DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
56 lines
2.4 KiB
Plaintext
56 lines
2.4 KiB
Plaintext
# 모듈 전체를 돌리면
|
|
MutualTlsHandshakeContractTest > anUntrustedAuthorityIsAPermanentTlsFailure() FAILED
|
|
org.opentest4j.AssertionFailedError at MutualTlsHandshakeContractTest.java:168
|
|
MutualTlsHandshakeContractTest > anExpiredCertificateIsAPermanentTlsFailure() FAILED
|
|
org.opentest4j.AssertionFailedError at MutualTlsHandshakeContractTest.java:168
|
|
MutualTlsHandshakeContractTest > aHostnameMismatchIsAPermanentTlsFailure() FAILED
|
|
org.opentest4j.AssertionFailedError at MutualTlsHandshakeContractTest.java:168
|
|
283 tests completed, 3 failed
|
|
> Task :adapter:outbound:httpclient:test FAILED
|
|
|
|
# 멈추는 자리는 두 번째 단언이다
|
|
164: private void assertPermanent(Throwable captured) {
|
|
165: TransportFailure classified =
|
|
166: new ApacheFailureClassifier().classify(captured, AttemptStage.TLS_HANDSHAKE);
|
|
167: assertThat(classified.evidence()).isEqualTo(ExecutionEvidence.NOT_SENT);
|
|
168: assertThat(classified.stage()).isEqualTo(AttemptStage.TLS_HANDSHAKE);
|
|
169: assertThat(classified.category()).isEqualTo(FailureCategory.TLS_PERMANENT);
|
|
170: assertThat(classified.category().permanent()).isTrue();
|
|
171: }
|
|
(167 통과 · 168 실패 · 169 이하 미실행)
|
|
|
|
# 픽스처가 돌려주는 것은 호스트명이다
|
|
70: public URI uri(String path) {
|
|
71- return server.url(path).uri();
|
|
72- }
|
|
|
|
# 이 컨테이너에서 그 호스트명이 푸는 주소
|
|
1:127.0.0.1 localhost
|
|
2:::1 localhost ip6-localhost ip6-loopback
|
|
localhost/127.0.0.1
|
|
localhost/0:0:0:0:0:0:0:1
|
|
# src 아래의 preferIPv4Stack / preferIPv6Addresses 설정: 0
|
|
|
|
# 강등이 재시도 판정에 닿는 지점
|
|
/** Permanent failures are never retried regardless of evidence, deadline, or budget. */
|
|
public boolean permanent() {
|
|
return this == CONFIGURATION
|
|
|| this == TARGET_REJECTED
|
|
|| this == TLS_PERMANENT
|
|
|| this == SERIALIZATION
|
|
|| this == RESPONSE_TOO_LARGE
|
|
|| this == REDIRECT_REJECTED
|
|
|| this == DEADLINE_EXCEEDED
|
|
|| this == CANCELLED;
|
|
}
|
|
엔진의 가드 순서
|
|
if (context.attempt() >= context.maxAttempts()) {
|
|
return RetryDenied.maxAttempts();
|
|
}
|
|
if (!context.budget().available()) {
|
|
return RetryDenied.budgetExhausted();
|
|
if (context.failureCategory().permanent()) {
|
|
return RetryDenied.permanentFailure(context.failureCategory().name());
|
|
}
|
|
case CONNECT -> RetryAllowed.of("CONNECT");
|