The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
5.1 KiB
JSON
15 lines
5.1 KiB
JSON
{
|
|
"assetKey": "analysis-finding-a03-f001",
|
|
"kind": "terminal",
|
|
"command": "#!/bin/bash\nset -euo pipefail\ncd /shared/codebase/clean-architecture-backend-template\n\nhits() {\n local out rc\n out=$(git grep -nE \"$1\" -- \"$2\") && rc=0 || rc=$?\n [ \"$rc\" -le 1 ] || { echo \"SEARCH FAILED rc=$rc : $1\" >&2; exit 2; }\n [ \"$rc\" -eq 0 ] && printf '%s\\n' \"$out\" || true\n}\nmod() { sed -E 's#^src/(.*)/src/([a-zA-Z]+)/java/.*/([A-Za-z]+\\.java):([0-9]+): *# \\1 · \\2 · \\3:\\4 #'; }\n\nP=src/application-core/src/main/java/dev/caskeleton/application/notification/platform/admin/AdminOperationStorePort.java\nA=src/application-core/src/main/java/dev/caskeleton/application/notification/platform/admin/AdminOperationClaim.java\nJ=src/adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/notification/platform/JpaAdminOperationStore.java\nR=src/adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/notification/platform/AdminAuditJpaRepository.java\nS=src/application-core/src/main/java/dev/caskeleton/application/notification/platform/admin/NotificationAdminApplicationService.java\nV=$(git ls-files -- '**/V8__notification_admin_claim.sql')\nT=$(git ls-files -- '**/AdminOperationClaimContractTest.java')\nfor f in \"$P\" \"$A\" \"$J\" \"$R\" \"$S\" \"$V\" \"$T\"; do test -f \"$f\"; done\n\necho \"# 포트가 선언한 세 연산 ($(wc -l < \"$P\") 줄 전문)\"\nawk '{printf \" AdminOperationStorePort.java:%d %s\\n\", NR, $0}' \"$P\"\n\necho\necho \"# claim 이 돌려주는 네 답\"\nawk 'NR>=5 && NR<=35 {printf \" AdminOperationClaim.java:%d %s\\n\", NR, $0}' \"$A\"\n\necho\necho \"# 그 연산이 생긴 이유 — 마이그레이션 헤더\"\nawk 'NR>=1 && NR<=11 {printf \" V8__notification_admin_claim.sql:%d %s\\n\", NR, $0}' \"$V\"\n\necho\necho \"# JPA 구현이 무엇을 보내고 무엇으로 판단하는가\"\nawk 'NR>=30 && NR<=71 {printf \" JpaAdminOperationStore.java:%d %s\\n\", NR, $0}' \"$J\"\necho\nawk 'NR>=28 && NR<=45 {printf \" AdminAuditJpaRepository.java:%d %s\\n\", NR, $0}' \"$R\"\n\necho\necho \"# 서비스가 operations 포트에 거는 호출 전부\"\ngrep -n 'operations\\.[a-zA-Z]*(' \"$S\" | sed -E 's#^([0-9]+): *# NotificationAdminApplicationService.java:\\1 #'\necho \" operations.claim : $({ grep -c 'operations\\.claim' \"$S\" || true; }) 줄\"\necho \" [자기시험] operations.claimZZZ : $({ grep -c 'operations\\.claimZZZ' \"$S\" || true; }) 줄 (0 이어야 정상)\"\necho \" [대조] operations.save : $({ grep -c 'operations\\.save' \"$S\" || true; }) 줄 (0 이면 검색이 깨진 것)\"\necho \" commandFingerprint 를 계산하는 자리 :\"\nhits 'commandFingerprint|command_fingerprint' 'src/**/*.java' | mod\n\necho\necho \"# 네 경로가 조회와 저장 사이에 부르는 협력자\"\nFIELDS=$(grep -oP '^\\s+private final \\S+\\s+\\K\\w+(?=;)' \"$S\" | paste -sd'|')\n[ -n \"$FIELDS\" ] || { echo \"no fields parsed\" >&2; exit 2; }\necho \" (서비스가 선언한 협력자 필드에서 유도한 패턴 : $FIELDS)\"\nfor m in redrive reconcile suppress setProviderState; do\n s=$(grep -n \"public [A-Za-z]* $m(\" \"$S\" | cut -d: -f1) || true\n [ -n \"$s\" ] || { echo \"method $m not found\" >&2; exit 2; }\n e=$(awk -v s=\"$s\" 'NR>s && /^ }$/ {print NR; exit}' \"$S\")\n [ -n \"$e\" ] || { echo \"no closing brace for $m\" >&2; exit 2; }\n printf ' %-16s (:%s~:%s)\\n' \"$m\" \"$s\" \"$e\"\n awk -v s=\"$s\" -v e=\"$e\" -v f=\"($FIELDS)\\\\.\" '\n NR>=s && NR<=e && $0 !~ /^\\s*(\\/\\/|\\*|\\/\\*)/ &&\n ($0 ~ f || $0 ~ /^\\s*(if \\(|\\} else)/) {\n gsub(/^ +/,\"\"); printf \" :%d %s\\n\", NR, $0 }' \"$S\"\ndone\n\necho\necho \"# 그 경합을 고정한 시험이 어느 레인에서 도는가\"\necho \" 파일 : $T\"\n{ grep -n '@Tag' \"$T\" || true; } | sed -E 's#^([0-9]+): *# AdminOperationClaimContractTest.java:\\1 #'\n{ grep -n \"jpaPlatformContractTest'\\|'jpa-contract'\" src/adapter/outbound/persistence-jpa/build.gradle || true; } \\\n | sed -E 's#^([0-9]+): *# persistence-jpa/build.gradle:\\1 #'\necho \" 그 태스크를 부르는 워크플로 :\"\n{ grep -rn 'jpaPlatformContractTest' .github/workflows/*.yml || true; } \\\n | sed -E 's#^\\.github/workflows/([a-z-]+\\.yml):([0-9]+): *# \\1:\\2 #'\necho \" 그 워크플로가 도는 조건 :\"\nawk 'NR>=14 && NR<=16 || NR>=21 && NR<=24 {printf \" notification-platform.yml:%d %s\\n\", NR, $0}' \\\n .github/workflows/notification-platform.yml\necho \" NotificationAdminApplicationService 를 이름에 가진 시험 파일 : $(\n { git ls-files -- 'src/**/*Test*.java' | grep -c 'NotificationAdminApplicationService' || true; }) 개\"\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-04T05:03:05+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/analysis-finding-a03-f001.txt",
|
|
"svg": "evidence/rendered/analysis-finding-a03-f001.svg",
|
|
"rawSha256": "15b3c6bb2b75c9bd9a3fa05e8f28bcaef3c9100aad63a0920519aa6a33c069e2",
|
|
"lines": 227,
|
|
"redaction": "비밀값 없음"
|
|
}
|