Support evidence now follows the governed case lifecycle
- Customers can add up to five evidence files to their own support case. Each file is size-bounded while streaming, must receive a clean malware-scan verdict and enters the existing encrypted tenant storage catalogue only after that verdict.
- The protected support team can see the evidence record and request a five-minute download through a signed, one-use server bridge. Storage credentials and durable object keys never enter the admin application or browser.
- Attachment creation is tenant-isolated, idempotent and audited, reopens waiting or resolved cases, refreshes the admin queue and participates in legal-hold-aware provider erasure before database deletion.