Public OCR must not inherit private storage signing
Public OCR must not inherit private storage signing When a shared image resolver gains private-storage signing, audit every public computation endpoint that uses it. An OCR response can disclose protected image contents even when it returns neither image bytes nor the signed URL…