v0.3.7

What's Changed

• feat(storage): add durable workspace backends and exact managed purge by @amit231self in #40
• fix(metering): record reads when response bodies drop by @amit231self in #41
• fix(security): restrict global admin routes by @amit231self in #42
• fix(security): harden object response headers by @amit231self in #43
• fix(security): authenticate public key mutation by @amit231self in #44
• fix(security): add bounded stateless demo processing by @amit231self in #45
• fix(security): remove stateful demo routes by @amit231self in #46
• fix(security): fail closed on tenant storage resolution by @amit231self in #47
• fix(security): bind semantic headers into SigV4 by @amit231self in #48
• fix(security): validate credential mutation inputs by @amit231self in #49
• fix(security): propagate credential repository failures by @amit231self in #50
• feat(formats): establish format registry foundation by @amit231self in #51
• feat(formats): add bounded schema and value IR by @amit231self in #52
• feat(formats): add native binary reductor contract by @amit231self in #53
• feat(formats): define binary reductor WIT contract by @amit231self in #55
• feat(gateway): add durable usage receipt contract by @amit231self in #54
• feat(runtime): add bounded Wasm binary reductor adapter by @amit231self in #56
• fix(gateway): close launch billing gaps by @amit231self in #57
• feat(gateway): persist durable usage evidence at direct write commit by @amit231self in #58
• feat(gateway): add opt-in Avro OCF processing by @amit231self in #59
• docs: publish Avro support status by @amit231self in #60
• feat(mcp): publish verified stdio object server by @amit231self in #61

Full Changelog: v0.3.6...v0.3.7

v0.3.6

What's Changed

• release: v0.3.5 (M3/M4 — workspaces, metering, per-workspace backend, API key permissions) by @amit231self in #26
• chore: remove SaaS control plane from OSS gateway by @amit231self in #28
• fix(gateway): tolerate non-engine migrations in shared _sqlx_migrations table by @amit231self in #29
• fix(gateway): PII truncation in query-string/plain records; TSV format; per-user managed-storage namespace by @amit231self in #31
• feat(gateway): bounded-memory streaming data plane (SigV4 front-door + full S3 protocol) by @amit231self in #30
• fix(gateway): gate debug-only operation journal behind cfg for release builds by @amit231self in #32
• fix(ci): build Wasm filters for the Nightly interop job by @amit231self in #34
• feat(s3): x-s4-storage-mode: managed override (S7a) by @amit231self in #35
• fix(ci): enable streaming write mode in release image smoke by @amit231self in #36
• fix(s3): decode JSON multipart parts as independent documents by @amit231self in #37
• fix(ci): give release smoke a durable journal (Postgres) + S3 provider by @amit231self in #38
• fix(s3): force path-style addressing for custom S3 endpoints by @amit231self in #39

Full Changelog: v0.3.4...v0.3.6

v0.3.5

Full Changelog: v0.3.4...v0.3.5

v0.3.3

What's Changed

• ci(release): cache-to mode=min — releases drop from ~3h to ~1h by @amit231self in #19
• ci(release): compile-once + COPY assembly — releases drop to ~5-15 min by @amit231self in #20
• ci(release): arm64 cross-compile needs libc6-dev-arm64-cross (ring C build) by @amit231self in #21

Full Changelog: v0.3.2...v0.3.3

v0.3.1

What's Changed

• perf(release): halve build time — filters built once, artifacts extracted from image by @amit231self in #11
• gateway: CORS for website origin + fix glibc (trixie-slim) by @amit231self in #12

Full Changelog: v0.3.0...v0.3.1

v0.3.0

What's Changed

• ci: skip docker-dependent steps under act by @amit231self in #7
• ci: cap cargo build jobs to 2 (avoids OOM under act/colima) by @amit231self in #8
• M2: clean-machine quickstart (s4ctl local init uses published image) + image fix + multi-arch, v0.3.0 by @amit231self in #9
• ci(release): repo-scoped GHCR image, auto-public, prune old versions by @amit231self in #10

Full Changelog: v0.2.0...v0.3.0

v0.2.0

What's Changed

• Local-first mode (FileKeyStore) + pluggable-router positioning, v0.2.0 by @amit231self in #1
• ci(release): lowercase GHCR image name by @amit231self in #2
• ci(release): make GHCR image public after push by @amit231self in #3
• Local pipeline: act + dagger with mandatory cargo/docker caches by @amit231self in #4
• ci: install rustfmt + clippy explicitly (needed by local act runner) by @amit231self in #5
• ci(release): use docker-container buildx driver for GHA cache export by @amit231self in #6

Full Changelog: v0.1.0...v0.2.0

S4 v0.1.0 — initial open-source release

Initial public release of S4: the PII-cleaning S3 proxy.

• S3-compatible gateway with a sandboxed Wasm filter pipeline
  (pii-default, email/ssn/card-detect, envelope-encrypt, stable-encrypt, noop)
• Envelope encryption: per-field AES-256-GCM with RSA-OAEP key wrapping
• Provider-agnostic storage: AWS S3, GCS, B2, R2, MinIO + multi-cloud dual-write/fail-over
• Generated Python and TypeScript SDKs with a high-level client
• Single-binary CLI (s4ctl)

Artifacts: Linux x86_64 gateway binary, Wasm filter components, SDK tarballs.
Image: ghcr.io/231self/S4 (built on the next tagged release via CI).