algovoi-keystone-s3 0.2.0

Bind S3 object writes to the AlgoVoi keystone -- wrap any boto3 S3 client and every put / delete gets a content-addressed execution_ref (keystone-only edition, Apache-2.0)

algovoi-keystone-s3

Bind S3 object writes to the AlgoVoi keystone -- every put / delete on a wrapped boto3 client gets a content-addressed execution_ref. Open, keystone-only edition, Apache-2.0. Byte-compatible with algovoi-execution-ref. Available on request -- see https://docs.algovoi.co.uk/keystone-connectors

from algovoi_keystone_s3 import keystone_s3_client

s3 = keystone_s3_client(boto3.client("s3"), decision_ref="sha256:...")
s3.put_object(Bucket="receipts", Key="2026/r1.json", Body=data)
s3.execution_ref   # binds that object write (scope = bucket/key) to the keystone decision

Wraps put_object / delete_object / upload_file / upload_fileobj; reads (get_object, list_objects_v2, ...) pass through untouched. A failed write is recorded FAILED. No boto3 dependency -- wraps any client exposing those methods. Or compute standalone with s3_execution_ref(...).

A rejected or failed operation is recorded with outcome SKIPPED / FAILED; tamper_detected(...) recomputes any binding offline.

Keystone-only edition

The open edition binds and verifies each operation. The signed, hash-linked chain of operations (PQC + CCC ingest) is the commercial tier.

License

Apache-2.0. Copyright AlgoVoi.