[Kamitoad]

Summary

• Keep valid native receipt data accessible when image-file reads fail, with an explicit transient image warning and retained attachment metadata.
• Show a German detail placeholder for native read failures and web/native image display errors; keep image-less receipts normal.
• Preserve attachment references, checksums, extraction evidence, and receipt values through reads, edits, trash, and restore. Database/schema failures still propagate.
• Keep Android full-backup validation strict; prevent web full exports from silently omitting missing or checksum-mismatched referenced images.
• No database schema, backup format, Auto Backup setting, or broader backup feature changes.

Verification

• pnpm check: TypeScript checks and 143 tests in 15 files passed.
• pnpm build: passed; existing non-blocking Zod/Rollup warnings only.
• git diff --check: passed.
• 17 additional native/web/rendered UI regression cases; native boundaries and image error events are simulated.
• User reports positive development feedback. No physical Android acceptance is implied.

Delivery and remaining acceptance

After successful CI/native compilation and merge, dispatch the existing durable-signed APK workflow for the merged main revision, as explicitly requested. Keep #32 open for Samsung acceptance: missing/denied/corrupt images, readable/image-less receipts, edits, trash/restore, restart persistence, strict export failures, and signed update retention with disposable test data.

Refs #32. No automatic issue closure.