# US07-03 — Harden Media and Metadata Edge Cases

Epic: [E07](../E07-hardening-release.md)

As a user, I want unusual or damaged media handled safely so one file cannot corrupt
metadata, exhaust resources, or stop the library workflow.

## Acceptance criteria

- Supported format/orientation/profile combinations have bounded decode behavior.
- Corrupt, truncated, huge-dimension, unsupported, and malformed-metadata files become
  precise item errors without worker failure.
- EXIF checkpoints preserve user fields and previous-stage fields, read back owned
  fields, and mark conflicts divergent rather than silently repairing them.
- Cache regeneration/invalidation and temporary-file cleanup are safe and scoped.

## Automated tests

- Extended golden corpus covers all declared format, orientation, corruption, and EXIF
  cases with memory/time bounds and before/after metadata snapshots.

## Dependencies

- US07-01