Overview

Recipient-facing flow gated by Laravel signed URLs. The full signed URL (including expires + signature query params) is minted by the backend (DocumentDispatchService) and the route name is documents.public.show. No bearer auth or tenant headers — the URL signature is the auth.