Your Integrity Checks Are Watching the Wrong Layer

Ciao Amici 👋 Quick story before we get into the weeds. Last week I took a patient health record sitting in Amazon S3, a file clearly stamped as regulated under HIPAA, and I changed its security label to "public." Anything reading that label would now happily treat protected health information as freely shareable. Here is the part that should make you put your coffee down. I never touched the file. Not one byte. The object's checksum was identical before and after. Every integrity monitor you could aim at that bucket would have looked, seen nothing, and gone back to sleep. Because, technically, nothing did change. The file was fine. It was the context wrapped around the file that I quietly poisoned. This is a story about Amazon S3 annotations, a feature that is only a few weeks old, and a gap in it I do not think anyone has written up yet. We are going to build a real classification pipeline on top of annotations, break it, catch the break, and then close the hole. It i