We’re going to stop storing job metadata in the session. So we can’t rely on it for checking whether a file is valid. That safeguard is happening in the API instead now (because it’s looking at the metadata stored in S3).