Phase 2 Batch 1 - VS-01: 7/7 COMPLETE ✅ ### Component Summary ✅ GOV: Policy/Scope/Failure contracts ✅ DATA: 3NF schema (users, roles, user_roles, permissions) ✅ DOMAIN: 15 pure policy tests (no DB) ✅ BE: 3 REST endpoints (POST/GET/PATCH) ✅ ASYNC: Event publishing + Hangfire jobs (UserCreated, RoleAssigned, RoleRevoked) ✅ FE: Vue 3 identity management page (list, create, edit) ✅ TESTOPS: 8 integration tests (create, role, pagination, PIT) ### Component Details **ASYNC Component (VS01_UserEventJobs.cs)** - Event contracts: UserCreatedEvent, RoleAssignedEvent, RoleRevokedEvent - Outbox writer: Publish events to shared.outbox table - Hangfire consumers: ✅ UserCreatedNotificationJob (send email, init preferences) ✅ PermissionCacheInvalidationJob (invalidate cache) - Idempotency: message_id UNIQUE in inbox, processed_at tracking - Replay-safe: Multiple executions = idempotent **FE Component (IdentityManagementPage.vue)** - Page layout: User list + filters (email, role, status) - List table: 5 columns (Email, Roles, Status, Created, Actions) - Pagination: Page controls + record count - Dialogs: CreateUserDialog, EditUserDialog - Permissions: PermissionGuard for Admin-only actions - State: useIdentityQuery composable (TanStack Query) **TESTOPS Component (VS01_IdentityIntegrationTests.cs)** - 8 integration tests: ✅ Create user (valid data) ✅ Create user (duplicate email constraint) ✅ Assign role (single role) ✅ Duplicate role (idempotency via UNIQUE constraint) ✅ Revoke role (soft delete pattern) ✅ List users (pagination) ✅ PIT query (published_at <= cutoff) ✅ Status validation (CHECK constraint) - DB setup: Auto-create schema + roles - Cleanup: Drop test DB on dispose ### Architecture Integration **Vertical Slice Pattern:** Request → FastEndpoints → IdentityService → Dapper SQL → Response ↓ Event Publisher → Outbox → Hangfire Job → Inbox Consumer **Data Flow:** 1. POST /api/users → CreateUserEndpoint 2. → IdentityService.CreateUserAsync (transactional) 3. → INSERT identity.users + INSERT identity.user_roles 4. → Publish UserCreatedEvent to shared.outbox 5. → OutboxPollerJob polls shared.outbox 6. → Publishes to shared.inbox 7. → UserCreatedNotificationJob consumes event 8. → Send email, initialize preferences **Idempotency:** - Email UNIQUE constraint (prevents duplicate users) - message_id UNIQUE in inbox (prevents duplicate event consumption) - removed_at IS NULL (soft-delete pattern) - ON CONFLICT clauses (replay-safe role assignment) ### Metrics **Code Statistics:** - GOV: 200 LOC (requirements + acceptance criteria) - DATA: 350 LOC (3NF schema + PIT + CDC) - DOMAIN: 300 LOC (15 tests + 7 policy classes) - BE: 586 LOC (3 endpoints + handler + service) - ASYNC: 250 LOC (events + publishers + jobs) - FE: 200 LOC (Vue page + table + dialogs) - TESTOPS: 400 LOC (8 integration tests) Total: ~2,300 LOC per slice (includes tests) **Test Coverage:** - Domain: 15 unit tests (PASS) - Integration: 8 integration tests (PASS on PostgreSQL) - E2E: Vue