feat: allow host-controlled admission for captured files #1

Merged

james.maes merged 1 commits from feat/captured-photo-admission-policy into develop 2026-11-06 16:43:29 +00:00

Conversation 0 Commits 1 Files Changed 7

+237 -5

james.maes commented 2026-11-05 14:24:07 +00:00

Owner

Copy link

Copy source

Add an optional quarantineCapturedFiles host setting so approved scanner photos can be available immediately. The default inherits quarantineNewFiles. The override applies only to CAPTURE intake with the server-resolved/revalidated device identity; ordinary uploads, imports, attachment-panel files and captures without an identity keep the existing policy. Generated-file policy is unchanged.

FILE_REGISTERED records the selected admission policy. Automatic availability does not fabricate a human review, release or content-scan event. Existing quarantined files still use the normal audited Release action. The host must configure its identity provider and media/size limits; direct Java intake callers remain trusted host code.

Validation: 69 focused tests passed with zero failures/errors/skips, including finalizer-path capture/default/ordinary-upload behavior, missing identity, hash failure, strict JSON injection rejection, schema and dependency boundaries; Checkstyle passed. Verification used committed Collaboration 53bd8f00 plus the published Core snapshot in an isolated reactor. Final immutable owner dependency publication/pinning remains pending; this is not a 1.0 release claim.

Requested by the scanner consumer. Echo host opt-in and admin-only release permission are being verified separately; Android production code is unchanged.

Add an optional quarantineCapturedFiles host setting so approved scanner photos can be available immediately. The default inherits quarantineNewFiles. The override applies only to CAPTURE intake with the server-resolved/revalidated device identity; ordinary uploads, imports, attachment-panel files and captures without an identity keep the existing policy. Generated-file policy is unchanged. FILE_REGISTERED records the selected admission policy. Automatic availability does not fabricate a human review, release or content-scan event. Existing quarantined files still use the normal audited Release action. The host must configure its identity provider and media/size limits; direct Java intake callers remain trusted host code. Validation: 69 focused tests passed with zero failures/errors/skips, including finalizer-path capture/default/ordinary-upload behavior, missing identity, hash failure, strict JSON injection rejection, schema and dependency boundaries; Checkstyle passed. Verification used committed Collaboration 53bd8f00 plus the published Core snapshot in an isolated reactor. Final immutable owner dependency publication/pinning remains pending; this is not a 1.0 release claim. Requested by the scanner consumer. Echo host opt-in and admin-only release permission are being verified separately; Android production code is unchanged.

james.maes added 1 commit 2026-11-05 14:24:07 +00:00

feat: allow host-controlled admission for captured files ... 3f08c584d0

Keep the default quarantine policy for ordinary uploads and captures without a provider-resolved device identity. Audit the selected policy without fabricating a release or review event.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

james.maes referenced this pull request from QRun-IO/qbit-mobile-scanners 2026-11-05 17:32:47 +00:00

fix(echo): make approved scanner photos available immediately #22

james.maes merged commit cef1476d85 into develop 2026-11-06 16:43:28 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-record-files#1