Skip to main content
DefenceFile
Help centre

Document intake · 4 min

Read scan states and blocked files

How pending, clean, failed, and quarantined scan states affect extraction and what to do when a source is blocked.

Help baseline: 2026-06-15

scan statuspendingcleanquarantinedblocked source

Read the scan status first

Scan status controls whether a source file can move into extraction. The implementation tracks pending, clean, failed, and quarantined states.

  • pending means the upload slot or upload completion has not produced a final scan result yet.
  • clean means the source cleared the configured scanner and can be queued for extraction.
  • failed or quarantined means the file is blocked before review and should not be treated as usable evidence.

Resolve quarantined sources before review

The current scanner can quarantine a file when its SHA-256 hash matches the deployment quarantine list. A quarantined or failed scan is marked as a blocked source and extraction is not queued.

  • Replace the source or resolve the scan finding before extraction.
  • Keep the blocked row visible in the source register until the replacement or resolution is complete.
  • Do not treat the scan result as a legal or procedural sufficiency decision.

Boundary

DefenceFile help explains workflow operation. It does not provide legal advice, create privilege, certify scope, certify reasonable procedures, or guarantee that a statutory defence will succeed.

Request pilot review