security: hard-disable all KIS trading paths (AEG-X-016)

Blocks submit, status, cancel, and settlement before HTTP or database writes and removes the KIS polling recurring job. Evidence: concrete adapter test 1/1 passed with zero HTTP calls. WBS remains IN_PROGRESS pending endpoint/startup override evidence.
This commit is contained in:
2026-08-09 02:30:39 +09:00
parent ec80337389
commit eb59cae8e3
8 changed files with 113 additions and 3 deletions
+1 -1
View File
@@ -182,7 +182,7 @@ AEG-VS-24-04,S11,W23-24,VS-24,ReportAndNotify,ReportingNotifications,BE,REQ-RPT-
AEG-VS-24-05,S11,W23-24,VS-24,ReportAndNotify,ReportingNotifications,ASYNC,REQ-RPT-001,RPT-01,MIG-RPT-001,J11R,UI-RPT-01,T-RPT-001,Event/Job/Inbox·재처리 구현,"J11R; integration event, JobRun, watermark, inbox","동일 ScopeKey 재실행 결과가 동일하고 중복 side effect 0, transient/business hold/poison이 분리됨",BE/SRE,Data/Ops,5,AEG-VS-24-04,G4-A,SOURCE+DESIGN_PROPOSAL,P1,PLANNED
AEG-VS-24-06,S11,W23-24,VS-24,ReportAndNotify,ReportingNotifications,FE,REQ-RPT-001,RPT-01,MIG-RPT-001,J11R,UI-RPT-01,T-RPT-001,Vue feature·Zod·Query·컴포넌트 구현,UI-RPT-01; route/api/schema/queries/pages/components,loading/empty/partial/stale/warn/error/401/403/409/expired/readonly와 접근성·권한 경계가 검증됨,FE Lead,UX/QA,6,AEG-VS-24-05,G4-A,SOURCE+DESIGN_PROPOSAL,P1,PLANNED
AEG-VS-24-07,S11,W23-24,VS-24,ReportAndNotify,ReportingNotifications,TESTOPS,REQ-RPT-001,RPT-01,MIG-RPT-001,J11R,UI-RPT-01,T-RPT-001,회귀·관제·Runbook·Rollback 증거,T-RPT-001; xUnit/Vitest/Playwright/Data/Replay; OTel/alert/runbook,Golden·integration·failure·replay·E2E와 metric/alert/Owner/Secondary/rollback rehearsal가 Release Evidence에 연결됨,QA/SRE,Module Owner,7,AEG-VS-24-06,G4-A,SOURCE+DESIGN_PROPOSAL,P0,PLANNED
AEG-X-016,S12,W25-26,Cross,Cross-cutting,Broker,CAPABILITY,REQ-KIS-OFF,Cross,Cross,Cross,Cross,Cross,KIS 주문 제출 startup/CI/runtime 차단 고도화,KIS 주문 제출 startup/CI/runtime 차단,"외부 주문 호출 0, capability override 감사·kill-switch 통과",Security/Ops,Architect/QA,7,AEG-X-005,ALL,SOURCE+DESIGN_PROPOSAL,P0,PLANNED
AEG-X-016,S12,W25-26,Cross,Cross-cutting,Broker,CAPABILITY,REQ-KIS-OFF,Cross,Cross,Cross,Cross,Cross,KIS 주문 제출 startup/CI/runtime 차단 고도화,KIS 주문 제출 startup/CI/runtime 차단,"외부 주문 호출 0, capability override 감사·kill-switch 통과",Security/Ops,Architect/QA,7,AEG-X-005,ALL,SOURCE+DESIGN_PROPOSAL,P0,IN_PROGRESS
AEG-VS-23-01,S12,W25-26,VS-23,ReconcilePositionsAndFills,ExecutionReconciliation,GOV,REQ-RECON-001,"EXE-01/02,REC-01/02",MIG-EXE-001/002,J12,UI-RECON-01,T-RECON-001,정책·범위·실패상태 계약 확정,"REQ-RECON-001, VS-23 SLICE_SPEC, ADR/Decision Log",사용자 결과 '브로커·내부 주문·체결·보유·현금 break와 승인 정정'·비목표·권한·예외·Source/Assumption/Unknown이 승인됨,PM/Architect,Compliance/Owner,3,"VS-08,VS-16",Pilot-A,SOURCE+DESIGN_PROPOSAL,P0,PLANNED
AEG-VS-23-02,S12,W25-26,VS-23,ReconcilePositionsAndFills,ExecutionReconciliation,DATA,REQ-RECON-001,"EXE-01/02,REC-01/02",MIG-EXE-001/002,J12,UI-RECON-01,T-RECON-001,데이터 시점·스키마·정합성 계약,"MIG-EXE-001/002, DATA_CONTRACT, DQ/lineage 규칙",published_at/revision/valid-time/hash/단위/격리/재처리와 소유자가 정의되고 overwrite 경로가 없음,Data Architect/DBA,Quant/QA,5,AEG-VS-23-01,Pilot-A,SOURCE+DESIGN_PROPOSAL,P0,PLANNED
