photoanalyzer/delivery_backlog/stories/US07-03-media-hardening.md

US07-03 — Harden Media and Metadata Edge Cases

Epic: E07

As a user, I want unusual or damaged media handled safely so one file cannot corrupt metadata, exhaust resources, or stop the library workflow.

Acceptance criteria

• Supported format/orientation/profile combinations have bounded decode behavior.
• Corrupt, truncated, huge-dimension, unsupported, and malformed-metadata files become precise item errors without worker failure.
• EXIF checkpoints preserve user fields and previous-stage fields, read back owned fields, and mark conflicts divergent rather than silently repairing them.
• Cache regeneration/invalidation and temporary-file cleanup are safe and scoped.

Automated tests

• Extended golden corpus covers all declared format, orientation, corruption, and EXIF cases with memory/time bounds and before/after metadata snapshots.

Dependencies

• US07-01