MIME validation: Storage and security design
Treats declared MIME types and extensions as hints only, verifies content with sniffing or inspection, and quarantines unknown or mismatched uploads before they enter serving paths.
Governs object deletion against retention profiles, legal hold flags, ownership evidence, and immutable audit records without providing legal advice or deleting data under active hold.