DocumentWorker

Document Service worker transport (CP-37676).

📄️Pub/Sub push target for mdm.slice.ov_generated (worker only)

The drop-filter chain: every delivery is classified, counted, and acked. No render task is minted here — the OV-to-workflow sync is the sole enqueuer. Malformed envelopes are counted, logged without payload, and acked.

📄️Cloud Tasks render target (worker only)

Accepts {tenantId, certifyId, docType, recipeVersion, tenantPractitionerId?, expectedDigest?, regenerate?} — identifiers only, no report data. Returns 2xx only once a durable outcome exists for the task's digest; anything else is retryable so the queue redelivers. Dark kill switch returns a retryable 503 (success would consume the task); malformed payloads are a 400 whose retry exhaustion is the designed failure record.