Files
portfolio-hub/docs/releases/rel-005_20260512_production-operator-runbook-and-credential-matrix.md
T
genichin 03bc3dcd8f docs: add rel-005 production operator runbook and credential matrix (REQ-020~022)
Release: REL-005_20260512 — Production Operator Runbook and Credential Matrix

Requirements Approved (REQ-020~022):
- REQ-020: production admin bootstrap and steady-state operator access runbook (Deployment)
- REQ-021: release credential matrix and token provenance procedures (Documentation)
- REQ-022: operator log access and release evidence recording procedures (Documentation)

Batch: BAT-009
- Enhance README.md Production Operator Runbook section with:
  - Deployment secret custodian role labels
  - Release approver and production operator role definitions
  - Credential matrix table (public/read/trade-write/admin permission levels)
  - Canonical smoke environment specifications
  - HTTP status code interpretation (401/403/404)
  - Release evidence recording fields

Documentation Updates:
- Add README.md Section 2: deployment roles and responsibilities
- Add README.md Section 3: 4-tier credential matrix with token usage patterns
- Enhance README.md Section 6: smoke test procedures and evidence capture
- Add bootstrap/steady-state/break-glass 3-tier access pathway clarification
- Create REQ-020 Deployment runbook document
- Create REQ-021 credential matrix procedures document
- Create REQ-022 operator log access procedures document

Discovery & Release:
- Update dcy-005 with operator access requirements analysis
- Create rel-005 with docs-only profile and deployment notes
- Update docs/batches/index.md with BAT-009 entry
- Update docs/srs/index.md with REQ-020~022 entries and change log
2026-05-12 23:19:48 +00:00

3.1 KiB

REL-005: Production Operator Runbook and Credential Matrix

  • Status: confirmed
  • Profile: docs-only
  • Included Batch: BAT-009

Scope

  • Included:
    • BAT-009 (REQ-020, REQ-021, REQ-022) — README.md Production Operator Runbook 섹션 보강
      • Section 2: deployment secret custodian / production operator·release approver 역할 레이블 추가
      • Section 3 (신규): public/read/trade-write/admin 4개 credential matrix 테이블
      • Section 6 (구 Section 5 확장): canonical smoke 환경 명시, 401/403/404 구분 판독, release evidence 기록 필드
  • Excluded:
    • 코드·스키마·런타임 변경 없음

Rollout Plan

  1. 변경 내용이 README.md 단독이므로 배포 절차 없음 — git push로 문서 반영
  2. README.md 변경 사항이 main 브랜치에 병합되었는지 확인

Rollback Plan

  • 문서 전용 변경이므로 서비스 영향 없음
  • 롤백 필요 시 해당 커밋 revert로 README.md 이전 상태 복원

Verification Checklist

  • README.md Section 2 — deployment secret custodian / production operator·release approver 역할 레이블 존재 확인
  • README.md Section 3 — credential matrix 테이블 4개 행(public/read/trade-write/admin) 존재 확인
  • README.md Section 6 — canonical smoke 환경 문장, 401/403/404 구분 판독, release evidence 기록 필드 존재 확인
  • README.md Section 1 — bootstrap/steady-state/break-glass 3-tier 경로 구분 존재 확인
  • README.md 링크 및 섹션 번호 연속성 이상 없음 확인 (Section 1~6 순서 정상)

Release Execution Evidence

  • Release Status Transition Target: released

Deployment Facts

  • Executed At:
    • <배포 시작 시각>
  • Completed At:
    • <배포 완료 시각>
  • Environment:
    • docs (README.md 단독 변경, 서비스 배포 없음)
  • Operator:
    • <배포 수행자>
  • Revision or Artifact:
    • <커밋 SHA>
  • Commands or Procedure:
    • git push origin main (README.md 변경 반영)

Profile-Specific Checks

  • docs-only:
    • Published or Packaged Targets:
      • README.md (Production Operator Runbook Section 2, 3, 6 변경)
    • Link or Rendering Check:
      • README.md Section 1~6 번호 연속성 정상 (grep -n "^### [0-9]." 확인). 섹션 간 상호 참조 이상 없음 ✓
    • Navigation or Consumer Update:
      • Section 3(신규)으로 인해 기존 Section 3→4, 4→5, 5→6 번호 이동. README.md 내부 참조 문장 없음(외부 링크 없음). 이상 없음 ✓

Rollback Outcome

  • Rollback Required:
    • no
  • Rollback Trigger:
    • none
  • Rollback Action:
    • none

Release Decision Evidence

  • Released Decision:
    • <released 전환 여부>
  • Rationale:
    • <released 전환 판단 근거>
  • Recorded By:
    • <기록자>
  • Recorded At:
    • <기록 시각>

Feedback Handoff

  • Observation Summary:
    • <운영 관찰 사실 요약 또는 없음>
  • Discovery Input:
    • /auth/login 엔드포인트 미구현 — steady-state canonical path(REQ-020 AC-4)의 실제 smoke 재현은 해당 엔드포인트 구현 후 가능. 후속 Discovery 후보.
  • REQ Input:
    • 없음
  • Change Request Input:
    • 없음