kjh2064 a7f4ec8759 feat(wbs): AEG-VS-01-02 Identity & Access Control data contract ...

AEG-VS-01-02: Data Schema & Contract Definition

Implementation:
1. db/migrations/0042_iam_tables.sql
   - identity table: PIT versioning (published_at, revision_version)
   - role table: Hierarchy levels (GUEST/USER/OPERATOR/ADMIN/SUPER_ADMIN)
   - role_assignment table: Maker-Checker workflow (PENDING_APPROVAL → ACTIVE)
   - permission table: Granular permissions (RESOURCE:ACTION)
   - role_permission table: M:N role-to-permission mapping
   - mfa_device table: TOTP/WebAuthn/SMS/EMAIL support

2. contracts/data/identity-data-contract.v1.json
   - Full JSON Schema for 5 tables
   - PIT (Point-in-Time) versioning strategy
   - Maker-Checker workflow constraints
   - Unique constraints (username, email, role_name, resource+action)
   - Referential integrity (cascade on delete)
   - Lineage: upstream (OIDC), downstream (Auth middleware, Authorization policy)
   - Quality rules: no circular hierarchies, MFA verification, approval counts

Principles Applied:
- 정규화: 5NF (identity/role/permission separation)
- 역정규화: role_assignment.approved_by_identity_ids (array for audit)
- 정공법: Maker-Checker enforced at schema level (approval_count constraint)
- 안정성: Immutable append-only (published_at, revision_version)
- 데이터 정합성: referential integrity, unique constraints, quality rules

Next: AEG-VS-01-03 (Domain Policy Implementation)

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

2026-08-17 17:26:55 +09:00

..

0000_building_blocks.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0010_signal_engine.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0011_signal_engine_hardening.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0012_signal_engine_integrated_hardening.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0013_execution_readiness_building_blocks.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0014_signal_engine_lot_weight_and_policy_trace.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0015_signal_engine_semantic_versioning.sql

PR 6: Database migration validation - fresh/upgrade test complete

2026-08-02 06:45:20 +09:00

0016_continuous_model_operations.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0017_execution_assurance.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0018_v13_model_feedback_loop.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0019_v14_governed_feedback_cycle.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0020_v15_execution_and_ui_contract_hardening.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0021_v16_reference_implementation_closure.sql

Initial commit: Add project files

2026-08-02 05:15:36 +09:00

0022_model_operations_execution_schema.sql

테스트 DB 계약과 실행 안전성 정렬

2026-08-02 17:37:12 +09:00

0023_inbox_status_contract.sql

테스트 DB 계약과 실행 안전성 정렬

2026-08-02 17:37:12 +09:00

0024_inbox_payload_hash_compatibility.sql

테스트 DB 계약과 실행 안전성 정렬

2026-08-02 17:37:12 +09:00

0031_phase2_observability_and_pooling.sql

chore: Add idempotency to 0031 migration (IF NOT EXISTS on all CREATE INDEX)

2026-08-02 21:25:15 +09:00

0032_shadow_run_queued_status_contract.sql

AEG-X-004: align shadow run queued status contract

2026-08-06 14:17:11 +09:00

0033_market_data_import_logs.sql

Workstream G: Implement AEG-X-009 P1-P6 (KRX/OpenDart/KIS API integration)

2026-08-07 16:33:28 +09:00

0033_source_approval_contract.sql

feat(governance): add source-approval + dataset-freeze contract schema (AEG-X-009, gated)

2026-08-07 13:32:25 +09:00

0034_dataset_manifest_freeze_contract.sql

feat(governance): add source-approval + dataset-freeze contract schema (AEG-X-009, gated)

2026-08-07 13:32:25 +09:00

0035_model_operations_models.sql

fix: missing model_operations.models table + compliance schema breaking every fresh DB (live deploy failure)

2026-08-07 20:23:56 +09:00

0036_approval_workflow.sql

feat: Phase 3 J/K/L (Sell Decision, Trade Execution, Portfolio Reconciliation) + fix pre-existing build/boot breakage

2026-08-07 19:53:38 +09:00

0037_audit_trail_gdpr.sql

fix: missing model_operations.models table + compliance schema breaking every fresh DB (live deploy failure)

2026-08-07 20:23:56 +09:00

0038_sell_decisions.sql

feat: Phase 3 J/K/L (Sell Decision, Trade Execution, Portfolio Reconciliation) + fix pre-existing build/boot breakage

2026-08-07 19:53:38 +09:00

0039_trades.sql

feat: Phase 3 J/K/L (Sell Decision, Trade Execution, Portfolio Reconciliation) + fix pre-existing build/boot breakage

2026-08-07 19:53:38 +09:00

0040_reconciliation.sql

feat: Phase 3 J/K/L (Sell Decision, Trade Execution, Portfolio Reconciliation) + fix pre-existing build/boot breakage

2026-08-07 19:53:38 +09:00

0041_create_operation_audit_trail.sql

feat: DEBT-014 migration execution - 0041_create_operation_audit_trail

2026-08-11 17:18:13 +09:00

0042_iam_tables.sql

feat(wbs): AEG-VS-01-02 Identity & Access Control data contract

2026-08-17 17:26:55 +09:00