@@ -249,6 +249,26 @@ func (b Service) Put() (object.PutObjectStream, error) {
 	}, err
 }
 
+type patchStreamBasicChecker struct {

@@ -204,6 +204,26 @@ func (c *Service) Put() (objectSvc.PutObjectStream, error) {
 	}, err
 }
 
+type patchStreamBasicChecker struct {

@@ -173,0 +211,4 @@
+
+// Send implements PatchObjectStream.
+func (a *auditPatchStream) Send(ctx context.Context, req *object.PatchRequest) error {
+	a.containerID = req.GetBody().GetAddress().GetContainerID()

@@ -0,0 +72,4 @@
+		commonPrm: commonPrm,
+	}
+
+	putstm, err := s.putSvc.Put()

@@ -0,0 +97,4 @@
+
+		RangeProvider: rangeProvider,
+
+		ObjectWriter: putstm.Target(),

@@ -0,0 +161,4 @@
+	patch := new(objectSDK.Patch)
+	patch.FromV2(req.GetBody())
+
+	if patch.ReplaceAttributes || len(patch.NewAttributes) > 0 {

@@ -0,0 +168,4 @@
+		}
+	}
+
+	if patch.PayloadPatch != nil {

@@ -872,0 +903,4 @@
+	}
+
+	slices.SortFunc(prm.PayloadPatches, func(a, b PayloadPatch) int {
+		if a.Range.GetOffset() == b.Range.GetOffset() {

@@ -191,1 +215,4 @@
 }
+func (s patchStreamMetric) Send(ctx context.Context, req *object.PatchRequest) error {
+	if req.GetBody().GetPatch() != nil {
+		s.metrics.AddPayloadSize("Patch", len(req.GetBody().GetPatch().Chunk))

@@ -0,0 +40,4 @@
+	})
+	rngPrm.SetRange(rng)
+
+	go func() {

@@ -0,0 +47,4 @@
+
+		switch {
+		case errors.As(err, &splitErr):
+			pipeWriter.Close()

@@ -0,0 +51,4 @@
+		case errors.As(err, &ecErr):
+			pipeWriter.Close()
+		default:
+			pipeWriter.CloseWithError(err)

@@ -0,0 +168,4 @@
+	if !s.nonFirstSend {
+		err := s.patcher.ApplyAttributesPatch(ctx, patch.NewAttributes, patch.ReplaceAttributes)
+		if err != nil {
+			return fmt.Errorf("patch attributes error: %w", err)

@@ -163,6 +167,8 @@ func (c *checkerImpl) CheckAPE(ctx context.Context, prm Prm) error {
 		}
 	}
 
+	prm.Method = replaceBySessionTokenVerb(prm.Method, prm.SessionToken)

@@ -162,6 +166,13 @@ func (c *checkerImpl) CheckAPE(ctx context.Context, prm Prm) error {
 		default:
 		}
 	}
+	signedByStorageNode, err := c.signedByStorageNode(prm.SignatureKey)

@@ -176,6 +180,7 @@ func (p *putStreamBasicChecker) Send(ctx context.Context, request *objectV2.PutR
 			Header:         partInit.GetHeader(),
 			Method:         nativeschema.MethodPutObject,
 			SenderKey:      hex.EncodeToString(reqCtx.SenderKey),
+			SignatureKey:   originalSig.GetKey(),

@@ -737,0 +768,4 @@
+			return errors.New("missing oid")
+		}
+		obj := new(oid.ID)
+		err = obj.ReadFromV2(*request.GetBody().GetAddress().GetObjectID())

@@ -70,2 +70,4 @@
 	SenderKey string
 
+	// Original message signature key.
+	SignatureKey []byte