DongHyeonkaandClaude Opus 5 b5528fae87 docs: index all 23 experiments with what each measured ...

One table per experiment with its branch and result, plus the nine injections that silently did nothing and the five predictions that turned out wrong.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-09-04 15:11:32 +09:00

..

evidence

docs: D-4 — the certificate is fine and the renewal itself went untested

2026-09-04 15:09:36 +09:00

account-linking-sub-vs-email.md

test: verify broker identity uses subject not email

2026-07-25 16:28:00 +09:00

experiment-00-session-replication.md

docs: add the prerequisite knowledge this lab assumes

2026-09-04 10:24:21 +09:00

experiment-a1-jgroups-transport-block.md

docs: A-1 — sessions survive a JGroups partition but logout invalidation does not

2026-09-04 11:52:49 +09:00

experiment-a2-database-loss.md

docs: A-2 — losing the database takes every node down while up stays 1

2026-09-04 11:57:55 +09:00

experiment-a3-database-crash.md

docs: A-3 — four logins returned tokens for sessions the crash erased

2026-09-04 12:05:08 +09:00

experiment-a4-node-loss.md

docs: A-4 — a dead pod reports healthier than a live one

2026-09-04 12:25:30 +09:00

experiment-a5-asymmetric-partition.md

docs: A-5 — a one-way block heals itself and a full split still leaves one node serving

2026-09-04 13:12:04 +09:00

experiment-a6-latency-injection.md

docs: A-6 — 200ms of network delay becomes 22 seconds of user latency

2026-09-04 13:18:10 +09:00

experiment-a7-volatile-comparison.md

docs: A-7 — three results invert when persistent sessions are turned off

2026-09-04 13:33:33 +09:00

experiment-a8-rolling-restart.md

docs: A-8 — a rolling restart keeps every session and drops only the cache

2026-09-04 13:20:56 +09:00

experiment-b0-bff-redis-deploy.md

docs: B-0 — deploy the BFF and read what autoconfiguration actually chose

2026-09-04 13:48:33 +09:00

experiment-b1-redis-session-store.md

docs: B-1 — Redis moves the session and leaves the tokens behind

2026-09-04 14:05:02 +09:00

experiment-b2-multi-instance-session.md

docs: B-2 — sharing the stores fixes one problem and exposes three more

2026-09-04 14:15:05 +09:00

experiment-b3-refresh-token-contention.md

docs: B-3 — concurrent refresh does not lose a race, it destroys the session

2026-09-04 14:20:04 +09:00

experiment-b4-edge-authorization-scope.md

docs: B-4 — the edge does not overwrite the headers it never sets

2026-09-04 14:23:41 +09:00

experiment-b5-redis-loss-persistence.md

docs: B-5 — the pod stays Ready while every request hangs

2026-09-04 14:29:17 +09:00

experiment-b6-key-rotation.md

docs: B-6 — rotation is safe, retiring the old key is not

2026-09-04 14:33:42 +09:00

experiment-b7-cookie-secret-rotation.md

docs: B-7 — the cookie secret has no overlap window and rotation orphans sessions

2026-09-04 14:44:00 +09:00

experiment-c1-multi-app-sso.md

docs: C-1 — killing the SSO session logs nobody out

2026-09-04 14:49:36 +09:00

experiment-c2-backchannel-logout.md

docs: C-2 — nothing propagates because nobody implemented the receiving end

2026-09-04 14:56:58 +09:00

experiment-d1-backup-restore.md

docs: D-1 — an empty database still answered 200

2026-09-04 14:59:56 +09:00

experiment-d2-version-upgrade.md

docs: D-2 — rolling back the image does not roll back the schema

2026-09-04 15:05:36 +09:00

experiment-d3-secret-management.md

docs: D-3 — only RBAC actually hides anything

2026-09-04 15:07:35 +09:00

experiment-d4-certificate-renewal.md

docs: D-4 — the certificate is fine and the renewal itself went untested

2026-09-04 15:09:36 +09:00

experiment-index.md

docs: index all 23 experiments with what each measured

2026-09-04 15:11:32 +09:00

experiment-plan.md

docs: close nine gaps found by re-reading every open question in full

2026-09-04 11:16:59 +09:00

first-broker-login-security.md

test: reproduce and block unsafe broker auto-link

2026-07-25 16:17:54 +09:00

four-pattern-tradeoff-matrix.md

docs: compare four authentication patterns

2026-07-25 16:31:44 +09:00

google-claim-mapping.md

feat: map upstream Google identity claims

2026-07-25 16:24:24 +09:00

google-claim-to-role.md

feat: map broker claims to realm roles

2026-07-25 16:26:59 +09:00

google-idp-brokering.md

feat: add Google broker configuration profiles

2026-07-25 15:30:47 +09:00

google-redirect-uri-policy.md

docs: define exact Google redirect URI policy

2026-07-25 16:28:53 +09:00

https-termination.md

feat: add validated HTTPS termination profiles

2026-07-25 16:30:25 +09:00

keycloak-branch-index.md

docs: add 39-branch Keycloak governance index

2026-07-25 15:26:26 +09:00

keycloak-branch-manifest.tsv

docs: add 39-branch Keycloak governance index

2026-07-25 15:26:26 +09:00

keycloak-multinode-cluster.md

docs: record multi-node cluster setup, rationale and formation evidence

2026-09-03 17:26:45 +09:00

lab-observability.md

docs: record observability setup and add concept layers 10-13

2026-09-04 09:21:45 +09:00

open-questions-coverage.md

docs: close nine gaps found by re-reading every open question in full

2026-09-04 11:16:59 +09:00

public-domain-tunneling.md

feat: add validated named tunnel profile

2026-07-25 16:31:13 +09:00

reverse-proxy-headers.md

feat: define trusted reverse proxy header contract

2026-07-25 16:29:32 +09:00

session-lab-concepts.md

docs: capture the SQL the other node actually runs, and correct the replication claim

2026-09-04 10:14:45 +09:00

session-lab-operations.md

docs: correct the memory analysis to distinguish host and guest headroom

2026-09-03 17:02:11 +09:00

session-lab-prerequisites.md

docs: add the prerequisite knowledge this lab assumes

2026-09-04 10:24:21 +09:00

session-store-lab-roadmap.md

docs: plan all remaining experiments with architecture, injection points and predictions

2026-09-04 10:50:23 +09:00

two-hop-proxy-header-contract.md

docs: record proxy-bypass closure with before and after evidence

2026-09-03 16:17:24 +09:00