 kjh2064
|
cef4289b32
|
Merge pull request 'Workstream F: VS-03 & VS-04 Slice Specifications (Complete Design)' (#27) from feat/F-vs03-vs04-design into main
deploy / deploy (push) Failing after 1m6s
deploy / notify (push) Successful in 1s
Reviewed-on: #27
|
2026-08-07 17:18:46 +09:00 |
|
|
kjh2064
|
0fad9cd535
|
feat(F-VS-03-VS-04): design approval workflow and audit trail slices
Deliverables:
- NEW: VS-03-SLICE_SPEC.md (Approval Workflow: Maker-Checker Governance)
• State machine: DRAFT → PROPOSED → APPROVED → ACTIVE
• RBAC: Maker, Checker, SRE roles with separation of duties
• API: Create proposals, list, approve, activate
• Data schema: approval_proposals + approval_evidence + approval_events
• Evidence linkage: PBO/DSR/OOS artifacts attached to approvals
- NEW: VS-04-SLICE_SPEC.md (Audit Trail: GDPR/Compliance)
• Immutable INSERT-only audit_events table
• Event types: MODEL_CREATED through COMPLIANCE_AUDIT
• GDPR compliance: Right-to-be-forgotten (redaction, not deletion)
• Retention: 7 years (FSS, PCI-DSS requirements)
• Access control: Compliance officer read-only queries
Governance Integration:
• VS-03: Builds on VS-02 governance foundation + VS-00 PIT envelope
• VS-04: Logs VS-03 approval workflow + all model operations
• Separation of duties: Maker ≠ Checker (prevents unilateral activation)
• Audit trail: Full traceability via correlation_id
Enables Phase 2:
→ Model approval workflow (production readiness gate)
→ Compliance audit trail (regulatory compliance)
→ Evidence linkage (decision justification)
→ GDPR compliance (personal data handling)
AGENTS.md v16.0: 13/13 criteria ✅
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
|
2026-08-07 16:13:59 +09:00 |
|
|
kjh2064
|
f1219ca3cd
|
feat(E-VS-02): resolve data governance unknowns with formal policy
Updates:
- VS-02-SLICE_SPEC.md: Status DRAFT → COMPLETE (all unknowns resolved)
- NEW: VS-02_DATA_GOVERNANCE_POLICY.md (1.0 complete governance framework)
Unknowns Resolved (by AEG-X-009):
✅ Data source: KRX OpenAPI endpoints confirmed (source-catalog.md v2.0)
✅ Import SLA: Daily T+0, <4 hours, 99.5% availability
✅ Audit policy: Append-only revisions, Outbox/Inbox notifications
✅ Error handling: Transient retry (exponential backoff), permanent quarantine, fallback (LKG cache)
Governance Framework:
• Daily import procedure (16:30-19:00 KST)
• Fallback procedure (API down → use LKG cache, max 1 day old)
• Data quality rules (schema completeness, business logic validation)
• Audit & correction handling (immutable revisions, PIT tracking)
• Compliance requirements (5-year retention, FSS audit trail)
• Risk mitigation (cascade failures, correction propagation, duplicate detection)
Enables:
→ VS-02 implementation ready (all governance unknowns cleared)
→ F: VS-03/04 design can reference finalized governance
→ Phase 2: No data governance blockers
AGENTS.md v16.0: 13/13 criteria ✅
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
|
2026-08-07 16:09:28 +09:00 |
|
|
kjh2064
|
0395ad8ddc
|
docs(architecture): VS-01/VS-02 slice specs + VS-02 tech debt (#20)
deploy / deploy (push) Successful in 4m7s
deploy / notify (push) Successful in 1s
Co-authored-by: Claude Code <kjh2064@gmail.com>
Co-committed-by: Claude Code <kjh2064@gmail.com>
|
2026-08-07 14:14:11 +09:00 |
|
|
kjh2064
|
dfa1680a19
|
feat: align UI routes and menu with implemented screens
ci / backend (push) Failing after 0s
ci / static (push) Failing after 11s
ci / backend (pull_request) Failing after 1s
ci / static (pull_request) Failing after 12s
Build & Test with Secrets / build (pull_request) Failing after 2s
ci / publish (push) Has been cancelled
ci / frontend (push) Has been cancelled
Build & Test with Secrets / security-scan (pull_request) Has been cancelled
Build & Test with Secrets / notification (pull_request) Has been cancelled
Build & Test with Secrets / frontend (pull_request) Has been cancelled
ci / publish (pull_request) Has been cancelled
ci / frontend (pull_request) Has been cancelled
|
2026-08-06 01:39:33 +09:00 |
|
|
kjh2064
|
e7913dbde6
|
Add evidence for 6 downgraded WBS items (AGENTS.md v16.0)
ci / backend (push) Failing after 2s
ci / static (push) Failing after 9s
Build & Test with Secrets / build (push) Failing after 1s
deploy / deploy (push) Successful in 3m32s
Build & Test with Secrets / security-scan (push) Failing after 10s
deploy / notify (push) Successful in 1s
ci / frontend (push) Successful in 4m47s
ci / publish (push) Has been skipped
Build & Test with Secrets / frontend (push) Successful in 4m42s
Build & Test with Secrets / notification (push) Failing after 1s
Track B: Evidence Collection (Parallel execution)
B1: PII Redaction Policy Tests (6 tests)
- Tests for SSN, Email, CreditCard, ApiKey redaction
- Pattern-based sanitization validation
- Location: tests/KArtSell.ArchitectureTests/PiiRedactionTests.cs
B3: VS-00 SLICE_SPEC + Platform Governance (1 document)
- User story, non-goals, state transitions
- RBAC constraints, data contracts
- Governance gates (data approval workflows)
- Location: docs/CURRENT/SLICE_SPECS/VS-00-SLICE_SPEC.md
B4: Platform DATA_CONTRACT v1.0 (1 document)
- PIT envelope pattern (published_at, correlation_id, revision)
- Table schemas with DQ rules
- Lineage and compliance requirements
- Location: contracts/data/platform-data-contract.v1.json
B5: Pure Policy Unit Tests (13 tests)
- SellPriorityPolicy: Priority sorting, bounds validation (6 tests)
- ModelStateTransitionPolicy: Linear state machine (3 tests)
- MonotonicityPolicy: Confidence/threshold monotonicity (4 tests)
- Location: tests/KArtSell.ModelOperations.UnitTests/PolicyTests.cs
Test Results: 249/253 PASS + 4 SKIP
- Architecture: 12/12 (includes 6 PII tests)
- ModelOperations Unit: 54/54 (includes 13 Policy tests)
- SignalEngine Unit: 18/18
- Integration: 165/169 (4 skip)
Status: All evidence items collected and tested locally
Next: Track A (Host deployment recovery) + Track C (WBS update)
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
|
2026-08-06 00:45:28 +09:00 |
|