Private downloads: Storage and security design

Issues short-lived capability tokens for private objects, authorizes HTTP byte-range requests against the same token, forbids durable public URLs, and records the downloading identity in the audit trail.

Published Sep 12, 2026