Short answer: inspect the upload stream before durable storage, reject on byte count first, then parse trusted image metadata and enforce pixel limits. In a marketplace, that small gate catches oversized listings before moderation workers and object storage have to touch them. Gate What it proves Action Declared length A client-side hint only Never trust it alone Received bytes Transport size Stop at the hard byte cap Format signature The parser's in...