File upload with virus scan

Scenario

A verification document upload uses a signed storage URL. After upload, the file remains in scan pending until an asynchronous virus scanner marks it clean or infected. Clean files become accepted; infected files are quarantined and blocked.