---
name: file-upload-parser-analysis
description: Analyze authorized file, archive, image, document, metadata, storage, transformation, and rendering boundaries with inert artifacts.
---

# File upload and parser analysis

## Accepted inputs

- Current scope and allowed file types, sizes, and side effects
- Owned account and cleanup-capable test records
- Baseline accepted and rejected files

## Procedure

1. Map upload, validation, transformation, storage, serving, preview, export, and deletion stages.
2. Record filename, declared type, detected type, extension, structure, metadata, size, and resulting URL or identifier.
3. Use inert unique markers. Change one parser property per artifact.
4. Compare synchronous and background processing, alternate download routes, and permission checks.
5. Use a malformed or policy-rejected file as a negative control.
6. Record cleanup and verify every generated derivative is removed.

## Output artifacts

- Parser and lifecycle matrix
- Artifact hashes and paired response references
- Storage, rendering, and cleanup observations

## Stop conditions

No malware, uncontrolled persistence, decompression bombs, executable content, or access to other users' files.

## Completion gate

Complete when the responsible processing stage is identified, the effect repeats with inert owned artifacts, negative controls differ, and cleanup is confirmed.