docs(architecture): VS-01/VS-02 slice specs + VS-02 tech debt #20

2026-08-07T14:08:29+09:00

kjh2064 commented

2026-08-07 14:08:29 +09:00

Summary

VS-01: Identity Access Control (IAC) — Complete SLICE_SPEC ready for implementation

DRAFT SLICE_SPEC: identity/MFA/RBAC/maker-checker contract
Prerequisites AEG-X-001 + AEG-VS-00-02 COMPLETED ✅
Ready for security team review

VS-02: Financial Security Master (Corrected Domain) — DRAFT with known unknowns

Existing VS-02 code implements RBAC (WRONG domain) → tech debt registered
Correct domain: listing/delisting/product structure PIT data
Awaiting data governance approval of unknowns:
(1) KRX data source endpoint
(2) Import SLA
(3) Audit/corrections policy

Files Changed

docs/CURRENT/SLICE_SPECS/VS-01-SLICE_SPEC.md (new)
docs/CURRENT/SLICE_SPECS/VS-02-SLICE_SPEC.md (new)
TECH_DEBT_REGISTER.md (+DEBT-016)
docs/CURRENT/CATALOGS/WBS_PROGRESS_TRACKER.csv (status updates)

Checklist

VS-01: Security team reviews RBAC matrix + MFA tiers
VS-02: Data governance confirms KRX source + import SLA
DEBT-016: Architect confirms VS-02 mislabeled code removal

Co-Authored-By: Claude Haiku 4.5 noreply@anthropic.com

## Summary **VS-01: Identity Access Control (IAC)** — Complete SLICE_SPEC ready for implementation - DRAFT SLICE_SPEC: identity/MFA/RBAC/maker-checker contract - Prerequisites AEG-X-001 + AEG-VS-00-02 COMPLETED ✅ - Ready for security team review **VS-02: Financial Security Master (Corrected Domain)** — DRAFT with known unknowns - Existing VS-02 code implements RBAC (WRONG domain) → tech debt registered - Correct domain: listing/delisting/product structure PIT data - Awaiting data governance approval of unknowns: (1) KRX data source endpoint (2) Import SLA (3) Audit/corrections policy ## Files Changed - docs/CURRENT/SLICE_SPECS/VS-01-SLICE_SPEC.md (new) - docs/CURRENT/SLICE_SPECS/VS-02-SLICE_SPEC.md (new) - TECH_DEBT_REGISTER.md (+DEBT-016) - docs/CURRENT/CATALOGS/WBS_PROGRESS_TRACKER.csv (status updates) ## Checklist - [ ] VS-01: Security team reviews RBAC matrix + MFA tiers - [ ] VS-02: Data governance confirms KRX source + import SLA - [ ] DEBT-016: Architect confirms VS-02 mislabeled code removal Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

kjh2064 added 1 commit 2026-08-07 14:08:29 +09:00

docs(architecture): add VS-01/VS-02 slice specs, register VS-02 tech debt 5db772f404

- VS-01-SLICE_SPEC.md: Identity/MFA/RBAC/maker-checker contract (draft, ready for security review)
  * Roles: GUEST/USER/OPERATOR/ADMIN/SUPER_ADMIN
  * MFA tiers: NO_MFA → TOTP_REQUIRED → HARDWARE_KEY
  * Maker-checker approval workflow for role elevation
  * Schema: users/roles/user_roles/role_approval_requests/mfa_devices/permissions (PIT-tracked)
  * Prerequisite AEG-X-001/AEG-VS-00-02 already COMPLETED → can proceed immediately

- VS-02-SLICE_SPEC.md: Financial security master (listing/delisting/product structure) [DRAFT]
  * Correct domain: Financial PIT data, NOT access-control rules
  * Existing VS-02 code (RBAC rule sync) is mislabeled → registered as tech debt
  * Schema stub: securities/trading_restrictions (PIT-tracked)
  * CRITICAL: Source Unknown — awaiting data governance approval of:
    (1) KRX data source endpoint (not in source-catalog.md)
    (2) Import SLA (daily? intraday?)
    (3) Audit/corrections policy
  * Status: DRAFT (cannot proceed without unknowns resolved)

- TECH_DEBT_REGISTER.md: Added DEBT-016 (VS-02 mislabeled)
  * Impact: Medium (design confusion), Effort: Low (doc) → Medium (code removal)
  * Endpoints disabled (DISABLED comment), schema never migrated, never deployed
  * Dead code marked for removal decision (separate PR recommended)

- WBS_PROGRESS_TRACKER.csv: Updated status
  * AEG-VS-01-01: PLANNED → IN_PROGRESS (SLICE_SPEC ready)
  * AEG-VS-02-01: PLANNED → DRAFT (unknowns documented, data gov approval needed)

AGENTS.md: Maturity (contract before code), Necessity (fix only real issues — domain confusion + unknowns)

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

kjh2064 reviewed 2026-08-07 14:13:28 +09:00

kjh2064 left a comment

✅ Approved: AGENTS.md v16.0 compliant, all checks pass

kjh2064 merged commit 0395ad8ddc into main

2026-08-07 14:14:11 +09:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kjh2064/KArtSell.Aegis#20