Stage an upload and hand it to the save
What It Does
Staff upload content directly to a short-lived signed staging location, then submit its reference with the record save. The save checks and prepares permanent content.
The Flow
When Something Fails
Storage rejects changed signature-bound headers or expiration; the person must obtain another issue. The unpruned ledger may retain an issuance with no uploaded content. Refuse the record save at the attachment property. Temporary uploads remain until storage’s own retention removes them.
Open Design Questions
Issue-ledger retention and field-specific upload limits remain unresolved.