DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
38 lines
8.1 KiB
Plaintext
38 lines
8.1 KiB
Plaintext
./application-core/src/main/java/dev/caskeleton/application/notification/platform/security/NotificationPayloadProtection.java:34:public interface NotificationPayloadProtection {
|
|
./app-bootstrap/src/test/java/dev/caskeleton/bootstrap/notification/NotificationPayloadAtRestContractTest.java:61: + "through one envelope: AesGcmNotificationPayloadProtection holds the only cipher "
|
|
./app-bootstrap/src/test/java/dev/caskeleton/bootstrap/notification/NotificationPayloadAtRestContractTest.java:67: "AesGcmNotificationPayloadProtection.java",
|
|
./app-bootstrap/src/test/java/dev/caskeleton/bootstrap/notification/NotificationPayloadAtRestContractTest.java:102: .contains("NotificationPayloadProtection payloadProtection")
|
|
./app-bootstrap/src/main/java/dev/caskeleton/bootstrap/notification/NotificationPlatformCodecConfig.java:8:import dev.caskeleton.adapter.outbound.notification.platform.security.AesGcmNotificationPayloadProtection;
|
|
./app-bootstrap/src/main/java/dev/caskeleton/bootstrap/notification/NotificationPlatformCodecConfig.java:18:import dev.caskeleton.application.notification.platform.security.NotificationPayloadProtection;
|
|
./app-bootstrap/src/main/java/dev/caskeleton/bootstrap/notification/NotificationPlatformCodecConfig.java:101: NotificationPayloadProtection payloadProtection,
|
|
./app-bootstrap/src/main/java/dev/caskeleton/bootstrap/notification/NotificationPlatformCodecConfig.java:125: public NotificationPayloadProtection notificationPayloadProtection(
|
|
./app-bootstrap/src/main/java/dev/caskeleton/bootstrap/notification/NotificationPlatformCodecConfig.java:127: return new AesGcmNotificationPayloadProtection(secrets, new SecureRandom());
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/CallbackPayloadBoundTest.java:104: private static AesGcmNotificationPayloadProtection payloads() {
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/CallbackPayloadBoundTest.java:105: return new AesGcmNotificationPayloadProtection(
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/CallbackPayloadRotationTest.java:35: new AesGcmNotificationPayloadProtection(afterRotation(), new SecureRandom()).reveal(stored);
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/CallbackPayloadRotationTest.java:52: .isEqualTo(AesGcmNotificationPayloadProtection.VERSION);
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/CallbackPayloadRotationTest.java:67: new AesGcmNotificationPayloadProtection(keys, new SecureRandom()),
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:26:class AesGcmNotificationPayloadProtectionTest {
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:36: var protection = new AesGcmNotificationPayloadProtection(keys, new SecureRandom());
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:48: new AesGcmNotificationPayloadProtection(keys, new SecureRandom()).protect(PAYLOAD);
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:59: var protection = new AesGcmNotificationPayloadProtection(new Keys("k1"), new SecureRandom());
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:70: var beforeRotation = new AesGcmNotificationPayloadProtection(keys, new SecureRandom());
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:75: assertThat(new AesGcmNotificationPayloadProtection(keys, new SecureRandom()).reveal(oldRow))
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:90: new AesGcmNotificationPayloadProtection(keys, new SecureRandom()).protect(PAYLOAD);
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:99: var protection = new AesGcmNotificationPayloadProtection(keys, new SecureRandom());
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:113: var protection = new AesGcmNotificationPayloadProtection(keys, new SecureRandom());
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:130: new AesGcmNotificationPayloadProtection(keys, new SecureRandom()).protect(PAYLOAD);
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:135: new AesGcmNotificationPayloadProtection(emptied, new SecureRandom())
|
|
./adapter/outbound/notification/src/test/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtectionTest.java:145: var protection = new AesGcmNotificationPayloadProtection(new Keys("k1"), new SecureRandom());
|
|
./adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtection.java:3:import dev.caskeleton.application.notification.platform.security.NotificationPayloadProtection;
|
|
./adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtection.java:44:public final class AesGcmNotificationPayloadProtection implements NotificationPayloadProtection {
|
|
./adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmNotificationPayloadProtection.java:72: public AesGcmNotificationPayloadProtection(SecretMaterialProvider secrets, SecureRandom random) {
|
|
./adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmCallbackPayloadProtection.java:7:import dev.caskeleton.application.notification.platform.security.NotificationPayloadProtection;
|
|
./adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmCallbackPayloadProtection.java:38: private final NotificationPayloadProtection payloads;
|
|
./adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmCallbackPayloadProtection.java:43: NotificationPayloadProtection payloads,
|
|
./adapter/outbound/notification/src/main/java/dev/caskeleton/adapter/outbound/notification/platform/security/AesGcmCallbackPayloadProtection.java:85: AesGcmNotificationPayloadProtection.MAX_ENVELOPE_OVERHEAD_BYTES;
|
|
./adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/notification/platform/NotificationRecordMapper.java:17:import dev.caskeleton.application.notification.platform.security.NotificationPayloadProtection;
|
|
./adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/notification/platform/NotificationRecordMapper.java:38: private final NotificationPayloadProtection payloadProtection;
|
|
./adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/notification/platform/NotificationRecordMapper.java:55: NotificationPayloadProtection payloadProtection) {
|
|
./adapter/outbound/persistence-jpa/src/main/java/dev/caskeleton/adapter/outbound/persistence/notification/configuration/NotificationJpaPersistenceFacade.java:157: dev.caskeleton.application.notification.platform.security.NotificationPayloadProtection
|