Skip to content

S4 v0.1.0 — initial open-source release

Choose a tag to compare

@amit231self amit231self released this 11 Aug 08:01
· 203 commits to main since this release

Initial public release of S4: the PII-cleaning S3 proxy.

  • S3-compatible gateway with a sandboxed Wasm filter pipeline
    (pii-default, email/ssn/card-detect, envelope-encrypt, stable-encrypt, noop)
  • Envelope encryption: per-field AES-256-GCM with RSA-OAEP key wrapping
  • Provider-agnostic storage: AWS S3, GCS, B2, R2, MinIO + multi-cloud dual-write/fail-over
  • Generated Python and TypeScript SDKs with a high-level client
  • Single-binary CLI (s4ctl)

Artifacts: Linux x86_64 gateway binary, Wasm filter components, SDK tarballs.
Image: ghcr.io/231self/S4 (built on the next tagged release via CI).