File Malware-Scanning Gateway

{
  "schemaVersion": "1.0",
  "capabilityId": "00000000-0000-4000-8000-000000000009",
  "name": "File Malware-Scanning Gateway",
  "slug": "file-malware-scanning-gateway",
  "summary": "Quarantines uploads, verifies content types, scans files, and releases clean objects through a digest-bound workflow.",
  "granularity": "service",
  "purposes": [
    "malware scanning",
    "file uploads",
    "quarantine",
    "security"
  ],
  "features": [
    "content sniffing",
    "quarantine",
    "ClamAV",
    "digest verification"
  ],
  "functionalDescription": "Quarantines uploads, verifies content types, scans files, and releases clean objects through a digest-bound workflow. The versioned contract documents deterministic behavior, failure modes, configuration, and integration boundaries for production teams.",
  "inputs": [
    {
      "name": "request",
      "contentType": "multipart/form-data",
      "description": "Validated multipart/form-data request payload",
      "required": true
    }
  ],
  "outputs": [
    {
      "name": "result",
      "contentType": "application/json",
      "description": "Typed application/json response with trace metadata",
      "required": true
    }
  ],
  "runtimes": [
    {
      "language": "TypeScript",
      "runtime": "node",
      "versions": [
        "20",
        "22"
      ]
    }
  ],
  "frameworks": [
    "AWS SDK"
  ],
  "deploymentTargets": [
    "container",
    "kubernetes"
  ],
  "dependencies": [
    {
      "name": "zod",
      "version": ">=2",
      "optional": false
    }
  ],
  "permissions": [
    {
      "resource": "temporary-storage",
      "access": "read-write",
      "reason": "Bounded request processing"
    }
  ],
  "dataClassifications": [
    "internal"
  ],
  "complianceClaims": [
    "SBOM available",
    "Dependency scan recorded"
  ],
  "testEvidence": {
    "coveragePercent": 91,
    "tests": 246,
    "lastRun": "2026-07-20T14:00:00.000Z",
    "status": "passing"
  },
  "securityEvidence": {
    "criticalFindings": 0,
    "highFindings": 0,
    "score": 91,
    "scannedAt": "2026-07-19T09:30:00.000Z",
    "scanner": "FixtureScan 1.4"
  },
  "benchmarks": [
    {
      "name": "p95 latency",
      "value": 144,
      "unit": "ms",
      "environment": "2 vCPU / 2 GB fixture runner"
    }
  ],
  "buildBenchmark": {
    "basis": "fixture-directional",
    "sampleSize": 0,
    "referenceTask": "Reimplement the declared file-malware-scanning-gateway contract in a compatible greenfield repository",
    "tokenEstimate": {
      "low": 108000,
      "high": 267000
    },
    "agentTimeMinutes": {
      "low": 90,
      "high": 247
    },
    "humanReviewHours": {
      "low": 1.3,
      "high": 5.5
    },
    "observedAt": null,
    "methodology": "Directional fixture derived from declared granularity and integration effort; no coding-agent replay was run.",
    "confidence": "low",
    "disclosure": "Prototype estimate only. It is not an empirical benchmark and must not be presented as measured savings."
  },
  "integration": {
    "estimatedHours": 6,
    "packageManager": "pnpm",
    "configurationNotes": [
      "Pin the immutable artifact digest",
      "Configure scoped service credentials"
    ]
  },
  "composition": {
    "composable": true,
    "interface": "http-api",
    "compatibleWith": [
      "upload-mime-magic-byte-validator",
      "email-attachment-classification-service"
    ],
    "requires": [],
    "contractStability": "stable",
    "evidence": "fixture-declared",
    "notes": [
      "Compatibility links are declared fixture metadata and have not been independently integration-tested"
    ]
  },
  "commercialModels": [
    "pay-per-execution",
    "source-license"
  ],
  "licenseOptions": [
    {
      "id": "evaluation",
      "name": "Private evaluation",
      "scope": "evaluation",
      "priceCents": 5,
      "unit": "evaluation",
      "rights": [
        "evaluation"
      ],
      "developerSeats": null,
      "restrictions": [
        "Non-production use only",
        "Results retained for 30 days"
      ]
    },
    {
      "id": "hosted-execution",
      "name": "Hosted API execution",
      "scope": "execution",
      "priceCents": 20,
      "unit": "execution",
      "rights": [
        "hosted-access",
        "commercial-use"
      ],
      "developerSeats": null,
      "restrictions": [
        "No artifact or source access"
      ]
    },
    {
      "id": "organization-source",
      "name": "Organization source",
      "scope": "organization",
      "priceCents": 250000,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "source-access",
        "modification",
        "commercial-use"
      ],
      "developerSeats": 100,
      "restrictions": [
        "No standalone redistribution",
        "Single purchasing organization"
      ]
    }
  ],
  "artifactDigests": [
    {
      "algorithm": "sha256",
      "digest": "c4351ab813af9c683d9e0a31c1c3ca69f5b0d7fc01bc66ca8aac287e1ca780cc",
      "artifactType": "source"
    }
  ],
  "provenance": {
    "builder": "FunctionFoundry demo build service",
    "sourceRevision": "fixture-file-malware-scanning-gateway-v1",
    "builtAt": "2026-07-18T12:00:00.000Z",
    "signed": true
  },
  "maintenanceStatus": "active",
  "version": "1.9.0",
  "seller": {
    "name": "Cleanroom Security",
    "verified": true,
    "reputation": 4.6
  },
  "verificationBadges": [
    "Security reviewed"
  ]
}