DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
144 lines
9.4 KiB
Plaintext
144 lines
9.4 KiB
Plaintext
Sub-scope 01 documentation / measured-count drift (deep-analysis-standard 8.4)
|
|
revision=a24ece9cf797f7ea647e33bf846b115208ed1ba5
|
|
executedAt=2026-08-29T14:37:39+00:00
|
|
cwd=/shared/codebase/clean-architecture-backend-template/src
|
|
observation boundary: tracked files at this revision; build output and untracked paths excluded.
|
|
|
|
=== A. registered leaf count (registry SSOT) ===
|
|
$ grep -c "\"id\"" config/architecture/modules.json
|
|
44
|
|
exit=0
|
|
|
|
=== B. verifyDocumentedLeafCount search domain (root build.gradle) ===
|
|
$ sed -n 1316,1345p build.gradle
|
|
// drift this task exists to fail on, in the files a reader of that module is most likely to
|
|
// trust. A list that has to be extended whenever a module is added is a gate that silently
|
|
// narrows, so the scan walks the tree instead.
|
|
//
|
|
// This build file is excluded by identity rather than by pattern: it implements the gate, so it
|
|
// necessarily contains the strings the gate matches.
|
|
List<File> policyDocuments = []
|
|
policyDocuments << new File(repositoryDirectory, 'CLAUDE.md')
|
|
policyDocuments << new File(repositoryDirectory, 'AGENTS.md')
|
|
rootProject.projectDir.traverse(
|
|
type: groovy.io.FileType.FILES,
|
|
// Build output holds copies of both — a stale count in one would be reported at a path
|
|
// nobody can fix, and the walk would cover a tree far larger than the source.
|
|
preDir: { File directory ->
|
|
(directory.name in ['build', '.gradle', '.git'])
|
|
? java.nio.file.FileVisitResult.SKIP_SUBTREE
|
|
: java.nio.file.FileVisitResult.CONTINUE
|
|
}) { File candidate ->
|
|
if (candidate.name == 'CLAUDE.md') {
|
|
policyDocuments << candidate
|
|
} else if (candidate.name == 'build.gradle'
|
|
&& candidate.canonicalFile != rootProject.buildFile.canonicalFile) {
|
|
policyDocuments << candidate
|
|
}
|
|
}
|
|
inputs.file(moduleRegistryFile)
|
|
inputs.files(policyDocuments.findAll { it.isFile() })
|
|
|
|
int registeredLeaves = gradle.moduleRegistry.modules.size()
|
|
|
|
exit=0
|
|
|
|
=== C. surviving 19-leaf claims inside the persistence-jpa leaf and its own adaptation doc ===
|
|
$ git grep -n "19-leaf\|19 leaf\|19 Gradle" -- adapter/outbound/persistence-jpa ../docs/jpa
|
|
../docs/jpa/repository-adaptation.md:21:`src/settings.gradle` and `verifyCleanArchitectureDependencies`) declares **exactly 19 leaf
|
|
../docs/jpa/repository-adaptation.md:101:| `settings.gradle.kts` module registration | Fail-closed 19-leaf registry | No registry change: leaf identity, Gradle path, allowed dependencies, and runtime memberships are unchanged. |
|
|
adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java:20: * unregistered edge at compile time. This repository's fail-closed 19-leaf registry outranks that
|
|
exit=0
|
|
|
|
=== D. same claim in sibling leaf boundary tests (same guard blind spot) ===
|
|
$ git grep -ln "19-leaf" -- "*.java"
|
|
adapter/outbound/cache-redis/src/test/java/dev/caskeleton/adapter/outbound/cache/redis/sdk/RedisSdkModuleBoundaryTest.java
|
|
adapter/outbound/httpclient/src/test/java/dev/caskeleton/adapter/outbound/httpclient/architecture/HttpClientModuleBoundaryTest.java
|
|
adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java
|
|
adapter/outbound/persistence-mongo/src/test/java/dev/caskeleton/adapter/outbound/mongo/architecture/MongoModuleBoundaryTest.java
|
|
exit=0
|
|
|
|
=== E. public top-level type count claim vs measurement ===
|
|
$ git grep -n "318 of" -- "*.java"
|
|
adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java:124: * <p>An export list, because 318 of 324 production files declare a public top-level type and
|
|
app-bootstrap/src/test/java/dev/caskeleton/bootstrap/architecture/CleanArchitectureTest.java:1110: * <p>318 of that leaf's 324 production files declare a public top-level type, and {@code public}
|
|
exit=0
|
|
|
|
$ grep -vc "^#" ../docs/architecture/jpa-api-surface.txt
|
|
338
|
|
exit=0
|
|
|
|
$ grep -n "^# types:" ../docs/architecture/jpa-api-surface.txt
|
|
8:# types: 338
|
|
exit=0
|
|
|
|
$ git ls-files "adapter/outbound/persistence-jpa/src/main/java/**/*.java" | wc -l
|
|
350
|
|
exit=0
|
|
|
|
=== F. leaf README package-root claim vs source package root ===
|
|
$ sed -n 1,6p adapter/outbound/persistence-jpa/README.md
|
|
# adapter-persistence-rdbms — 설계 결정 참조
|
|
|
|
RDBMS/JPA 퍼시스턴스 베이스 모듈. 패키지 루트: `dev.caskeleton.adapter.persistence`.
