The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
95 lines
13 KiB
XML
95 lines
13 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="1382" viewBox="0 0 1200 1382" role="img">
|
|
<title>terminal evidence</title>
|
|
<desc>Terminal-style rendering generated from retained command output. Sensitive-looking values are redacted in the visual asset.</desc>
|
|
<rect x="1" y="1" width="1198" height="1380" rx="14" fill="#0d1117" stroke="#30363d"/>
|
|
<rect x="1" y="1" width="1198" height="44" rx="14" fill="#161b22"/>
|
|
<rect x="1" y="30" width="1198" height="14" fill="#161b22"/>
|
|
<circle cx="24" cy="22" r="6" fill="#ff5f57"/>
|
|
<circle cx="44" cy="22" r="6" fill="#febc2e"/>
|
|
<circle cx="64" cy="22" r="6" fill="#28c840"/>
|
|
<text x="92" y="27" fill="#8b949e" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace">terminal evidence</text>
|
|
<text x="24" y="68" fill="#c9d1d9" font-size="15" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">$ L=src/adapter/outbound/identifier
|
|
|
|
echo '# 지침 문서가 적은 의존성'
|
|
sed -n '29,34p' $L/CLAUDE.md
|
|
|
|
echo
|
|
echo '# 빌드 파</tspan><tspan x="24" dy="22">일의 선언 블록'
|
|
sed -n '/^dependencies {/,/^}/p' $L/build.gradle
|
|
|
|
echo
|
|
echo '# 뒤 문장이 든 두 이름을 각각 빌드 파일과 </tspan><tspan x="24" dy="22">잠금 파일에서 찾는다'
|
|
echo -n '# 빌드 파일의 domain-core 언급(모든 표기) : '
|
|
grep -c 'domain-core\|domainCore' $L/buil</tspan><tspan x="24" dy="22">d.gradle
|
|
echo -n '# 잠금 파일 줄 수 / uuid-creator·f4b6a3 : '
|
|
echo "$(wc -l < $L/gradle.lockfile) / $(grep -c 'uuid-c</tspan><tspan x="24" dy="22">reator\|f4b6a3' $L/gradle.lockfile)"
|
|
echo -n '# 그 잠금 파일이 덮는 configuration : '
|
|
grep -v '^#' $L/gradle.lockfile </tspan><tspan x="24" dy="22">| sed 's/.*=//' | tr ',' '\n' | sort -u | tr '\n' ' '; echo
|
|
echo -n '# 프로덕션 클래스패스의 잠금 상태 : '
|
|
grep '^empt</tspan><tspan x="24" dy="22">y=' $L/gradle.lockfile
|
|
grep -n 'lockAllConfigurations()\|lockMode = LockMode.STRICT' src/build.gradle | sed 's/^/ /'
|
|
</tspan><tspan x="24" dy="22">
|
|
echo
|
|
echo '# 그 라이브러리를 선언하는 곳'
|
|
grep -rn 'uuid-creator' --include=build.gradle src | sed 's#^src/# #'
|
|
|
|
e</tspan><tspan x="24" dy="22">cho
|
|
echo '# 앞 문장의 셋과 강제되는 허용 목록'
|
|
python3 - <<'PY'
|
|
import json
|
|
registry = json.load(open('src/config/archit</tspan><tspan x="24" dy="22">ecture/modules.json'))
|
|
entry = next(m for m in registry['modules'] if m['id'] == 'adapter-outbound-identifier')
|
|
allowed </tspan><tspan x="24" dy="22">= entry['allowed_dependencies']
|
|
print('# 레지스트리 allowed_dependencies :', allowed)
|
|
print('# 문서가 든 셋 중 목록</tspan><tspan x="24" dy="22">에 없는 것 :',
|
|
sorted({'application-core', 'domain-core', 'shared-contract'} - set(allowed)))
|
|
PY
|
|
|
|
echo '# 그 목</tspan><tspan x="24" dy="22">록이 강제되는 사슬'
|
|
grep -n 'allowedProjectDependencies = registry.modules' src/build.gradle | sed 's/^/ /'
|
|
sed -n '1</tspan><tspan x="24" dy="22">466,1472p' src/build.gradle
|
|
grep -n "dependsOn rootProject.tasks.named('verifyCleanArchitectureDependencies')" src/build</tspan><tspan x="24" dy="22">.gradle | sed 's/^/ /' </tspan></text>
|
|
<text x="24" y="398" fill="#8b949e" font-size="13" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">cwd: /shared/codebase/clean-architecture-backend-template</tspan></text>
|
|
<text x="24" y="420" fill="#8b949e" font-size="13" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">time: 2026-09-02T09:37:40+00:00 · exit 0</tspan></text>
|
|
<line x1="24" y1="434" x2="1176" y2="434" stroke="#30363d"/>
|
|
<text x="24" y="474" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 지침 문서가 적은 의존성</tspan></text>
|
|
<text x="24" y="496" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">## Allowed</tspan></text>
|
|
<text x="24" y="518" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="540" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">- `:application-core`, `:domain-core`, `:shared-contract` (Gradle matrix). Currently</tspan></text>
|
|
<text x="24" y="562" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> only `:domain-core` + `com.github.f4b6a3:uuid-creator` are declared in</tspan></text>
|
|
<text x="24" y="584" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> [build.gradle](build.gradle).</tspan></text>
|
|
