The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
15 lines
2.5 KiB
JSON
15 lines
2.5 KiB
JSON
{
|
|
"assetKey": "a14-f002-webproblemsanitizer-alreadysafe",
|
|
"kind": "terminal",
|
|
"command": "set -e\nset -o pipefail\nW=adapter/inbound/web/src/main/java/dev/caskeleton/adapter/inbound/web/error\necho \"# 메서드와 그 자바독\"\ngrep -n -B1 -A6 'public boolean alreadySafe' $W/WebProblemSanitizer.java\necho\necho \"# 그 이름이 나오는 자리 — 추적 파일 전부, 확장자를 가리지 않는다\"\ngit -C .. grep -n -i 'alreadysafe' || echo \" (일치 0)\"\necho\necho \"# 모든 참조에서 그 이름을 건드린 커밋\"\ngit -C .. log --all --oneline -S 'alreadySafe'\necho\necho \"# 그 커밋에서 이 파일의 상태\"\ngit -C .. show --name-status --format='%h %ad %s' --date=short a24ece9c -- src/adapter/inbound/web/src/main/java/dev/caskeleton/adapter/inbound/web/error/WebProblemSanitizer.java\necho\necho \"# 선행 검사가 쓰는 판정과 삼항이 쓰는 판정\"\ngrep -n 'isBlank()\\|trim()' $W/WebProblemSanitizer.java\necho\necho \"# 이 리프의 런타임 소속\"\npython3 -c \"import json;d=json.load(open('config/architecture/modules.json'));rows=d if isinstance(d,list) else d.get('modules',d);items=rows if isinstance(rows,list) else list(rows.values());print(*[f\\\" {m.get('id') or m.get('name')} -> {m.get('runtime_memberships')}\\\" for m in items if 'inbound-web'==str(m.get('id') or m.get('name')).replace('adapter-','')], sep='\\n')\"\necho\necho \"# 이 리프가 선언한 구조 규칙 — 접근 제어자를 가리지 않고 센다\"\nR=adapter/inbound/web/src/testkit/java/dev/caskeleton/adapter/inbound/web/testkit/arch/WebArchitectureRules.java\ngrep -n 'static ArchRule' $R | sed -E 's#^# #'\necho \"# 그중 실제로 도는 것 — 두 목록에 담긴 것만 돈다\"\nsed -n '/List<ArchRule> webScopedRules/,/^ }/p;/List<ArchRule> crossLeafRules/,/^ }/p' $R \\\n | grep -oE '[a-z][A-Za-z]+\\(\\)' | sed -E 's#^# #'\necho -n \" 공개 표면 기준선을 적용하는가 : \"\n{ grep -c 'ca.api-surface' adapter/inbound/web/build.gradle || true; }\n",
|
|
"cwd": "/shared/codebase/clean-architecture-backend-template/src",
|
|
"exitCode": 0,
|
|
"executedAt": "2026-09-02T19:53:40+00:00",
|
|
"sourceRevision": "21234e38cdb9a926cbc92bb97a2aee2e4a7d2916",
|
|
"raw": "evidence/raw/a14-f002-webproblemsanitizer-alreadysafe.txt",
|
|
"svg": "evidence/rendered/a14-f002-webproblemsanitizer-alreadysafe.svg",
|
|
"rawSha256": "71aafdebc4737ee96d070531a0127c703b83f1d1b11b2cd6890511a926416734",
|
|
"lines": 51,
|
|
"redaction": "none — 코드베이스 정적 검색"
|
|
}
|