UPLOAD RELEASE INTEGRATION WORKSHEET
Fixture scope: sequential control flow and assigned verdicts only.
Identity: server upload ID, trusted tenant, immutable object generation, trusted digest.
Intake: private storage, bounded transfer, validated type/size and completion evidence.
Processing: authenticated worker reads exact version; policy and attempt identity recorded.
Mutation: conditional state and version update is atomic.
Retrieval: authorize caller then serve approved immutable version.
Negative checks: obsolete positive result, current negative result, untrusted result, other tenant, duplicate completion, stalled processing and new bytes after approval.
Alternate consumers: previews, conversions, email and extraction obey their own untrusted-input boundary.
Capabilities: test direct quarantine access and lifetime of previously issued downloads after revocation.
Execution record: identify actual object version read by worker and version returned to customer.
No scanner, storage policy or concurrent transaction has been validated by the accompanying fixture.