Files Service Module
What This Service Is For
Files authorizes a declared attachment and provides a signed staging location before the record save. Issuance records who received the location and the declared content contract.
Boundary
The record owner’s asset binding checks bytes and prepares permanent copies. Files owns issuance persistence but no separate broad domain concept, and it references the existing uploads bucket.
Operations in Words
Staff with upload reach can obtain staging. The health read is public; neither operation has a Submissions binding. Possession of a signed address permits upload with its bound headers, and save-time checks enforce uploader matching.
Consistency Guarantees
Issuance and its audit commit together. Direct upload and later record saving are separate steps connected by a staged reference; unused issue rows remain stored.