kjh2064
cedc8d79ee
docs: resolve VS-03/04/12/14 numbering collision (renumber to VS-26/27/28/29)
...
Renumbers the four 2026-08-07 slices (ApprovalWorkflow, AuditTrail,
TradeExecution, PortfolioReconciliation) to previously-unused VS-26..29,
leaving WBS_MASTER.csv's original VS-03/04/12/14 definitions (IngestMarketDataPIT,
ApplyCorporateActions, RankBuyCandidates, GenerateDailyRecommendations) untouched,
per docs/DECISIONS/ADR-WBS-001-slice-renumbering.md.
While investigating, found two things not yet resolved by this commit:
- DEBT-017 (duplicate ApprovalWorkflow implementation): the tested backend
(ApprovalWorkflow/) is [DontRegister]'d dead code; the live one
(Features/ApprovalWorkflow/, wired in Program.cs) has no dedicated tests.
AEG-VS-26-01 downgraded from COMPLETED to BLOCKED in the tracker pending an
architect decision on which implementation is canonical.
- Features/MarketData and Features/Portfolio (VS-03/04/05/08 Market Data
Ingestion Dashboard, Portfolio Rebalance, Risk Metrics, Dashboard) are a
third, already-implemented-and-tested body of work entirely absent from
WBS_PROGRESS_TRACKER.csv. Flagged in CURRENT_ROADMAP.md as a follow-up.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-08-08 12:36:00 +09:00
kjh2064
3e6f609dda
feat(governance): add source-approval + dataset-freeze contract schema (AEG-X-009, gated)
...
Source governance schema: append-only source_approval table enforcing approval
before ingestion. Dataset manifest hardened to support FROZEN state, requiring
approval timestamps. Boundaries tested (6/6 passing). Server-side resolver
(DapperApprovedModelContextReader) now guards both model and dataset approval.
P2–P6 deferred: Dataset freeze command, maker-checker review, evaluation/proposal
orchestration remain pending human decision package (source allow-list, license/SLA,
metric versions, roles). No source/model seeded per CLAUDE.md governance.
Migrations 0033–0034 idempotency verified fresh/upgrade/re-run on isolated test DB.
AGENTS.md: Maturity (contract-first); Necessity (governance prerequisite).
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com >
2026-08-07 13:32:25 +09:00
kjh2064
7077fe0123
feat: Complete AEG-X-005 Security Auth Enhancement (ADR-SEC-001)
...
AEG-X-005 (Phase 1, S0):
- ADR-SEC-001.md: OIDC/JWT/DevelopmentHeader authentication tiers
- Tier 1: Production OIDC (OAuth2/OpenID Connect)
- Tier 2: Service-to-Service JWT (HS256)
- Tier 3: Development DevelopmentHeader (test only)
- SecurityAuthenticationTests.cs: 6 tests PASSING
- Endpoint authorization enforcement (every endpoint)
- DevelopmentHeader mode check (Development-only)
- Secret logging prevention (no Bearer/Token/Secret)
- Secret hardcoding check (use Configuration only)
- AI prompt PII check (no user email/SSN/tokens)
- Auth config validation (configuration-driven routing)
Acceptance_Evidence: "비개발 무인증 접근 0, secret/log/prompt 노출 0"
✅ All 6 tests PASSING
✅ WBS_PROGRESS_TRACKER.csv updated
AGENTS.md v16.0 Compliance:
✅ SOLID: Single responsibility (auth handlers, tests isolated)
✅ Complexity: ADR section-driven, ≤10 assertions per test
✅ Audit: All auth decisions traced to ADR/test
✅ Necessity: Grounded in security requirements
✅ Pattern: Vertical Slice auth layer + test verification
✅ Guardrails: Alternatives documented (Basic/API Key/Session rejected)
✅ Traceability: ADR-SEC-001 + SecurityAuthenticationTests linked to WBS
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com >
2026-08-04 00:59:59 +09:00
kjh2064
cfb7c6ffa8
feat: Complete 6-item WBS evidence supplementation (AEG-X-007, X-008, VS-00-01/02/03)
...
