- Claim the picker-owned temp movie synchronously inside the picker delegate with FileManager.moveItem before returning, so the picker's post-dismissal cleanup can no longer delete the source while a background copy is reading it. - Deliver the captured movie to the staging flow immediately; heavy staging and thumbnail work still runs off the main thread. - Add a verify.sh invariant for the synchronous movie claim.