Media capture device contracts

A camera or microphone flow is a session lifecycle, not a one-time permission check. The contract is to request the intended tracks, represent the actual failure, recover without promising a browser prompt, replace devices without leaking capture, and release every track the page owns.

Checklist