X_STORAGE_TARGET_UNSCANNED
Means
a targeted upload grant would bypass the upload scanner
Typical cause
grantUpload or grantMultipart was given a target while an uploadScanner is installed in runtime.ts; a targeted key never passes through promoteAttachment, so its bytes would reach the row unscanned
Fix
grantUpload({ disk, orgId, request, policy }) — no target — then promoteAttachment({ disk, key, orgId, target, policy }) once the upload lands