Expand description
Kafka destination for audit events.
Kafka is the [auditor.kafka] block of server.toml;
Kafka::build_sink turns it into a KafkaSink once, at
startup, so a malformed librdkafka setting fails the boot instead
of the first audited request.
Emission never blocks a request: KafkaSink::emit only enqueues
the message into librdkafka’s in-memory queue and hands the
delivery report to a spawned task, which logs a warning if the
broker never acknowledges it within message_timeout_ms. A down
broker therefore costs log lines, not latency. Messages still
queued at shutdown get KafkaSink::flushed within a bounded
window.