Test/stress log simulation

.env.example

@@ -14,6 +14,15 @@ MAX_RAW_PAYLOAD_SIZE=52428800   # 50MB
 # Feature flag cache TTL (in seconds)
 FEATURE_CACHE_TTL=10
 
+# Connection and concurrency settings
+MAX_CONNECTIONS=10000            # Max concurrent connections
+BACKLOG=1024                     # TCP listen backlog size
+WORKERS=                         # Worker threads (empty = auto-detect CPU cores)
+
+# Rate limiting (per IP address)
+RATE_LIMIT_ENABLED=true          # Enable/disable IP-based rate limiting
+RATE_LIMIT_REQUESTS_PER_MINUTE=100  # Max requests per minute per IP
+
 # ===================================
 # Authentication Configuration
 # ===================================
@@ -41,3 +50,34 @@ BLOOM_FALSE_POSITIVE_RATE=0.01  # 1%
 
 # Index configuration
 INDEX_INTERVAL=16
+
+# Prefix compression (block-level key prefix encoding)
+# When enabled, consecutive keys within a block share their common prefix,
+# reducing SSTable size by ~10-30% for keys with common prefixes.
+PREFIX_COMPRESSION_ENABLED=false
+
+# ===================================
+# Request Timeout Configuration
+# ===================================
+# Global timeout for API requests (in seconds)
+# Default: 30
+REQUEST_TIMEOUT_SECONDS=30
+
+# ===================================
+# WAL Archiving Configuration
+# ===================================
+# Maximum WAL file size before automatic archiving (in bytes)
+# Default: 67108864 (64MB)
+WAL_MAX_SIZE=67108864
+# Enable automatic WAL archiving
+WAL_ARCHIVE_ENABLED=false
+# WAL size check interval (in seconds)
+WAL_CHECK_INTERVAL_SECS=60
+
+# ===================================
+# Change Data Capture (CDC) Configuration
+# ===================================
+# CDC endpoint URL for streaming data changes to external systems.
+# When set, CDC is enabled and all data mutations (set/delete) are posted
+# as JSON events to the specified HTTP endpoint.
+CDC_ENDPOINT=                    # e.g. http://localhost:9000/webhook

.github/workflows/ci.yml

@@ -9,6 +9,7 @@ permissions:
   contents: read
   issues: write
   actions: read
+  checks: write
 
 jobs:
   validate-workflows:
@@ -17,9 +18,18 @@ jobs:
       - uses: actions/checkout@v4
       - uses: rhysd/actionlint@v1.7.12
 
+  audit:
+    name: Security Audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: rustsec/audit-check@v2.0.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
   report-status:
     if: always()
-    needs: [validate-workflows]
+    needs: [validate-workflows, audit]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4