Magika

Google’s heuristic content-type identifier. Wired into the gateway’s file-upload path to expose content-type spoofing — a .png whose bytes are an executable, for example. Model weights at /opt/deputyos/magika/. See Security → Default-on controls.