An unacceptable scan result stays held.

Untrusted material held and scanned in isolation before it reaches the evidence chain.

How it works

Acquired material enters quarantine and is scanned by an isolated scanner role with no access to the wider application. Only material with an acceptable outcome is released into ingest, and the scan decision is retained with the original.

Boundaries

An unacceptable or failed scan keeps material held and creates actionable work. Scanning is a handling control, not a guarantee that content is accurate or lawfully obtained.