P15 task detail (archived 2026-09-30 after INTEGRATED merge 207936b)

• Current task: P15-T01 media budgets and forward contract (issue #34) LOCAL_DONE: frozen JPEG 150 KiB target/256 KiB cap/1600 edge/2 MP/3 attempts/32 MiB hypothesis/24 h no-extension deadline, 9 golden vectors replayed by Go, deployed v1 + OpenAPI untouched, RED proven on cap+1. Evidence: P15-T01 record. P15-T02 native photo pipeline (issue #35), sliced T02A/B. T02A LOCAL_DONE: portable photo values + prepare/discard/sweep flow over narrow ports + Swift transcription, Android baseline green, Swift SKIP recorded, RED proven on allowlist. Evidence: P15-T02A record. T02B LOCAL_DONE: AES/GCM blob seal + Keystore sealed cache + BitmapFactory codec + Hilt module (zero new deps), 16 JVM suites green, Android baseline green, Swift SKIP recorded, RED proven on id guard. Evidence: P15-T02B record. P15-T03 bounded backend processing (issue #36) LOCAL_DONE: forward inspect/sanitize lane (1600/2MP headers, 85/70/55 ≤3 attempts, 256 KiB refuse) + VerifyForward (server caps only, immutable first-receipt +24 h expiry), v1 untouched pending T04 cutover, 2MP heap 3.3MB vs 32MiB, unit + race integration green, RED proven on cap check. Evidence: P15-T03 record. P15-T04 expiry deletion and restore (issue #37) LOCAL_DONE: 000029 received_at + backfill, all-copy 24 h sweep (extensions ignored), at-deadline read denial, overdue audit + intake breaker (503), restore-convergent sweep, unit + race integration green, RED proven on 14-day rule. Evidence: P15-T04 record. P15-T05 media privacy and device acceptance (issue #38) LOCAL_DONE: real-PostGIS full-path E2E (verify → logical expiry → sweep → convergence, restart/outage/redaction proofs) + notice (deleted-vs-retained, powered-off disclosure) + runbook limitation, device runs deferred/recorded, RED proven on ExpiresAt. Evidence: P15-T05 record. Next: G15 exit review + phase closure.