Platform
Upload quarantine
Kind: A platform service both lanes stand on.
Availability
Owner-gatedWaits on the platform's owner to arm an external malware scanner; the local checks run on every upload without it.
- Unlocks with
- Nothing: it runs for every account.
Every status follows one rule from this deployment's own configuration: a capability is marked shipped only when everything it needs is in place.
What it does
Every uploaded file is checked before it is read: its type against its contents, its structure, active content, its size and encryption.
Keep in mind
Each verdict records whether an external scanner ran or the local checks alone were applied.
What it refuses
| Answer | HTTP | Meaning |
|---|---|---|
| — | 422 | The file failed a check and was not read: 413 when it is too large; 422 when it is empty, its type does not match its contents, or it carries active content, a damaged structure or encryption. |
scanner-unavailable | 503 | An armed scanner reported the file (422) or could not be reached (503); the file was not read. |
- Answer
- —
- HTTP
- 422
- Meaning
- The file failed a check and was not read: 413 when it is too large; 422 when it is empty, its type does not match its contents, or it carries active content, a damaged structure or encryption.
- Answer
scanner-unavailable- HTTP
- 503
- Meaning
- An armed scanner reported the file (422) or could not be reached (503); the file was not read.
What can leave EstateDraft
The registry declares no action of this capability that reaches outside EstateDraft.
Evidence
src/lib/upload-quarantine.test.tssrc/lib/parser-budget.test.tssrc/lib/upload-quarantine/index.tssrc/lib/upload-quarantine/scanner.ts
Reviewed: