 kjh2064
|
5db772f404
|
docs(architecture): add VS-01/VS-02 slice specs, register VS-02 tech debt
- VS-01-SLICE_SPEC.md: Identity/MFA/RBAC/maker-checker contract (draft, ready for security review)
* Roles: GUEST/USER/OPERATOR/ADMIN/SUPER_ADMIN
* MFA tiers: NO_MFA → TOTP_REQUIRED → HARDWARE_KEY
* Maker-checker approval workflow for role elevation
* Schema: users/roles/user_roles/role_approval_requests/mfa_devices/permissions (PIT-tracked)
* Prerequisite AEG-X-001/AEG-VS-00-02 already COMPLETED → can proceed immediately
- VS-02-SLICE_SPEC.md: Financial security master (listing/delisting/product structure) [DRAFT]
* Correct domain: Financial PIT data, NOT access-control rules
* Existing VS-02 code (RBAC rule sync) is mislabeled → registered as tech debt
* Schema stub: securities/trading_restrictions (PIT-tracked)
* CRITICAL: Source Unknown — awaiting data governance approval of:
(1) KRX data source endpoint (not in source-catalog.md)
(2) Import SLA (daily? intraday?)
(3) Audit/corrections policy
* Status: DRAFT (cannot proceed without unknowns resolved)
- TECH_DEBT_REGISTER.md: Added DEBT-016 (VS-02 mislabeled)
* Impact: Medium (design confusion), Effort: Low (doc) → Medium (code removal)
* Endpoints disabled (DISABLED comment), schema never migrated, never deployed
* Dead code marked for removal decision (separate PR recommended)
- WBS_PROGRESS_TRACKER.csv: Updated status
* AEG-VS-01-01: PLANNED → IN_PROGRESS (SLICE_SPEC ready)
* AEG-VS-02-01: PLANNED → DRAFT (unknowns documented, data gov approval needed)
AGENTS.md: Maturity (contract before code), Necessity (fix only real issues — domain confusion + unknowns)
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
|
2026-08-07 14:05:17 +09:00 |
|
|
kjh2064
|
e7913dbde6
|
Add evidence for 6 downgraded WBS items (AGENTS.md v16.0)
ci / backend (push) Failing after 2s
ci / static (push) Failing after 9s
Build & Test with Secrets / build (push) Failing after 1s
deploy / deploy (push) Successful in 3m32s
Build & Test with Secrets / security-scan (push) Failing after 10s
deploy / notify (push) Successful in 1s
ci / frontend (push) Successful in 4m47s
ci / publish (push) Has been skipped
Build & Test with Secrets / frontend (push) Successful in 4m42s
Build & Test with Secrets / notification (push) Failing after 1s
Track B: Evidence Collection (Parallel execution)
B1: PII Redaction Policy Tests (6 tests)
- Tests for SSN, Email, CreditCard, ApiKey redaction
- Pattern-based sanitization validation
- Location: tests/KArtSell.ArchitectureTests/PiiRedactionTests.cs
B3: VS-00 SLICE_SPEC + Platform Governance (1 document)
- User story, non-goals, state transitions
- RBAC constraints, data contracts
- Governance gates (data approval workflows)
- Location: docs/CURRENT/SLICE_SPECS/VS-00-SLICE_SPEC.md
B4: Platform DATA_CONTRACT v1.0 (1 document)
- PIT envelope pattern (published_at, correlation_id, revision)
- Table schemas with DQ rules
- Lineage and compliance requirements
- Location: contracts/data/platform-data-contract.v1.json
B5: Pure Policy Unit Tests (13 tests)
- SellPriorityPolicy: Priority sorting, bounds validation (6 tests)
- ModelStateTransitionPolicy: Linear state machine (3 tests)
- MonotonicityPolicy: Confidence/threshold monotonicity (4 tests)
- Location: tests/KArtSell.ModelOperations.UnitTests/PolicyTests.cs
Test Results: 249/253 PASS + 4 SKIP
- Architecture: 12/12 (includes 6 PII tests)
- ModelOperations Unit: 54/54 (includes 13 Policy tests)
- SignalEngine Unit: 18/18
- Integration: 165/169 (4 skip)
Status: All evidence items collected and tested locally
Next: Track A (Host deployment recovery) + Track C (WBS update)
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
|
2026-08-06 00:45:28 +09:00 |
|