Secure Dead Drop
Upload a small file through a presigned POST. The bucket remains private, S3 objects expire automatically, and the backend records an audit event in DynamoDB.
Reviewer accounts are limited to three uploads per day. Temporary objects expire after two days.