Выдать выбранное вложение реальным HTTP-ответом и отказать чужому ID

{
    "delivery": "legacy export to file, then core PHP HTTP file delivery",
    "http": {
        "responses": [
            {
                "schema": "aen-cubrid172-http-response-v1",
                "request_number": 1,
                "method": "GET",
                "record_id": 42,
                "status": 200,
                "headers": {
                    "content-type": "application\/octet-stream",
                    "content-disposition": "attachment; filename=\"calibration-42.bin\"",
                    "content-length": "14",
                    "x-content-type-options": "nosniff",
                    "cache-control": "no-store"
                },
                "body_bytes": 14,
                "body_sha256": "eac017dcbda37d9c6b731b78ec6c68e8ae593300191dcfff4b5b4c8b35b7175e"
            },
            {
                "schema": "aen-cubrid172-http-response-v1",
                "request_number": 2,
                "method": "GET",
                "record_id": 99,
                "status": 403,
                "headers": {
                    "content-type": "text\/plain; charset=UTF-8",
                    "content-length": "7",
                    "x-content-type-options": "nosniff"
                },
                "body_bytes": 7,
                "body_sha256": "ad9c44baa1b750f4391d73516cd9d55019fbf44f552efde461f9965d598d7640"
            }
        ],
        "worker_stopped": true,
        "http_requests": 2
    },
    "body_sha256": "eac017dcbda37d9c6b731b78ec6c68e8ae593300191dcfff4b5b4c8b35b7175e",
    "body_hex": "434845434b31373200010203ff0a"
}