Verify the uploaded keys, then get them in front of the workspace.

What "in front of" means is the difference between the two planes. On the canonical plane the bytes are already where the browser reads them, so this only nudges running boxes to refresh. On the transfer plane they are in a staging bucket the browser cannot see, so the box has to fetch them before the upload exists as far as the user is concerned.