As noted, this task is performed by a Filer module within my application, which is “solely responsible for its content” (and which provides a public moniker-generating subroutine for anyone and everyone to use).   It is a calculated, and I think in this case defendable, design choice.   But your point is well-taken.