Start with the restore experience.
Choose what must be recovered: original files, edited versions, albums, captions, or metadata. Then define retention, deletion, and recovery rules. A system that immediately propagates every deletion may be convenient for synchronization, but it needs a separate recovery mechanism to protect against accidental loss.
01 /Inventory deliberately
Record which assets are eligible and what permission allows access. Treat unavailable cloud-backed or device-only items as explicit states.
02 /Transfer resiliently
Persist progress, detect duplicates with an appropriate identity scheme, and resume safely after interruption. Do not equate a queued upload with a protected original.
03 /Retain independently
Separate current library state from retained backup versions. Define retention windows, deletion authorization, and what a user can recover.
04 /Prove restoration
Periodically restore representative photos and associated information. Check that the recovered files open and that the user can understand what was restored.