Skip to content

PGSTY SILO Blog

  • LIST Recovery: Confirm Only Uncertain Names and Bound the Waiting Cost

    In Design

    DesignS3ListObjectsPerformanceReview

    Featured Image for LIST Recovery: Confirm Only Uncertain Names and Bound the Waiting Cost

    Source merged; no new production release: PR #239 merged into main on 2026-10-17 as fbcb51197, closing #218 and retaining the original author commits. Merging source does not update installed software. This is the current design decision for #218 …

    Source merged; no new production release: PR #239 merged into main on 2026-10-17 as fbcb51197, closing #218 and retaining the original author commits. Merging source does not update installed software. This is the current design decision for #218 …

  • IAM Admin API Authorization Boundaries

    In Design

    DesignIAMsecurityCompatibility

    Featured Image for IAM Admin API Authorization Boundaries

    Decision, 2026-10-16: GO; source acceptance and merge complete. Server PR #242 merged the signed repair commit 2616d43fb into main as 4e55fc7db. The final candidate was verified directly on main’s 00a375c4e baseline, independently of the pending LIST …

    Decision, 2026-10-16: GO; source acceptance and merge complete. Server PR #242 merged the signed repair commit 2616d43fb into main as 4e55fc7db. The final candidate was verified directly on main’s 00a375c4e baseline, independently of the pending LIST …

  • Clearing Stale Fields in Legacy Metadata and Scanner Responses

    In Design

    DesignReliabilityStorageScanner

    Featured Image for Clearing Stale Fields in Legacy Metadata and Scanner Responses

    Release follow-up (2026-10-15): This repair first shipped in Server 20261015. The source acceptance below records the earlier pre-release verification. Verified on 2026-10-15: merged on main, not yet in a published Server release. PR #233 was merged …

    Release follow-up (2026-10-15): This repair first shipped in Server 20261015. The source acceptance below records the earlier pre-release verification. Verified on 2026-10-15: merged on main, not yet in a published Server release. PR #233 was merged …

  • SILO 20261015 Release Notes

    In Release

    ReleasesecuritySilo

    Featured Image for SILO 20261015 Release Notes

    Tag: RELEASE.2026-10-15T00-00-00Z · Package version: 20261015000000.0.0. Use the download page for binaries, Linux packages and Docker instructions. This is the first Server release containing the complete SN-2026-015 and SN-2026-016 Object Lock …

    Tag: RELEASE.2026-10-15T00-00-00Z · Package version: 20261015000000.0.0. Use the download page for binaries, Linux packages and Docker instructions. This is the first Server release containing the complete SN-2026-015 and SN-2026-016 Object Lock …

  • Object Lock Retention Bypass and Version-Overwrite Repair Design (SN-2026-015 / SN-2026-016)

    In Design

    SilosecurityObject LockWORMS3IAM

    Featured Image for Object Lock Retention Bypass and Version-Overwrite Repair Design (SN-2026-015 / SN-2026-016)

    Status on 2026-10-15: The complete repair in PR #234 (14042b5aa) and PR #235 (0d3ba5d4c) first shipped in RELEASE.2026-10-15T00-00-00Z. The previously published RELEASE.2026-09-16T00-00-00Z remains affected. See the advisory and release notes for …

    Status on 2026-10-15: The complete repair in PR #234 (14042b5aa) and PR #235 (0d3ba5d4c) first shipped in RELEASE.2026-10-15T00-00-00Z. The previously published RELEASE.2026-09-16T00-00-00Z remains affected. See the advisory and release notes for …

  • SN-2026-015: PutObjectRetention Authorization Bypass

    In Security

    securityObject LockIAMSilo

    Featured Image for SN-2026-015: PutObjectRetention Authorization Bypass

    First fixed release: RELEASE.2026-10-15T00-00-00Z (2026-10-15). It contains the complete repairs for SN-2026-015 and SN-2026-016, merged through PR #234 and PR #235. Server RELEASE.2026-09-16T00-00-00Z and the earlier tested …

    First fixed release: RELEASE.2026-10-15T00-00-00Z (2026-10-15). It contains the complete repairs for SN-2026-015 and SN-2026-016, merged through PR #234 and PR #235. Server RELEASE.2026-09-16T00-00-00Z and the earlier tested …

  • Pinned TLS Parameters and Handshake Compatibility

    In Design

    DesignTLSOIDCOperationsCompatibility

    Featured Image for Pinned TLS Parameters and Handshake Compatibility

    Status, 2026-09-17. The Go TLS default repair 48e184652 shipped in Server 20260916. The reporter of issue #154 retested on that release and reports the same connection reset by peer on OIDC discovery. No root cause is established for that …

    Status, 2026-09-17. The Go TLS default repair 48e184652 shipped in Server 20260916. The reporter of issue #154 retested on that release and reports the same connection reset by peer on OIDC discovery. No root cause is established for that …

