[E29-S02-T03] Original upload bytes never publicly served #307

New Issue

2026-08-27T08:05:15Z

kpcto commented

2026-08-27 08:05:15 +00:00

Parent story: [E29-S02] Image processing job (#113)

Intent

Ensure original upload bytes are never served to a browser.

Acceptance criteria

Never serve the original upload bytes to a browser
Re-encode before any byte is served as a security and size control

Explicitly out of scope

Metadata stripping is covered by E29-S02-T01
Derivative width generation is covered by E29-S02-T02

Test plan

Request the original object directly and assert it is not publicly served

Rollback note

Revert the serve path; already-generated derivatives remain valid

Owning stream

platform

Risk quadrant

agent-full

> Parent story: [E29-S02] Image processing job (#113) ## Intent Ensure original upload bytes are never served to a browser. ## Acceptance criteria - Never serve the original upload bytes to a browser - Re-encode before any byte is served as a security and size control ## Explicitly out of scope - Metadata stripping is covered by E29-S02-T01 - Derivative width generation is covered by E29-S02-T02 ## Test plan - Request the original object directly and assert it is not publicly served ## Rollback note - Revert the serve path; already-generated derivatives remain valid ### Owning stream platform ### Risk quadrant agent-full

kpcto added this to the Sprint M milestone 2026-08-27 08:05:15 +00:00

kpcto added the

labels 2026-08-27 08:05:15 +00:00

Sign in to join this conversation.