AEG-VS-23-03,S12,W25-26,VS-23,ReconcilePositionsAndFills,ExecutionReconciliation,DOMAIN,REQ-RECON-001,"EXE-01/02,REC-01/02",MIG-EXE-001/002,J12,UI-RECON-01,T-RECON-001,도메인 불변조건·상태전이 구현,"src/Modules/ExecutionReconciliation/ReconcilePositionsAndFills/Domain, 정책 결정표",순수 정책 테스트에서 우선순위·경계값·단조성·금지 전이가 통과하고 Infrastructure 의존이 없음,BE/Quant Lead,Architect/QA,6,AEG-VS-23-02,Pilot-A,SOURCE+DESIGN_PROPOSAL,P0,PLANNED
1 WBS_ID Sprint Weeks Slice_ID Slice Module Workstream Requirement_ID API_ID DB_Migration_ID Job_Event_ID UI_ID Test_ID Task Artifact Acceptance_Evidence Primary_Owner Secondary PD Dependency Gate Evidence_Class Risk Status
182 AEG-VS-24-05 S11 W23-24 VS-24 ReportAndNotify ReportingNotifications ASYNC REQ-RPT-001 RPT-01 MIG-RPT-001 J11R UI-RPT-01 T-RPT-001 Event/Job/Inbox·재처리 구현 J11R; integration event, JobRun, watermark, inbox 동일 ScopeKey 재실행 결과가 동일하고 중복 side effect 0, transient/business hold/poison이 분리됨 BE/SRE Data/Ops 5 AEG-VS-24-04 G4-A SOURCE+DESIGN_PROPOSAL P1 PLANNED
183 AEG-VS-24-06 S11 W23-24 VS-24 ReportAndNotify ReportingNotifications FE REQ-RPT-001 RPT-01 MIG-RPT-001 J11R UI-RPT-01 T-RPT-001 Vue feature·Zod·Query·컴포넌트 구현 UI-RPT-01; route/api/schema/queries/pages/components loading/empty/partial/stale/warn/error/401/403/409/expired/readonly와 접근성·권한 경계가 검증됨 FE Lead UX/QA 6 AEG-VS-24-05 G4-A SOURCE+DESIGN_PROPOSAL P1 PLANNED
184 AEG-VS-24-07 S11 W23-24 VS-24 ReportAndNotify ReportingNotifications TESTOPS REQ-RPT-001 RPT-01 MIG-RPT-001 J11R UI-RPT-01 T-RPT-001 회귀·관제·Runbook·Rollback 증거 T-RPT-001; xUnit/Vitest/Playwright/Data/Replay; OTel/alert/runbook Golden·integration·failure·replay·E2E와 metric/alert/Owner/Secondary/rollback rehearsal가 Release Evidence에 연결됨 QA/SRE Module Owner 7 AEG-VS-24-06 G4-A SOURCE+DESIGN_PROPOSAL P0 PLANNED
185 AEG-X-016 S12 W25-26 Cross Cross-cutting Broker CAPABILITY REQ-KIS-OFF Cross Cross Cross Cross Cross KIS 주문 제출 startup/CI/runtime 차단 고도화 KIS 주문 제출 startup/CI/runtime 차단 외부 주문 호출 0, capability override 감사·kill-switch 통과 Security/Ops Architect/QA 7 AEG-X-005 ALL SOURCE+DESIGN_PROPOSAL P0 PLANNED IN_PROGRESS
186 AEG-VS-23-01 S12 W25-26 VS-23 ReconcilePositionsAndFills ExecutionReconciliation GOV REQ-RECON-001 EXE-01/02,REC-01/02 MIG-EXE-001/002 J12 UI-RECON-01 T-RECON-001 정책·범위·실패상태 계약 확정 REQ-RECON-001, VS-23 SLICE_SPEC, ADR/Decision Log 사용자 결과 '브로커·내부 주문·체결·보유·현금 break와 승인 정정'·비목표·권한·예외·Source/Assumption/Unknown이 승인됨 PM/Architect Compliance/Owner 3 VS-08,VS-16 Pilot-A SOURCE+DESIGN_PROPOSAL P0 PLANNED
187 AEG-VS-23-02 S12 W25-26 VS-23 ReconcilePositionsAndFills ExecutionReconciliation DATA REQ-RECON-001 EXE-01/02,REC-01/02 MIG-EXE-001/002 J12 UI-RECON-01 T-RECON-001 데이터 시점·스키마·정합성 계약 MIG-EXE-001/002, DATA_CONTRACT, DQ/lineage 규칙 published_at/revision/valid-time/hash/단위/격리/재처리와 소유자가 정의되고 overwrite 경로가 없음 Data Architect/DBA Quant/QA 5 AEG-VS-23-01 Pilot-A SOURCE+DESIGN_PROPOSAL P0 PLANNED
188 AEG-VS-23-03 S12 W25-26 VS-23 ReconcilePositionsAndFills ExecutionReconciliation DOMAIN REQ-RECON-001 EXE-01/02,REC-01/02 MIG-EXE-001/002 J12 UI-RECON-01 T-RECON-001 도메인 불변조건·상태전이 구현 src/Modules/ExecutionReconciliation/ReconcilePositionsAndFills/Domain, 정책 결정표 순수 정책 테스트에서 우선순위·경계값·단조성·금지 전이가 통과하고 Infrastructure 의존이 없음 BE/Quant Lead Architect/QA 6 AEG-VS-23-02 Pilot-A SOURCE+DESIGN_PROPOSAL P0 PLANNED