  • SILO Console 2.4.1 Released

    In Release

    ReleaseConsole

    Featured Image for SILO Console 2.4.1 Released

    SILO Console v2.4.1 was released on September 16, 2026 from 1360e26d976d. It integrates pkg v3.14.1 and mcli 20260916, restricts the anonymous sharing proxy, streams multi-object ZIP downloads and adds signed, traceable release artifacts. Shared …

    SILO Console v2.4.1 was released on September 16, 2026 from 1360e26d976d. It integrates pkg v3.14.1 and mcli 20260916, restricts the anonymous sharing proxy, streams multi-object ZIP downloads and adds signed, traceable release artifacts. Shared …

  • silo-pkg 3.14.1 Released

    In Release

    Releasepkg

    Featured Image for silo-pkg 3.14.1 Released

    v3.14.1 was published from fa657ef4. This is a dependency and tooling release of github.com/pgsty/silo-pkg/v3; the diff from v3.14.0 changes no package Go source or public API. Dependency changes JWX advances from v3.2.0 to v3.3.0. The vendor’s …

    v3.14.1 was published from fa657ef4. This is a dependency and tooling release of github.com/pgsty/silo-pkg/v3; the diff from v3.14.0 changes no package Go source or public API. Dependency changes JWX advances from v3.2.0 to v3.3.0. The vendor’s …

  • A Listing Must Not Drop a Null Version That Still Has Quorum

    In Design

    DesignS3ListObjectsReview

    Featured Image for A Listing Must Not Drop a Null Version That Still Has Quorum

    Warning 历史 LIST 设计已由新决策覆盖 · Earlier LIST design superseded (2026-10-17) English: The investigation below is retained as historical evidence. Its current-design and pending-work guidance is superseded by the latest LIST recovery decision (English). …

    Warning 历史 LIST 设计已由新决策覆盖 · Earlier LIST design superseded (2026-10-17) English: The investigation below is retained as historical evidence. Its current-design and pending-work guidance is superseded by the latest LIST recovery decision (English). …

  • Go 1.27 TLS Defaults and OIDC Discovery Failure Modes

    In Design

    DesignTLSOIDCOperations

    Featured Image for Go 1.27 TLS Defaults and OIDC Discovery Failure Modes

    Publication update, 2026-09-17: The Go TLS default repair (48e184652) shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

    Publication update, 2026-09-17: The Go TLS default repair (48e184652) shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

  • Request-Header Deadlines: Absolute Header Limits and Rolling Body Idle Timeouts

    In Design

    DesignHTTPS3Review

    Featured Image for Request-Header Deadlines: Absolute Header Limits and Rolling Body Idle Timeouts

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

  • Replica Metadata Normalization: What a Trusted Copy May Not Re-Inject

    In Design

    DesignReplicationS3Review

    Featured Image for Replica Metadata Normalization: What a Trusted Copy May Not Re-Inject

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

  • Replicated Tag Ordering: Revision Timestamps, Tombstones, and Resurrection

    In Design

    DesignReplicationS3Review

    Featured Image for Replicated Tag Ordering: Revision Timestamps, Tombstones, and Resurrection

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

  • SSE-C Replica Integrity

    In Design

    DesignS3Operations

    Featured Image for SSE-C Replica Integrity

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

  • Object Lock Replication Ordering

    In Design

    DesignS3Operations

    Featured Image for Object Lock Replication Ordering

    Publication update, 2026-09-17: The later repairs in #129, #134 and #178 shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

    Publication update, 2026-09-17: The later repairs in #129, #134 and #178 shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

  • Multi-Pool Object Consistency

    In Design

    DesignS3Operations

    Featured Image for Multi-Pool Object Consistency

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

  • Federated CopyObject: Preserve the Destination Contract

    In Design

    DesignS3Operations

    Featured Image for Federated CopyObject: Preserve the Destination Contract

    Publication update, 2026-09-17: The federated CopyObject repairs recorded here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain …

    Publication update, 2026-09-17: The federated CopyObject repairs recorded here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain …

  • Durable IAM Revocations

    In Design

    DesignS3Operations

    Featured Image for Durable IAM Revocations

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

    Publication update, 2026-09-17: The September source repairs discussed here shipped in Server 20260916. Coordinated upgrades, opt-in prerequisites and remaining limitations still apply. Dated source-status and validation records below retain their …

  • SILO 20260916 Release Notes

    In Release

    ReleaseSilo

    Featured Image for SILO 20260916 Release Notes

    Warning 旧版分片列举设计已被覆盖 · Earlier multipart-listing designs superseded (2026-10-17) English: The #79 multipart-listing proposals, enablement advice and status in this article are historical. Subsequent design work is governed by the latest design …

    Warning 旧版分片列举设计已被覆盖 · Earlier multipart-listing designs superseded (2026-10-17) English: The #79 multipart-listing proposals, enablement advice and status in this article are historical. Subsequent design work is governed by the latest design …