Files and media checklist

Every rule in the files and media playbook, by chapter, required rules first. Each links to its own page with how we built it and how to check it. This is a lot to check. An Expert can check it for you.

Uploads

• Recommended MED-1 Define each kind of upload once
• Recommended MED-2 Send a checksum with every upload
• Recommended MED-3 Serve user files from their own domain

Storage and backups

• Required MED-5 Back up user files outside their bucket
• Recommended MED-4 Keep deleted files restorable for 30 days
• Recommended MED-6 Restore files and their records together

Images

• Recommended MED-7 Make image sizes from a fixed list
• Recommended MED-8 Keep colours right when you strip metadata
• Recommended MED-9 Accept the photo formats phones save
• Recommended MED-10 Pick the image format from Accept and send Vary
• Recommended MED-11 Store each image's width and height
• Recommended MED-12 Ask the uploader to describe each image

Video and audio

• Required MED-14 Run media tools in a sandbox with no network
• Recommended MED-13 Transcode every video into an adaptive stream
• Recommended MED-15 Probe each media file and refuse it past its limits
• Recommended MED-16 Make a poster and a thumbnail from every video
• Recommended MED-17 Keep captions as WebVTT files with each video
• Optional MED-18 Even out the loudness of uploaded audio

Serving files

• Required MED-21 Purge cached copies when a file is deleted or removed
• Recommended MED-19 Give every file version its own address
• Recommended MED-20 Sign CDN access to private media for the whole stream

Generated documents

• Required MED-22 Render documents with no network and no local files
• Recommended MED-23 Build documents in a background job
• Recommended MED-24 Store each issued document and never rebuild it
• Recommended MED-25 Make generated PDFs accessible
• Optional MED-26 Use PDF/A for documents kept for years

Quotas and cost

• Recommended MED-27 Count each owner's storage and enforce a quota
• Recommended MED-28 Limit how many uploads each account starts
• Recommended MED-29 Watch data sent out per file and per owner
• Recommended MED-30 Stop other sites from serving your files

Copyright and takedowns

• Required MED-31 Register a copyright agent before you host files for US users
• Recommended MED-32 Take files down and restore them after a counter-notice
• Recommended MED-33 Close the accounts of repeat infringers
• Recommended MED-34 Decide whether EU Article 17 covers your uploads
• Recommended MED-35 Record who uploaded each file and under what licence

Show the badge on your project

When your project passes every Required rule, you can show this badge on your site or in your README. It links to this checklist, so anyone can run the same checks.

<a href="https://agentwranglers.se/playbook/files-and-media/checklist"><img src="https://agentwranglers.se/badge.svg" alt="Checked against the Agent Wranglers files and media playbook" width="214" height="20"></a>

[![Checked against the Agent Wranglers files and media playbook](https://agentwranglers.se/badge.svg)](https://agentwranglers.se/playbook/files-and-media/checklist)