Accepted candidate
PDF / Word / Excel / CSV / TXT / image files can become intake candidates.
Upload enters through a protected corridor.
PACK44 defines how files will enter Second Brain: metadata first, storage path second, privacy/logic pre-scan, processing job, audit trail and human-safe review.
Still blocked
Real confidential client files remain blocked until Auth, RLS, storage, privacy firewall, logic-layer firewall and human approval are verified.
Pipeline
Metadata → storage path → privacy pre-scan → logic pre-scan → processing job → audit event.
Storage
Private bucket: private-uploads. No public raw uploads.