CloakPipe: Rust privacy proxy for LLM & RAG. Your data never reaches the LLM. Detects PII in <5ms, replaces with consistent pseudonyms (CloakTree), forwards sanitized request, rehydrates response instantly (SSE works). Single Rust binary. <5ms overhead. AES-256 vault (BYOK). No raw PII stored. Install: cargo install cloakpipe-cli && cloakpipe init && cloakpipe start MIT open source. Free self-host. GitHub: https://github.com/rohansx/cloak... Site: https://cloakpipe.co