# Shipped projects

> Open-source security and privacy tools by Steven Foerster: Solux (local-first AI workflows), Butler (Ollama access control), and Mistborn.

- Source: https://stevenfoerster.com/projects/

Projects

Systems with source, operating history, independent coverage, or measurable production outcomes. Work in progress is kept separate below.

Case studies

## GovCon Enclave and Mistborn

Platform leadership

### [GovCon Enclave](https://stevenfoerster.com/projects/govcon-enclave/)

Five years from concept to acquisition, with deployment reduced from two weeks to two hours and more than fifty production enclaves.

Read the case study →

Solo open source

### [Mistborn](https://stevenfoerster.com/projects/mistborn/)

A self-hosted private-cloud platform maintained across 25 releases and more than 800 commits, with independent coverage from Linux Pro Magazine and others.

Read the case study →

Current open source

## Projects you can inspect and run

Open source

## Solux

A local-first AI workflow engine that chains inputs, transforms, and local LLM steps into automated pipelines. Everything runs on your machine: no cloud APIs, no vendor lock-in, no data leaving your network.

YAML-defined workflows with 30+ built-in modules, 5 trigger types, CLI and web UI, security modes with RBAC, and MCP server mode for AI agent integration.

- [View source](https://github.com/sfoerster/solux)
- [Full project write-up](https://stevenfoerster.com/projects/solux/)

Open source

## Butler

An access-control reverse proxy for Ollama. Butler adds multi-user authentication (API keys, JWT, OIDC), per-user model authorization, rate limiting, input filtering, and Prometheus observability, without changing Ollama or your clients.

Single static Go binary, one YAML config file, three small dependencies. Fail-closed by design. Supports Keycloak, Okta, and Entra ID out of the box.

- [View source](https://github.com/sfoerster/butler)
- [Full project write-up](https://stevenfoerster.com/projects/butler/)

Private research and prototypes

Keystone is a private identity and endpoint-policy prototype. Its write-up documents architecture under development, not a released product or production validation. I keep it separate from the shipped work above for that reason.

[Read the prototype notes →](https://stevenfoerster.com/projects/keystone/)

## Independent Coverage

Linux Pro Magazine, Awesome Open Source, DB Tech, and Webnestify covered Mistborn. Those early reviews helped shape where the project went next.

-   [Linux Pro Magazine](https://www.linuxpromagazine.com/Issues/2020/240/Mistborn) (Nov 2020)
-   [Awesome Open Source](https://www.youtube.com/watch?v=hekP0_crotw) (Jul 2020)
-   [DB Tech](https://www.youtube.com/watch?v=UE_OuAOgoZI) (May 2021)
-   [Webnestify](https://webnestify.cloud/insights/cybersecurity-hardening/mistborn-zero-trust-vpn-suite/) (May 2024)

- [Linux Pro Magazine (Nov 2020)](https://www.linuxpromagazine.com/Issues/2020/240/Mistborn)
- [Awesome Open Source (Jul 2020)](https://www.youtube.com/watch?v=hekP0_crotw)
- [Webnestify (May 2024)](https://webnestify.cloud/insights/cybersecurity-hardening/mistborn-zero-trust-vpn-suite/)