S3 encryption enforcement is enabled, but a legacy multipart client omits the required KMS context and uploads start failing midstream

The bucket policy is correct, yet one older client implementation cannot satisfy the newer encryption contract.