[mikecerisano]

PDF reports repeated statistics and technical fields while the existing thumbnail setting did nothing. This adds optional backup previews on Mac, iPhone and iPad, and makes the PDF a compact handoff document: verdict first, a short summary, locations once, then per-file results with previews beside filenames.

History can export PDFs without the original card and shows recorded counts, sizes, phase durations and measured copy speed. Missing old measurements stay unknown. The guide explains verification scope; source-preservation tests now compare extended attributes and filesystem metadata after successful transfers, cancellation after readback and report-publication failure.

Previews are off by default, drawn only from eligible verified backup rows, sequential and capped at 200 attempts/30 seconds with a two-second wait per clip. History validates original saved destination identity. Unavailable previews do not alter verification or card safety. There is no persistent image cache or image payload in diagnostic exports. Regenerated PDFs explicitly say no new verification was performed.

Local validation:

• Mac: 1,084 passed, 9 skipped, 0 failed.
• iPad Air (M4) simulator: 60 passed, 4 optional capture tests skipped, 0 failed; captures were also run with their flag enabled earlier.
• Engine: 121 XCTest cases, 15 skipped, 0 failures; 132 Swift Testing tests passed.
• Mac and iPhone/iPad Release builds passed; diff check clean.
• Real synthetic H.264 extraction, automatic PDF export, unsupported/missing/redirected media, cancellation, History identity and legacy metrics covered on both targets. All 75 preview filenames survive multi-page rendering exactly once.
• PDF renders and seeded History layouts at 320/500/820 points inspected.

A concurrent validation run failed five existing Mac timing waits and two engine tests (three assertions); separate full reruns passed. Logs retain those failures. Physical mobile export/picker walkthroughs and proprietary-camera footage checks remain release gates. Native cancellation requests do not guarantee a wedged OS decoder has exited. Full details: docs/TODO_REPORTS_VALIDATION.md.

No release or signing changes.