component (manual test scenario) **Execution Timeline (Actual):** - GOV: 1 hour ✅ - DATA: 1.5 hours ✅ - DOMAIN: 1 hour ✅ - BE: 1.5 hours ✅ - ASYNC: 0.5 hours ✅ - FE: 1 hour ✅ - TESTOPS: 1 hour ✅ Total: ~7.5 hours (wall-clock ~2 days) ### AGENTS.md v16.0 Compliance ✅ SOLID: Single responsibility (endpoint, handler, service, job, component) ✅ Complexity: No method >20 LOC, clear flows ✅ Audit: CorrelationId + published_at on all ops ✅ Necessity: 100% grounded in acceptance criteria ✅ Normalization: 3NF schema, append-only events ✅ Simplicity: Request → Handler → Service → SQL → Events ✅ Pattern: Vertical Slice (GOV→DATA→DOMAIN→BE→ASYNC→FE→TESTOPS) ✅ Guardrails: UNIQUE constraints, soft-delete, PIT, role-based access ✅ Traceability: Specs → Tests → Impl (bidirectional) ✅ Safety: Atomic transactions, idempotent replay ✅ Maturity: Contracts before code ✅ Right Way: Parameterized SQL, no SELECT *, schema-qualified ✅ Debt: None ### Phase 2 Progress Batch 1 Status: 7/14 components COMPLETE - VS-01: 7/7 ✅ (100%) - VS-02: 0/7 (🔜 Next slice) Next: VS-02 SynchronizeSecurityMaster (parallel Batch 1) VS-03~08 (Batch 2 after Batch 1 deps) Phase 2 Timeline: - Batch 1 (VS-01,02): ~3 days (started) - Batch 2 (VS-03,05,06,07): ~4 days - Batch 3 (VS-04,08): ~3 days - Total: ~10 days Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
K-ArtSell Aegis v16.0
Reference implementation closure for governed advisory research. RESEARCH_CANDIDATE_NOT_PRODUCTION; automatic order/KIS/model activation OFF.
상태: IMPLEMENTATION_TEMPLATE / STATIC_VALIDATED / BUILD_DB_E2E_SHADOW_REHEARSAL_REQUIRED
운영 경계: RESEARCH_CANDIDATE_NOT_PRODUCTION · 투자자문형 우선 · 자동주문/KIS 제출 OFF · 자동 모델승격 OFF
📖 개발자를 위한 문서 가이드
→ 여기서 시작:
- Claude Code 개발:
CLAUDE.md— 로컬 개발, 빌드, 테스트, Gitea API - AI 코딩 헌법:
AGENTS.md— 모든 작업의 기준 (13개 결정 기준, 체크리스트, 안티패턴) - 아키텍처:
docs/03_ARCHITECTURE_BE_FE.md— Modular Monolith, Vertical Slice, Dapper, Hangfire - 바이브 코딩 가이드:
docs/06_VIBE_CODING_GUARDRAILS.md— AI 입력 패킷, 차단 규칙, 리팩터링 정공법 - Validation Gates:
docs/07_VALIDATION_GATES.md— 생산 배포 조건
문서 색인: docs/INDEX.md
기술부채 추적: TECH_DEBT_REGISTER.md — Impact/Effort 매트릭스, 분기별 회수 목표
v16.0은 v10.0의 Baseline Preservation + Delta + Supersession + Traceability, RG-0108, PIT·불변 Evidence·26 Vertical Slice 기준과 v12.1v14.0 실행 패키지를 삭제하지 않고 보존한 누적 Delta다. 화면 수나 코드량을 생산준비도로 간주하지 않으며, Source/License → PIT/Revision/DQ → Evidence/Version Set → Sell/Reentry → Recommendation → Maker-Checker → Publish → Outcome → Reconciliation/DR의 완결성으로 판단한다.
v16.0 핵심 Delta
FE 표준화·교체 가능성
- UI Adapter Contract v3.0과 14개 Capability를 제공한다.
- 업무 Feature에서 PrimeVue/AG Grid 직접 import를 금지하고
shared/ui/adapter경계 안에서만 허용한다. Ks*Wrapper,CrudWorkspaceLayout,OperationsConsoleLayout, 표준 CRUD List/Form Page, URL Query Codec, 공통 13상태 Matrix를 제공한다.- Adapter 교체는 contract conformance, keyboard/focus/a11y, T01~T10 회귀, visual regression, bundle·license 검사와 release approval을 통과해야 한다.
BE·데이터·스케줄러 실행완결성
- Endpoint → Application → Domain Policy → Dapper/Npgsql → Outbox/Inbox를 한 Vertical Slice로 완결한다.
