This is how the work actually arrives: a scan, a phone photo, a forwarded email. Someone in the front office types or pastes it in.
The page you are looking at has no model access at all. It cannot read this document. It screens it and parks it, and the fleet picks it up on its next run — so a compromised coordinator surface still cannot make a model do anything.
This is the document the rest of this walkthrough follows. It was filed for real and the fleet has already read it.