Skip to main content

Serverless Data Mesh

Federated data mesh lakehouse publication on AWS Lambda - with cryptographic proof, not just green job logs.

An open Python framework for domain-oriented, federated data mesh teams on AWS. Implements data as a product, self-serve write infrastructure, and federated computational governance at the Iceberg lakehouse layer.

  • Producer domains publish governed data products
  • Steward notaries enforce mesh contracts with VRP proofs
  • Publisher zones expose consumer-ready Iceberg data products

Introduces the Vaquar Pattern (PVDM): Physical → Verify → Durable → Metadata. Invariant: commit_metadata ⟹ VRP = PASS.

Website: GitHub Pages · Paper: arXiv:2608.14643 · Reference gate: Proof-gated-publication-PVDM

Install

pip install serverless-data-mesh
serverless-data-mesh demo    # <60s local PVDM demo, no AWS
serverless-data-mesh new --template medallion --output my-mesh
serverless-data-mesh apply --contract my-mesh/mesh.yaml --output my-mesh/generated
pip install "serverless-data-mesh[rules]"   # + SparkRules on Lambda
pip install "serverless-data-mesh[spark]"   # + PySpark + SparkRules
pip install "serverless-data-mesh[all]"     # rules + spark
pip install "serverless-data-mesh[dev]"     # pytest, ruff, pre-commit

Works on Windows, Mac, and Linux. Uses veridata-recon cryptographic VRP when wheels are available; pure-Python fallback otherwise (same PASS/FAIL gate).

What it solves

Problem Answer
Silent data loss on backfill VRP FAIL blocks Iceberg snapshot
"Job succeeded" is not proof Cryptographic multiset proof per chunk
Lambda 15-minute limit Durable + IceGuard (any total runtime); optional LMI segments up to 90 min async
Retry duplicates data IceGuard rollback + workload_id checkpoints
Central ETL bottleneck Per-domain Lambda writer + transaction boundary
Federated blast radius Producer · Steward · Publisher accounts

Building blocks

Package Role
iceguard Physical SafeWriter, timeout rollback, S3 resume
veridata-recon VRP proof generation and validation
aws-durable-execution-sdk-python Cross-invocation step replay
pyiceberg Glue Iceberg REST metadata via GlueCatalogConnector
sparkrules Optional DRL business rules ([rules] extra)

Quick example

from serverless_data_mesh import (
    IceGuardDurableCoordinator,
    DomainTransactionBoundary,
    VRPProofGenerator,
)

boundary = DomainTransactionBoundary(
    domain_id="orders-domain",
    source_namespace="raw_orders",
    target_table="orders_curated",
    partition_spec={"dt": "2026-06-14"},
)

coordinator = IceGuardDurableCoordinator(
    durable_context=durable_ctx,
    lambda_context=lambda_ctx,
    proof_generator=VRPProofGenerator(),
    catalog_adapter=glue_adapter,
)
outcome = coordinator.run_workload(workload)

Optional extras

Extra Adds
rules SparkRules DRL on Lambda
spark PySpark + SparkRules
all rules + spark
dev pytest, ruff, mypy, pre-commit
publish build, twine

Documentation

License

Apache-2.0

Release files for serverless-data-mesh 1.4.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for serverless-data-mesh 1.4.2
File Size Uploaded
serverless_data_mesh-1.4.2.tar.gz 54.8 MB Details

Built distribution (wheel)

Table of built distributions (wheels) for serverless-data-mesh 1.4.2
File Interpreter ABI Platform
serverless_data_mesh-1.4.2-py3-none-any.whl Python 3 none any Details

Total release size:54.9 MB

Release files / serverless_data_mesh-1.4.2.tar.gz

Download URL serverless_data_mesh-1.4.2.tar.gz
Size 54.8 MB
Tags Source
SHA-256 checksum
How to use checksums
438cfc53a38587870c9c1fadaef5046f59732af13a35af9f1d9978f6ae9204dd
BLAKE2b-256 checksum
How to use checksums
75e5d1726324758d0fc5d1fb167290c3cc5d23a61c7efd409fb129e9856a0e7d
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 19, 2026.

Transparency log

Release files / serverless_data_mesh-1.4.2-py3-none-any.whl

Download URL serverless_data_mesh-1.4.2-py3-none-any.whl
Size 133.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
6beed030bfff6f07713f1d0801ffaa38ad64a39b514ed8ddbf9f8ffa3db0f05e
BLAKE2b-256 checksum
How to use checksums
8912937e4b853171fdeee6757b9e032472f369fb35bdbce088bd2e01998be8b2
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 19, 2026.

Transparency log

Release history Release notifications | RSS feed

1.4.3

2 release files

This release

1.4.2 This release

2 release files

1.4.1

2 release files

1.3.0

2 release files

1.2.0

2 release files

1.0.0

2 release files

0.2.0

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page