The media restore copied with rsync -a and checked file counts only, so a local photo with the NAS size and mtime but other bytes could survive and still print "media restored". Take a SHA-256 manifest of the NAS before the copy, copy with --checksum, require every manifest entry to be present locally with the same bytes, and require the NAS to still match the manifest. On failure, the message now reads the timer's real state instead of assuming it is stopped. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>