7.0 KiB
7.0 KiB
keycloak-session-store command audit — 2026-09-20
현재 작업 트리의 command-bearing Record 전체를 reference mode로 다시 분석한 프로젝트 단위 감사 기록이다. 옛 run을 소급 수정하지 않고, 현재 parser와 현재 파일 SHA를 기준으로 남긴다.
결과
- Record: 33
- shell block: 992
- deterministic finding: 53
- major finding: 0
- command-like text block: 15
- finding code: hidden-stderr 48 / compound-remote-shell 5
- reviewer verdict: PASS
남은 53건은 전역 금지 항목이 아니다. 2026-09-20 후속 리뷰에서 실제 문맥을 다시 확인했고 새 high-confidence command defect를 발견하지 못했다. 따라서 signal은 삭제하지 않고 현재 minor review signal로 보존한다.
Record별 영수증
| Record | SHA256 | shell | findings | major | text-like | verdict |
|---|---|---|---|---|---|---|
docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/case/case-200ms-of-delay-became-22-seconds.md |
e5d1f4226e6c |
1 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/case/case-ghost-rows-are-cleaned-by-the-surviving-coordinator.md |
76dba710df24 |
1 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a2-database-loss.md |
9a7e5fa9220b |
39 | 1 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a3-database-crash.md |
5d93cbd662a5 |
42 | 1 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a4-node-loss.md |
6f1460232afa |
54 | 1 | 0 | 10 | PASS |
docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a5-asymmetric-partition.md |
654fb69b0569 |
58 | 4 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/losing-a-node-or-the-store/setup/setup-reproduce-a6-latency-injection.md |
14f46a092498 |
41 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d1-backup-restore.md |
2dc589f9367a |
31 | 1 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d2-version-upgrade.md |
5185e6b3c2b4 |
32 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d3-secret-exposure.md |
f868aa7e2da3 |
20 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d4-certificate-renewal.md |
2e7fc8f1bbb9 |
55 | 10 | 0 | 3 | PASS |
docs/keycloak-session-store/tech-log-studio/operations-that-report-success/setup/setup-reproduce-d4a-deploy-hook.md |
8a4b1e7f1b09 |
39 | 11 | 0 | 1 | PASS |
docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a0-session-sharing-path.md |
1e9d2586675f |
50 | 3 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a1-jgroups-transport-block.md |
080b611a1a02 |
57 | 4 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a7-volatile-comparison.md |
ea8a580b34cf |
55 | 2 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a7a-volatile-cause.md |
41f23c0a12a7 |
47 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/session-custody-across-nodes/setup/setup-reproduce-a8-rolling-restart.md |
1711dd816cc2 |
30 | 2 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/case/case-nobody-implemented-backchannel-logout.md |
242233ace9e8 |
1 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/case/case-orphan-sessions-and-the-ttl-that-finds-them.md |
5d26b51c23c5 |
1 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-b4-forged-identity-headers.md |
b0c7c2dd599d |
28 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-b7-cookie-secret-rotation.md |
5b1d01e4a359 |
31 | 1 | 0 | 1 | PASS |
docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-b7a-orphan-session.md |
fbeec582b113 |
26 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-c1-multi-app-sso.md |
81b46166deb8 |
27 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/trust-handed-over-at-the-edge/setup/setup-reproduce-c2-backchannel-logout.md |
1bb3fe494a8a |
28 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/when-the-measurement-lies/concept/concept-the-up-metric-cannot-see-alive-but-useless.md |
b9eb1a539f60 |
2 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/where-application-state-lives/case/case-moving-the-session-left-the-tokens-behind.md |
ef7b48d8b745 |
1 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/where-application-state-lives/case/case-the-winner-of-the-rotation-race-also-loses.md |
81348c4d5c07 |
1 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b0-default-session-store.md |
0fe7e078997a |
41 | 1 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b1-redis-session-store.md |
95c04738e93b |
38 | 2 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b2-jdbc-token-store.md |
1e38ce87ff35 |
28 | 2 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b3-refresh-contention.md |
9e74fa28aa5a |
31 | 3 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b5-redis-loss.md |
8ebe88c32acc |
28 | 0 | 0 | 0 | PASS |
docs/keycloak-session-store/tech-log-studio/where-application-state-lives/setup/setup-reproduce-b6-key-rotation.md |
e2e38eef9f41 |
28 | 4 | 0 | 0 | PASS |
Disposition
hidden-stderr:REVIEWED_ACCEPTED_MINOR— 측정/필드 추출/reference 문맥에서 사용된 신호이며 이번 리뷰에서 새 결함으로 판정하지 않았다.compound-remote-shell:REVIEWED_ACCEPTED_MINOR— read-only 확인 또는 검증 성공 뒤 변경 같은 문맥을 포함하며, 복합 원격 셸이라는 이유만으로 자동 분해하지 않는다.- command-like text fence:
REVIEWED_REFERENCE_TEXT— 역사적 출력/설명/reference 문맥을 보존하며 shell fence로 자동 변환하지 않는다.
JSON artifact에는 각 Record의 전체 SHA256, finding별 block id/code/severity/disposition, text-like block별 SHA와 disposition을 함께 기록했다.