Load test: verify gateway handles 50 concurrent beta users

[man4ish]

Goal

Confirm the zero-trust API gateway handles expected beta load.

Tool

k6 load tests (already written from May 2026 sprint)

Test scenarios

• 50 concurrent users, 5 min sustained
• Peak: 100 req/s for 30s
• Verify p95 latency < 500ms
• Verify no 5xx errors under load
• Check rate limiting kicks in correctly at thresholds

Run

k6 run tests/load/gateway_load_test.js