<text x="24" y="606" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="628" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="650" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 빌드 파일의 선언 블록</tspan></text>
|
|
<text x="24" y="672" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">dependencies {</tspan></text>
|
|
<text x="24" y="694" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> implementation project(':application-core')</tspan></text>
|
|
<text x="24" y="716" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="738" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> testImplementation 'org.spockframework:spock-core:2.4-groovy-5.0'</tspan></text>
|
|
<text x="24" y="760" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0">}</tspan></text>
|
|
<text x="24" y="782" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="804" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 뒤 문장이 든 두 이름을 각각 빌드 파일과 잠금 파일에서 찾는다</tspan></text>
|
|
<text x="24" y="826" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 빌드 파일의 domain-core 언급(모든 표기) : 0</tspan></text>
|
|
<text x="24" y="848" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 잠금 파일 줄 수 / uuid-creator·f4b6a3 : 154 / 0</tspan></text>
|
|
<text x="24" y="870" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 그 잠금 파일이 덮는 configuration : annotationProcessor checkstyle compileClasspath mockitoAgent runtimeClasspath spotbugs s</tspan><tspan x="24" dy="22">potbugsPlugins spotbugsSlf4j testAnnotationProcessor testCompileClasspath testRuntimeClasspath </tspan></text>
|
|
<text x="24" y="914" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 프로덕션 클래스패스의 잠금 상태 : empty=compileClasspath,runtimeClasspath</tspan></text>
|
|
<text x="24" y="936" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> 336: lockAllConfigurations()</tspan></text>
|
|
<text x="24" y="958" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> 337: lockMode = LockMode.STRICT</tspan></text>
|
|
<text x="24" y="980" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1002" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 그 라이브러리를 선언하는 곳</tspan></text>
|
|
<text x="24" y="1024" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> sample-portfolio/build.gradle:52: implementation 'com.github.f4b6a3:uuid-creator:6.1.1'</tspan></text>
|
|
<text x="24" y="1046" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1068" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 앞 문장의 셋과 강제되는 허용 목록</tspan></text>
|
|
<text x="24" y="1090" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 레지스트리 allowed_dependencies : ['domain-core', 'application-core']</tspan></text>
|
|
<text x="24" y="1112" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 문서가 든 셋 중 목록에 없는 것 : ['shared-contract']</tspan></text>
|
|
<text x="24" y="1134" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"># 그 목록이 강제되는 사슬</tspan></text>
|
|
<text x="24" y="1156" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> 1419: Map<String, Set<String>> allowedProjectDependencies = registry.modules.collectEntries { module -></tspan></text>
|
|
<text x="24" y="1178" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> }</tspan></text>
|
|
<text x="24" y="1200" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"></tspan></text>
|
|
<text x="24" y="1222" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> Set<String> forbidden = actual - allowed</tspan></text>
|
|
<text x="24" y="1244" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> if (!forbidden.isEmpty()) {</tspan></text>
|
|
<text x="24" y="1266" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> throw new GradleException(</tspan></text>
|
|
<text x="24" y="1288" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> "Module ':${moduleName}' has forbidden project dependencies ${forbidden}. " +</tspan></text>
|
|
<text x="24" y="1310" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> "Allowed dependencies are ${allowed}. " +</tspan></text>
|
|
<text x="24" y="1332" fill="#e6edf3" font-size="14" font-family="ui-monospace, SFMono-Regular, Menlo, Consolas, monospace" xml:space="preserve"><tspan x="24" dy="0"> 577: dependsOn rootProject.tasks.named('verifyCleanArchitectureDependencies')</tspan></text>
|
|
</svg>
|