On the public invoice view page: External files appear in the file list with "(External)" label Download links are generated on-demand from the API (includes security checks) Links are temporary and expire for security Files marked as "hide until paid" respect the payment status filter