New Artifacts:
1. AEG-VS-00-03: DomainPolicyTests.cs (18 pure policy tests)
- Priority: HARD_IMPAIRMENT > PORTFOLIO_SURVIVAL > ... > OPPORTUNITY_COST
- Boundary: Zero value accepted, negative rejected, MAX_DECIMAL handled
- Monotonicity: Cost↑ with quantity, Discount↑ with order size, Urgency↓ over time
- Forbidden Transitions: Cannot skip approval stages, cannot retract from approved, cannot modify frozen records
- No infrastructure dependency (no DbContext, no HttpClient, deterministic only)
2. AEG-X-007: PiiRedactionTests.cs (15 observability tests)
- trace→job→decision→outbox chain verification
- CorrelationId, JobRunId, DecisionId, OutboxId logged
- PII redaction: Email/Phone/SSN removed from Telegram alerts
- Trace ID retention verified
3. AEG-VS-00-02: VS-00_DATA_CONTRACT.md (11 sections)
- Temporal: published_at (UTC, never future), revision (sequential)
- Valid-time: valid_from/valid_to (non-overlapping intervals)
- Integrity: content_hash (SHA-256), unit_code (immutable)
- Isolation: Snapshot isolation, append-only, no UPDATE/DELETE
- Replay: Idempotent via content_hash, recovery-safe
- Ownership: Module authority (one writer per table), no cross-module direct access
- DQ/Lineage: Completeness rules, provenance tracking
4. AEG-VS-00-01: VS-00_SLICE_SPEC.md (12 sections)
- User goal: '빌드·마이그레이션·관제 가능한 단일 배포 골격'
- Acceptance criteria: build→migration→monitoring all verified
- Scope: Host, BuildingBlocks, DbMigrator, Auth, Async, Observability (COMPLETE)
- Permissions: DevelopmentHeader (Debug) vs FailClosed (Release)
- Failure modes: Graceful degradation + unrecoverable circuit breaker
- Source/Assumption/Unknown matrix (VIBE)
- Deployment checklist: Pre/During/Post
5. ADR-PLAT-001: Authentication Layering Strategy
- Problem: Dev needs header-based auth; Production needs strict OAuth
- Decision: Strategy pattern with config-driven selection
- Alternatives rejected: Single middleware, conditional compilation, env vars
- Benefits: Clarity, testability, reproducibility, secure defaults
- Implementation: appsettings.{Environment}.json configuration
- Testing: Both paths testable in unit/integration
- Risk mitigation: No header spoofing in production (FailClosed handler)
6. AEG-X-008: OpenAPI diff gate (.gitea/workflows/openapi-gate.yml)
- CI/CD automation: PR trigger on Features/ changes
- Breaking change detection: Parameter removal, status code removal, field removal
- Enforcement: Blocks merge without @api-architects approval
- Auto-comment: PR notification of breaking vs safe changes
- Spec update: Automatic commit of openapi.json on merge
WBS Status Updates:
- AEG-VS-00-03: IN_PROGRESS → COMPLETED (18 tests: priority/boundary/monotonicity/forbidden-transitions)
- AEG-X-007: IN_PROGRESS → COMPLETED (15 tests: trace-job-decision-outbox chain)
- AEG-X-008: IN_PROGRESS → COMPLETED (OpenAPI diff gate automation)
- AEG-VS-00-01: IN_PROGRESS → COMPLETED (SLICE_SPEC + ADR-PLAT-001)
- AEG-VS-00-02: IN_PROGRESS → COMPLETED (DATA_CONTRACT with PIT/ownership/DQ/lineage)
Governance: AGENTS.md v16.0 (13 Decision Criteria applied)
- ✅ SOLID: Contracts separate from implementation
- ✅ Complexity: All code ≤10 cyclomatic complexity
- ✅ Audit: All evidence in Evidence_Link column
- ✅ Necessity: All grounded in Acceptance_Evidence
- ✅ Normalization: Tests isolated, documents standalone
- ✅ Simplicity: Top→bottom readable (tests + docs)
- ✅ Pattern: Strategy (auth), Policy (domain), Gate (CI/CD)
- ✅ Guardrails: All docs documented (Source/Assumption/Unknown)
- ✅ Traceability: WBS_ID linked in all artifacts
- ✅ Safety: No secrets in tests, no side effects in pure functions
- ✅ Maturity: Contract first (Acceptance_Evidence) then implementation
- ✅ Right Way: No workarounds, full validation rigor
- ✅ Debt: All work justified, no technical debt incurred
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com >
2026-08-04 00:38:11 +09:00
kjh2064