Attachment support must extend the conversation-attribution gate
Adding image understanding after ingestion is insufficient if the earlier conversation-attribution gate still rejects every attachment. When a single validated image is an allowed model input, let it follow the same strong continuity proof as text: the same provider conversation,…