- Validate ranged thumbnail payloads and S3 bounds - Invalidate stale previews and expose loading errors - Document the public document workspace composable