Repository extension validity check rely on the cached document being identical to the one currently saved

Which does not make much sense. It used to work because it used to be the cache but it was just plain luck. It's now broken because the attachment REST resource clone the document before adding the attachment and saving it.