Virus / Malware Scanning

ClamAV daemon scanning of incoming file uploads before they're marked downloadable. Asynchronous via the queue so the user-facing upload returns immediately; the file is quarantined until the scan completes. Per-tenant policy to skip scanning for trusted upload sources to keep latency low.