S-two is a next-generation zero-knowledge STARK prover fast enough to run natively on consumer hardware.