|
|
|
|
허용/금지 의존, 테스트 명령, 그리고 **계약 테이블**(TransactionPort 모드표, SQLState → Error
|
|
Code 매트릭스, auditing 계약, 분산 락 provider 선택표)의 SSOT 는 [CLAUDE.md](CLAUDE.md) 다.
|
|
exit=0
|
|
|
|
$ git grep -c "^package dev.caskeleton.adapter.outbound.persistence" -- adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/package-info.java
|
|
adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/package-info.java:1
|
|
exit=0
|
|
|
|
$ git grep -rn "dev.caskeleton.adapter.persistence" -- adapter/outbound/persistence-jpa
|
|
adapter/outbound/persistence-jpa/README.md:3:RDBMS/JPA 퍼시스턴스 베이스 모듈. 패키지 루트: `dev.caskeleton.adapter.persistence`.
|
|
adapter/outbound/persistence-jpa/README.md:77:앵커로 삼는 기본 엔티티/리포지토리 스캔이 `dev.caskeleton.adapter.persistence.*` 를 놓친다.
|
|
exit=0
|
|
|
|
=== G. CLAUDE.md lane task names vs registered Gradle tasks ===
|
|
$ git grep -n "gradlew" -- adapter/outbound/persistence-jpa/CLAUDE.md
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:7:- Focused test (derived from Gradle path): `./gradlew :adapter:outbound:persistence-jpa:test --console=plain`
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:55:./gradlew :adapter:outbound:persistence-jpa:test # hermetic unit lane
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:56:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformContractTest # real PostgreSQL
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:57:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformMigrationTest # Flyway upgrade scenarios
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:58:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformFailureTest # deadlock, commit ambiguity
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:59:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformQueryPlanTest # EXPLAIN structure
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:60:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformSecurityTest # runtime role privileges
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:61:./gradlew :adapter:outbound:persistence-jpa:jpaPlatformPoolContractTest # pool behaviour
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:62:./gradlew jpaReleaseGate # every gate, from the root
|
|
adapter/outbound/persistence-jpa/CLAUDE.md:294:./gradlew :adapter:outbound:persistence-jpa:test --console=plain
|
|
exit=0
|
|
|
|
$ git grep -n "tasks.register" -- adapter/outbound/persistence-jpa/build.gradle
|
|
adapter/outbound/persistence-jpa/build.gradle:100: tasks.register(taskName, Test) {
|
|
adapter/outbound/persistence-jpa/build.gradle:163:def verifyJpaSqlConstructionSafety = tasks.register('verifyJpaSqlConstructionSafety') {
|
|
adapter/outbound/persistence-jpa/build.gradle:195:def verifyJpaSecurityFixtures = tasks.register('verifyJpaSecurityFixtures') {
|
|
adapter/outbound/persistence-jpa/build.gradle:232: tasks.register(taskName, Test) {
|
|
adapter/outbound/persistence-jpa/build.gradle:287:def jpaPlatformPoolContractTest = tasks.register('jpaPlatformPoolContractTest', Test) {
|
|
adapter/outbound/persistence-jpa/build.gradle:300:tasks.register('jpaPlatformReleaseGate') {
|
|
exit=0
|
|
|
|
$ git grep -n "register..jpaReleaseGate" -- build.gradle
|
|
build.gradle:1097:tasks.register('jpaReleaseGate') {
|
|
exit=0
|
|
|
|
=== H. PersistenceJpaConfig entity-scan vs repository-scan list parity (measured, not asserted by any test) ===
|
|
$ sed -n 38,60p adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/config/PersistenceJpaConfig.java | grep -c persistence\.
|
|
20
|
|
$ sed -n 61,83p adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/config/PersistenceJpaConfig.java | grep -c persistence\.
|
|
20
|
|
$ diff <(sed -n 38,60p adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/config/PersistenceJpaConfig.java | grep -o "persistence\.[a-z]*\"") <(sed -n 61,83p adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/config/PersistenceJpaConfig.java | grep -o "persistence\.[a-z]*\"")
|
|
(identical)
|
|
exit=0
|
|
|
|
=== I. JpaModuleBoundaryTest PACKAGE_CATALOG targets that are not top-level packages ===
|
|
$ ls -d src/main/java/dev/caskeleton/adapter/outbound/persistence/inbox
|
|
ls: cannot access 'adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/inbox': No such file or directory
|
|
exit=2
|
|
$ git grep -n "\"inbox\"" -- adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java
|
|
adapter/outbound/persistence-jpa/src/test/java/dev/caskeleton/adapter/outbound/persistence/JpaModuleBoundaryTest.java:110: "inbox",
|
|
exit=0
|
|
$ ls src/main/java/dev/caskeleton/adapter/outbound/persistence | tr "\n" " "
|
|
api audit auditing cache config envers experimental failure fileserver h2 hibernate idempotency liveevent lock migration notification observation operation outbox package-info.java postgresql querydsl security springdata transaction
|
|
exit=0
|