Refactor for prod

[ginaxu1]

No description provided.

[gemini-code-assist]

Code Review

This pull request significantly hardens the Argus service by introducing a pluggable pipeline architecture with concurrent fan-out to multiple sinks, cryptographic non-repudiation through signature verification, and tamper-evident hash chaining. It also adds Prometheus metrics, Bearer token authentication, and high-performance batching capabilities to both the client and server. Feedback focuses on critical security and performance improvements: specifically, using constant-time comparisons for authentication tokens to prevent timing attacks, addressing race conditions and incorrect ordering in the Postgres hash-chaining logic, and optimizing the synchronous pipeline dispatch to avoid blocking the ingestion API.

[ginaxu1]

/gemini review

[gemini-code-assist]

Code Review

This pull request implements a hardened architecture for Argus, introducing a pipeline-based sink system for concurrent log fan-out, cryptographic signature verification, and tamper-evident hash chaining. It also adds a bulk ingestion endpoint, Prometheus metrics, and Bearer token authentication. Technical feedback highlights a security vulnerability where the hash calculation omits several log fields, a performance bottleneck caused by write serialization in the database, and potential reliability issues including goroutine leaks and premature context cancellation in asynchronous tasks. There is also a recommendation to improve error handling to prevent silent data loss when the primary storage sink fails.

[sthanikan2000]

LGTM!