At-Rest Integrity: Verify-on-Read, Checksums, and GC

CAS keys make verify-on-read free: central verification, x-amz-checksum echo, tombstone GC, and corruption surfacing.

🏛 ARCHITECTURE•STORAGE•August 24, 2026•3 min

S3 Integrity Checksums: x-amz-checksum-*

x-amz-checksum-CRC32/SHA256 echo on PUT; integrity surfaced to clients so dirty bytes never masquerade as clean. Teaches: client-verifiable integrity, Bolt zero-allocation on read path, Sentinel honesty guarantee.

🏛 ARCHITECTURE•S3•August 24, 2026•5 min