Unvalidated custom metadata

The rules do not validate the presence or content of custom metadata on file uploads. If the application logic relies on specific metadata fields (e.g.