Magic link
Short-lived, single-use email sign-in link.
IDENTITY · SESSION · FILE SAFETY
A zero-trust path from seller to publication.
Every account, session, file and publication action crosses its own security gate. Uploading a file never publishes it automatically.
ACCOUNT PROTECTION
Authentication alone is not enough.
The live seller system will combine passwordless access with short sessions, server-side roles and step-up verification for critical actions.
Passkey
Phishing-resistant sign-in on supported devices.
Secure cookie
HttpOnly, Secure and SameSite=Strict session policy.
CSRF protection
Server-validated token on state-changing requests.
Role checks
Seller and administrator permissions verified per action.
Step-up
Fresh verification for publishing, payout and account changes.
FILE ACCEPTANCE CHAIN
Eight gates from upload to release.
A seller file first enters private quarantine. It never reaches public fulfilment until every gate passes.
- 01Verified session
Seller and product draft are authorised.
- 02Single-use grant
A short-lived signed upload grant is issued.
- 03Private quarantine
The file cannot enter a public bucket directly.
- 04Type and size
Extension, MIME, signature and size are checked.
- 05Malware scan
Archives and contents receive security scanning.
- 06Hash record
A SHA-256 integrity fingerprint is recorded.
- 07Content review
Rights and publication standards are assessed.
- 08Controlled release
Only an approved copy reaches fulfilment.
PLANNED FILE POLICY
Documents and software use different gates.
Initial automated acceptance is planned for lower-risk document formats only. Applications and executables require separate technical and signing review.
Open machine-readable policy →Planned document channel
PDF, DOCX, XLSX, PPTX, CSV, TXT and safe image formats.
Separate review
Android, iOS, Windows, macOS and executable packages.
Blocked directly
Macro-enabled files, scripts, double extensions and password-protected archives.