The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
3.4 KiB
JSON
15 lines
3.4 KiB
JSON
{
|
|
"assetKey": "analysis-finding-a06-f014",
|
|
"kind": "terminal",
|
|
"command": "#!/bin/bash\nset -euo pipefail\ncd /shared/codebase/clean-architecture-backend-template\n. /tmp/lib.sh\nS=src/adapter/outbound/persistence-mongo/src/main/java/dev/caskeleton/adapter/outbound/mongo/schema\nM=$S/manifest/MongoIndexManifest.java\nV=$S/index/MongoIndexDescriptorView.java\nD=$S/index/MongoIndexDiffEngine.java\nR=$S/index/MongoIndexDiff.java\nfor f in \"$M\" \"$V\" \"$D\" \"$R\"; do test -f \"$f\"; done\n\necho \"# 매니페스트가 선언하는 것\"\nat \"$M\" 11 45 MongoIndexManifest.java\n\necho\necho \"# 비교용 뷰가 나르는 것\"\nat \"$V\" 6 20 MongoIndexDescriptorView.java\n\necho\necho \"# 비교 엔진이 실제로 견주는 것\"\nat \"$D\" 25 70 MongoIndexDiffEngine.java\nprintf ' 한 줄에서 declared 값과 actual 값을 견주는 줄 : %s 개\\n' \\\n \"$(awk 'NR>=41 && NR<=58 && /actual\\.[a-zA-Z]+\\(\\).*declared\\.|declared\\.[a-zA-Z]+\\(\\).*actual\\./' \"$D\" | grep -c .)\"\n{ awk 'NR>=41 && NR<=58 && /actual\\.[a-zA-Z]+\\(\\).*declared\\.|declared\\.[a-zA-Z]+\\(\\).*actual\\./ {printf \" MongoIndexDiffEngine.java:%d %s\\n\", NR, $0}' \"$D\"; }\necho \" [참고] 그 반복문에서 declared 나 actual 이 나오는 줄 전부 :\"\n{ awk 'NR>=41 && NR<=58 && (/actual\\.[a-zA-Z]+\\(\\)/ || /declared\\.[a-zA-Z]+\\(\\)/) {printf \" MongoIndexDiffEngine.java:%d %s\\n\", NR, $0}' \"$D\"; }\n\necho\necho \"# 뷰에 없어서 견줄 수 없는 요소\"\nprintf ' 매니페스트 요소 : %s 개\\n' \"$(awk 'NR>=22 && NR<=35 && /^ +[A-Za-z<>]/' \"$M\" | grep -c .)\"\nv=$(awk 'NR>=15 && NR<=20 && /^ +[A-Za-z]/' \"$V\" | grep -c .)\nprintf ' 뷰 요소 : %s 개\\n' \"$v\"\n[ \"$v\" -eq 6 ] || { echo \"EXPECTED 6 VIEW COMPONENTS, GOT $v\" >&2; exit 3; }\necho \" 각 요소가 뷰에 있는가 :\"\nawk 'NR>=22 && NR<=35 && /^ +[A-Za-z<>]/ {sub(/\\) *\\{$/,\"\"); gsub(/[,)]/,\"\"); print $NF}' \"$M\" | while read -r n; do\n if awk 'NR>=15 && NR<=20' \"$V\" | grep -qE \"[ ]$n[,)]\"; then printf ' %-24s 뷰에 있음\\n' \"$n\"\n else printf ' %-24s 뷰에 없음\\n' \"$n\"; fi\ndone\nprintf ' [자기검증] 매니페스트 요소가 14 개가 아니면 실패 : ' \nn=$(awk 'NR>=22 && NR<=35 && /^ +[A-Za-z<>]/' \"$M\" | grep -c .); [ \"$n\" -eq 14 ] && echo \"14 확인\" || { echo \"GOT $n\" >&2; exit 3; }\n\necho\necho \"# 빈 보고서가 무엇으로 읽히는가\"\nat \"$R\" 1 49 MongoIndexDiff.java\nprintf ' MongoIndexDiffEngine 이 main 에 나오는 줄 : %s 개\\n' \"$(lines 'MongoIndexDiffEngine' 'src/**/src/main/**/*.java')\"\nhits 'MongoIndexDiffEngine' 'src/**/src/main/**/*.java' \\\n | sed -E 's#^.*/([A-Za-z0-9_]+\\.java):([0-9]+): *# \\1:\\2 #'\nprintf ' [대조] 시험에서 그 엔진의 compare 를 부르는 줄 : %s 개\\n' \\\n \"$(lines 'engine\\.compare\\(|Engine\\(\\)\\.compare\\(' 'src/**/src/*[Tt]est*/**/*.java')\"\nhits 'engine\\.compare\\(|Engine\\(\\)\\.compare\\(' 'src/**/src/*[Tt]est*/**/*.java' \\\n | sed -E 's#^.*/([A-Za-z0-9_]+\\.java):([0-9]+): *# \\1:\\2 #'\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-04T08:26:10+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/analysis-finding-a06-f014.txt",
|
|
"svg": "evidence/rendered/analysis-finding-a06-f014.svg",
|
|
"rawSha256": "f01d6510bc83ec197fea677393a950ee347ee528a09cebdfd44fc102f923cf89",
|
|
"lines": 192,
|
|
"redaction": "없음"
|
|
}
|