S4 v0.1.0 — initial open-source release
Initial public release of S4: the PII-cleaning S3 proxy.
- S3-compatible gateway with a sandboxed Wasm filter pipeline
(pii-default, email/ssn/card-detect, envelope-encrypt, stable-encrypt, noop) - Envelope encryption: per-field AES-256-GCM with RSA-OAEP key wrapping
- Provider-agnostic storage: AWS S3, GCS, B2, R2, MinIO + multi-cloud dual-write/fail-over
- Generated Python and TypeScript SDKs with a high-level client
- Single-binary CLI (s4ctl)
Artifacts: Linux x86_64 gateway binary, Wasm filter components, SDK tarballs.
Image: ghcr.io/231self/S4 (built on the next tagged release via CI).