validate echoes the R2 public URL before admission runs; the identity test denies only the holder scan's own stat so Path.exists keeps seeing the db.
validate echoes the R2 public URL before admission runs; the identity test denies only the holder scan's own stat so Path.exists keeps seeing the db.