Media: images and files

Every content image is an expo-image view with a box, a cache policy for its kind of source, a recycling key in recycled lists and a name (or a decorative mark); photos are picked or captured only from a press, through ports, the camera only after the permission gate; every picked file is downscaled and re-encoded once, copied into the app's media folder under a new name and its temporaries discarded; records hold that name (a MediaRef), never a file URI; files are never overwritten, swept when orphaned, and leave the device only through ports. A zero-dependency checker proves it on iOS and Android code alike.

Rules that must hold