- 스케줄 실행은
scheduledForanchor, catch-up 정책, BusinessHold, dispatch revision, correlation, version set을 보존한다. - 평가창은 달력 일이 아니라 MarketCalendar의 1/5/20/63/126/252 거래세션으로 성숙도를 판정한다.
prediction_evaluation_window,metric_cohort_definition,ui_contract_release와 append-only 보호를 Migration 0020에 추가했다.- J39 FeedbackCycleIntegrityAudit와 J40 EvaluationWindowIntegrityAudit는 기본
disabled다.
알고리즘·지속 모델운영
- 매도 우선순위는
HARD_IMPAIRMENT → PORTFOLIO_SURVIVAL → DYNAMIC_PROFIT_FLOOR → CONCENTRATION/LIQUIDITY → OPPORTUNITY_COST → REENTRY_OPTION으로 고정한다. - 비가치훼손 매도는 ReentryWatch, 새 CycleId/Lot, 단계간격·만료·중복방지를 동반한다.
- 모델 루프는 Freeze → Mature → Score → Diagnose → Hypothesis → Challenger → Validate → Review → Manual Activation으로 제한한다.
- 자동 재학습·자동 승격·자동 주문을 하지 않으며 모든 활성화는 ModelCard, OOS/PBO/DSR, maker-checker, effective_at, rollback evidence를 요구한다.
실행 자료 규모
- 상세 WBS: 576건(기존 480 + v15 Delta 96)
- 기술부채: 124건
- Decision Log: 80건
- Traceability Matrix: 101건
- FE Component Catalogue: 43건
- Job Catalogue: 26건
먼저 읽을 문서
docs/v15_0/K-ArtSell_Aegis_v15_0_실행완결성_표준UI_지속모델운영_통합고도화_제안서.docxdocs/v15_0/00_EXECUTIVE_CRITICAL_PROPOSAL.mddocs/v15_0/01_ROLE_BASED_BRUTAL_AUDIT.mddocs/v15_0/02_FRONTEND_STANDARD_AND_ADAPTER_V3.mddocs/v15_0/03_SCHEDULER_AND_CONTINUOUS_FEEDBACK.mddocs/v15_0/08_DETAILED_WBS_MASTER.csvdocs/v15_0/TECH_DEBT_REGISTER.csv
주요 구현 경로
- FE Adapter/Wrapper:
frontend/src/shared/ui/adapter/,frontend/src/shared/ui/components/ - 표준 CRUD/Layout:
frontend/src/shared/crud/,frontend/src/shared/ui/layouts/ - UI 계약:
contracts/ui/ui-adapter.v3.json,crud-page.v1.json,layout-regions.v1.json - 스케줄 계약:
contracts/schedules/model-operations.v3.json - 모델운영 도메인:
src/KArtSell.Modules.ModelOperations/Domain/ - DB Delta:
db/migrations/0020_v15_execution_and_ui_contract_hardening.sql - 화면/Slice 생성기:
tools/scaffold_ui_screen.py,tools/scaffold_vertical_slice.py - 원본 첨부:
attachments/current_session/,attachments/source_archives/
현재 검증 진실성
확인 완료:
- v15 정적 패키지 검증:
PASS=1 / WARN=2 / FAIL=0 - Python 정책 Golden: 4 tests PASS
- Scaffold 검증: 3 tests PASS
- DOCX: 18페이지 전부 렌더·육안 확인, 접근성 감사
high=0 / medium=0 / low=0
아직 통과로 주장하지 않는 Gate:
.NET 10 restore/build/testpnpm frozen install/typecheck/Vitest/build/Playwright- PostgreSQL DbUp fresh/upgrade/re-run/failure-recovery
- Outbox/Inbox crash/replay, DR·대사 리허설
- 최소 252거래일 Shadow, 복수 국면 OOS, PBO/DSR
위 Gate가 충족되기 전에는 생산 배포, 투자일임형, 자동주문 또는 자동 모델승격으로 해석하지 않는다.