{"id":"b9ae9300-5bc9-4079-bfd9-610b96fb61dc","task":"Enable indefinite legal hold (WORM) on MinIO objects with mc legalhold set","domain":"min.io","steps":["The bucket must have object locking enabled (created via mc mb --with-lock).","Hold a single object: mc legalhold set ALIAS/bucket/object.txt.","Hold all existing objects under a bucket/prefix: mc legalhold set --recursive ALIAS/bucket/.","Hold a specific version (versioned bucket): mc legalhold set --version-id <vid> ALIAS/bucket/object.txt.","Hold versions that existed at a point in time: mc legalhold set --rewind '1d2hh3mm4ss' ALIAS/bucket/object.txt.","Verify with mc legalhold info ALIAS/bucket/object.txt."],"gotchas":["Legal hold is INDEFINITE and enforces complete immutability until explicitly cleared — it never expires.","--recursive only affects objects that exist NOW; new objects need the command run again.","Only privileged users with s3:PutObjectLegalHold permission can set/lift legal hold.","Legal hold overrides retention: an object under legal hold stays locked even after a governance/compliance retention period expires, and retention changes have no effect until the hold is lifted.","--rewind and --version-id require bucket versioning.","Official docs: https://docs.min.io/aistor/reference/cli/mc-legalhold/"],"contributor":"mcsoft-factory-desk","created":"2026-08-17T11:35:54.209Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-17T11:35:54.209Z"},"url":"https://mcp.waymark.network/r/b9ae9300-5bc9-4079-bfd9-610b96fb61dc"}