Storage access
Shared access now supports reusable policies, classroom claims and role/recipient restrictions.
Uploads
Generate signed download URLs, one-time tokens and shared grants.
Export registry
Exported/generated files are registered separately.
Access policies
Reusable share presets with role/recipient restrictions.
Shared grants
Token access records with revoke capability and audit inspection.