Always copies
The copy is first written as a temporary file, flushed to disk, read back and its SHA-256 compared with the one read from the source; only if they match is it moved into place. The source file is opened read-only.
- In the acceptance run the source files were identical before and after (SHA-256, size, timestamps)
- Anything imported before is skipped, even if it was renamed










