Museum Image Access: Watermarked Derivatives Without Touching Master Files (3 Safeguards)

Short answer: Serve a watermarked derivative from a separate object, never rewrite the museum's master image. Keep the master immutable, make derivative creation idempotent, and let the portal publish...