy 훅 (process): 갱신이 실제로 일어났을 때만 실행된다. Evidence: L560–L575.
nginx 워커 교체 (process): 마스터는 유지되고 워커만 새로 뜬다. Evidence: L571–L580.
새 인증서 서빙 (service): 훅이 없으면 사람이 칠 때까지 옛 것이다. Evidence: L560–L580.

Relationships

deploy 훅 → nginx 워커 교체: reload 신호. Evidence: L560–L580.
certbot 갱신 성공 → deploy 훅: 갱신 성공 시 호출. Evidence: L560–L575.
nginx 워커 교체 → 새 인증서 서빙: 새 워커가 새 인증서를 읽는다. Evidence: L571–L580.

1.5 KiB Raw Blame History Unescape Escape