docs: add rel-005 production operator runbook and credential matrix (REQ-020~022)

Release: REL-005_20260512 — Production Operator Runbook and Credential Matrix Requirements Approved (REQ-020~022): - REQ-020: production admin bootstrap and steady-state operator access runbook (Deployment) - REQ-021: release credential matrix and token provenance procedures (Documentation) - REQ-022: operator log access and release evidence recording procedures (Documentation) Batch: BAT-009 - Enhance README.md Production Operator Runbook section with: - Deployment secret custodian role labels - Release approver and production operator role definitions - Credential matrix table (public/read/trade-write/admin permission levels) - Canonical smoke environment specifications - HTTP status code interpretation (401/403/404) - Release evidence recording fields Documentation Updates: - Add README.md Section 2: deployment roles and responsibilities - Add README.md Section 3: 4-tier credential matrix with token usage patterns - Enhance README.md Section 6: smoke test procedures and evidence capture - Add bootstrap/steady-state/break-glass 3-tier access pathway clarification - Create REQ-020 Deployment runbook document - Create REQ-021 credential matrix procedures document - Create REQ-022 operator log access procedures document Discovery & Release: - Update dcy-005 with operator access requirements analysis - Create rel-005 with docs-only profile and deployment notes - Update docs/batches/index.md with BAT-009 entry - Update docs/srs/index.md with REQ-020~022 entries and change log
2026-05-12 23:19:48 +00:00
parent 7bcf5cbb2b
commit 03bc3dcd8f
14 changed files with 748 additions and 63 deletions
@@ -11,4 +11,5 @@
 | REL-001 | app-service | released | BAT-001 | dcy-002 / REQ-004~010 | [rel-001_20260502_trex-basic-v1-api-contract](./rel-001_20260502_trex-basic-v1-api-contract.md) |
 | REL-002 | tooling | released | BAT-002, BAT-005, BAT-008 | minor-change + dcy-002 / REQ-011, REQ-012, REQ-015 | [rel-002_20260511_operator-cli-tooling-and-baseline-docs-sync](./rel-002_20260511_operator-cli-tooling-and-baseline-docs-sync.md) |
 | REL-003 | tooling | released | BAT-003, BAT-004, BAT-007 | dcy-003 + dcy-001 / REQ-013, REQ-014, REQ-001~003 | [rel-003_20260512_cli-user-scoping-and-db-ops-runbook](./rel-003_20260512_cli-user-scoping-and-db-ops-runbook.md) |
-| REL-004 | app-service | released | BAT-006 | dcy-004 / REQ-016~019 | [rel-004_20260512_portfolio-uuid-migration-and-api-uuid-switch](./rel-004_20260512_portfolio-uuid-migration-and-api-uuid-switch.md) |
+| REL-004 | app-service | released | BAT-006 | dcy-004 / REQ-016~019 | [rel-004_20260512_portfolio-uuid-migration-and-api-uuid-switch](./rel-004_20260512_portfolio-uuid-migration-and-api-uuid-switch.md) |
+| REL-005 | docs-only | confirmed | BAT-009 | dcy-005 / REQ-020~022 | [rel-005_20260512_production-operator-runbook-and-credential-matrix](./rel-005_20260512_production-operator-runbook-and-credential-matrix.md) |
@@ -0,0 +1,83 @@
+# REL-005: Production Operator Runbook and Credential Matrix
+
+- Status: confirmed
+- Profile: docs-only
+- Included Batch: BAT-009
+
+## Scope
+- Included:
+  - BAT-009 (REQ-020, REQ-021, REQ-022) — README.md `Production Operator Runbook` 섹션 보강
+    - Section 2: deployment secret custodian / production operator·release approver 역할 레이블 추가
+    - Section 3 (신규): public/read/trade-write/admin 4개 credential matrix 테이블
+    - Section 6 (구 Section 5 확장): canonical smoke 환경 명시, 401/403/404 구분 판독, release evidence 기록 필드
+- Excluded:
+  - 코드·스키마·런타임 변경 없음
+
+## Rollout Plan
+1. 변경 내용이 README.md 단독이므로 배포 절차 없음 — git push로 문서 반영
+2. README.md 변경 사항이 main 브랜치에 병합되었는지 확인
+
+## Rollback Plan
+- 문서 전용 변경이므로 서비스 영향 없음
+- 롤백 필요 시 해당 커밋 revert로 README.md 이전 상태 복원
+
+## Verification Checklist
+- [x] README.md Section 2 — deployment secret custodian / production operator·release approver 역할 레이블 존재 확인
+- [x] README.md Section 3 — credential matrix 테이블 4개 행(public/read/trade-write/admin) 존재 확인
+- [x] README.md Section 6 — canonical smoke 환경 문장, 401/403/404 구분 판독, release evidence 기록 필드 존재 확인
+- [x] README.md Section 1 — bootstrap/steady-state/break-glass 3-tier 경로 구분 존재 확인
+- [x] README.md 링크 및 섹션 번호 연속성 이상 없음 확인 (Section 1~6 순서 정상)
+
+## Release Execution Evidence
+- Release Status Transition Target: released
+
+### Deployment Facts
+- Executed At:
+  - <배포 시작 시각>
+- Completed At:
+  - <배포 완료 시각>
+- Environment:
+  - docs (README.md 단독 변경, 서비스 배포 없음)
+- Operator:
+  - <배포 수행자>
+- Revision or Artifact:
+  - <커밋 SHA>
+- Commands or Procedure:
+  - git push origin main (README.md 변경 반영)
+
+### Profile-Specific Checks
+- docs-only:
+  - Published or Packaged Targets:
+    - README.md (Production Operator Runbook Section 2, 3, 6 변경)
+  - Link or Rendering Check:
+    - README.md Section 1~6 번호 연속성 정상 (grep -n "^### [0-9]\." 확인). 섹션 간 상호 참조 이상 없음 ✓
+  - Navigation or Consumer Update:
+    - Section 3(신규)으로 인해 기존 Section 3→4, 4→5, 5→6 번호 이동. README.md 내부 참조 문장 없음(외부 링크 없음). 이상 없음 ✓
+
+### Rollback Outcome
+- Rollback Required:
+  - no
+- Rollback Trigger:
+  - none
+- Rollback Action:
+  - none
+
+### Release Decision Evidence
+- Released Decision:
+  - <released 전환 여부>
+- Rationale:
+  - <released 전환 판단 근거>
+- Recorded By:
+  - <기록자>
+- Recorded At:
+  - <기록 시각>
+
+## Feedback Handoff
+- Observation Summary:
+  - <운영 관찰 사실 요약 또는 없음>
+- Discovery Input:
+  - `/auth/login` 엔드포인트 미구현 — steady-state canonical path(REQ-020 AC-4)의 실제 smoke 재현은 해당 엔드포인트 구현 후 가능. 후속 Discovery 후보.
+- REQ Input:
+  - 없음
+- Change Request Input:
+  - 없음