Multipart upload: Behavior and interfaces
Defines tenant-scoped resumable upload sessions with part checksums, expiry, complete-only-when-hash-matches, and abort cleanup so large files can resume without orphaned parts or cross-tenant keys.
Requires a clean scanner verdict before uploaded objects become downloadable, quarantines failed or timed-out scans, and defines containment and re-scan steps for a suspected scanner compromise.