Prepare a verified file download
Rechecks workspace access and file availability before issuing a five-minute GET capability. The client must verify downloaded size and SHA-256. This is not an acceptance receipt.
POST
Prepare a verified file download
Authorizations
Opaque AMS agent access token or workspace API key. Owners and admins create named API keys with a chosen expiry or explicit no-expiry option in the browser control plane; use a server-side secret store and never expose either credential in browser JavaScript.