- Stage picked media only when the picker is dismissed with a confirmed selection instead of on every selection change, so canceling restores an empty binding and never schedules a preview. - Reset the selection binding after dismissal and recreate the picker via a reset token, so a stale selection can no longer leak into the next presentation and break its preview/send flow. - Add verify.sh invariants for the picker state machine.