Sushant Samuel

Third-party review of Argus IPC, client grants, SQLCipher key handling, Argus Proxy MITM path, and release signing. Includes prioritized fixes, post-audit IPC/proxy hardening, fuzzing on the socket protocol, and re-test of critical findings. Argus handles live credentials locally; an audit is the largest gap before wider adoption.

Build argus run <command> CLI sidecar and OS-level transparent HTTP/HTTPS capture via mitmproxy_rs (Linux eBPF, then Windows WinDivert, macOS Network Extension). Includes sandbox session grants, transparent proxy acceptor in Argus core, and doctor/status/traffic commands. Wrapped process trees use existing bucket rewrite rules without per-library proxy wiring.

Deferred as a separate line item; scope is included in the security-audit plan. Threat-model updates, grant TTL edge cases, proxy auth binding to peer PID, and signed releases.

argus get, list, and export shell commands with eval-safe export (no secret values in shell history), advanced tray menus, and docs for CI usage patterns. Extends Argus beyond the desktop UI for scripts and automation.

Ship and maintain argus-go, Ruby gem, and Java/JVM client with the same grant + bucket semantics as Python/Node. Go is first priority for backend and CI adopters; Ruby and Java follow documented demand.

Initial work toward a self-hosted Argus server: team vault backend scaffold, basic multi-user auth, shared buckets, remote agent/IPC bridge for CI, and organizational audit export. Full SSO/HA/enterprise scope is later roadmap; this plan covers an honest first milestone, not a finished enterprise product.

Covers ongoing bug fixes, dependency updates (Tauri, mitmproxy_rs, SQLCipher), triage, release builds for three desktop platforms, and community support. Argus is maintained part-time today; this would modestly increase sustained development bandwidth.

Domain (useargus.dev), code-signing/notarization costs (Apple Developer, Windows Authenticode), CI minutes, and static site hosting. Small but recurring; keeps releases and documentation available.

Any amount to support Argus development with no specific deliverable attached.