The May 2026 deletion work completed the core lifecycle. Expired already knew how to track a temporary item and decide when it had expired. The next step was not to delete it automatically, but to define exactly when deletion could be offered.
Eligibility became a separate review model. An item must be tracked, expired, and still linked to Photos before it can enter the deletion set. The app then presents an explicit destructive confirmation before PhotoKit performs a library change. iOS may add its own system confirmation.
The surrounding failure work is as significant as the happy path. Missing Photos assets, lost permission, provider failure, partial results, retry, refresh, and local metadata reconciliation all have represented states.
This makes the safety claim architectural rather than rhetorical. Detection, expiration, review, and deletion remain distinct steps.
← Back to Expired