Upload document

The PDF is read per page, split along section boundaries, embedded in batches, and written in one transaction. It lands as pending: on file and fully indexed, but invisible to retrieval until a person approves it in Approvals. The revision currently in force keeps answering questions until then, and the supersede happens at approval — atomically, so there is never a moment with two active revisions or none.