The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
40 lines
2.5 KiB
Plaintext
40 lines
2.5 KiB
Plaintext
# 게이트가 읽는 증거의 다섯 성분 — 전부 호출자가 넘긴다
|
|
public record GrpcReleaseEvidence(
|
|
Set<GrpcEvidenceGrade> gradesRun,
|
|
Set<String> certifiedCapabilities,
|
|
boolean runbookPresent,
|
|
boolean architectureDecisionRecordsPresent,
|
|
boolean supportMatrixPresent) {
|
|
|
|
# 그 객체를 만드는 지점
|
|
test/java/dev/caskeleton/grpc/release/GrpcStableReleaseGateTest.java:28: return new GrpcReleaseEvidence(
|
|
test/java/dev/caskeleton/grpc/release/GrpcStableReleaseGateTest.java:84: new GrpcReleaseEvidence(
|
|
test/java/dev/caskeleton/grpc/release/GrpcStableReleaseGateTest.java:103: new GrpcReleaseEvidence(
|
|
test/java/dev/caskeleton/grpc/release/GrpcStableReleaseGateTest.java:127: new GrpcReleaseEvidence(
|
|
|
|
# 그 테스트에 붙은 @Tag: 0
|
|
# 그래서 check 그래프 안에 있다: 1
|
|
# 그 check 를 도는 워크플로
|
|
.github/workflows/ci-quality-gates.yml:50: run: ./gradlew check verifyPublicPathSnapshot verifyDependencyLocks --warning-mode=fail --no-daemon --stacktrace
|
|
|
|
# 등급 넷에 대응하는 증거 레인은 컨벤션이 등록해 둔다
|
|
grpcFaultTest - Fault-injection lane: connection loss at eac
|
|
grpcInProcessContractTest - In-process contract lane: adapte
|
|
grpcNettyContractTest - Real Netty lane: HTTP/2 on an epheme
|
|
grpcPerformanceTest - Performance lane: unary latency percen
|
|
# 그중 check 그래프에 들어 있는 것: 0
|
|
# 28개 워크플로 중 grpc 를 담은 것: 0
|
|
|
|
# 대비 — messaging 은 레인이 파일을 쓰고 태스크가 양방향 대조하고 CI 가 돌린다
|
|
main/java/dev/caskeleton/messaging/testkit/CertifiedEvidence.java:32: public static final String MANIFEST_RESOURCE = "/messaging/broker-certification-evidence.jsonl";
|
|
./messaging/messaging-kafka/build.gradle:58: .file('messaging-certification/broker-certification-evidence.jsonl')
|
|
./messaging/messaging-kafka/build.gradle:89: .file('messaging-certification/broker-certification-evidence.jsonl')
|
|
tasks.register('verifyMessagingCertificationEvidence') {
|
|
group = 'verification'
|
|
description = 'Fails when the committed broker certification manifest claims a scenario the ' +
|
|
- name: Certify the Kafka adapter against a real broker
|
|
working-directory: src
|
|
# GITHUB_SHA is read by the lane and written into every evidence line, because "certified"
|
|
# is a claim about one source tree.
|
|
run: ./gradlew :messaging:messaging-kafka:verifyMessagingCertificationEvidence --no-daemon --stacktrace
|