A 64-bit Python CLI (and desktop app) that batch-converts Kodak DC200/DC210 .fpx (FlashPix) photographs into archival TIFFs and shareable JPEGs, carrying every recoverable property into standard EXIF/XMP/IPTC plus a complete raw-property JSON sidecar.

It exists because nothing modern opens .fpx, and every off-the-shelf converter either renders black, needs a 32-bit environment, watermarks the output, or silently discards the metadata — and on a collection from this era the metadata is what carries the timeline.

These live alongside the code rather than in the wiki, because they change with it:

Each of these was measured against all 1,265 files of the reference archive before any decoder code was written. Several of them refuted the assumption the project started with.

1. There is no capture date in this kind of corpus. The FlashPix capture-date property is absent from every file. The only timestamp is an import-batch stamp, and on the reference archive it disagreed with folder-name ground truth on 7 of 9 dated albums — once by a whole year. Dates come from folder names plus an owner review pass, not from the file. See Dates and docs/DATES.md.
2. The stored timestamps are local wall-clock time, not UTC. Treating them as UTC and converting would move a fifth of the corpus onto the wrong calendar day.
3. The colour space is NIF RGB, not PhotoYCC — on 1,261 of 1,265 files. The colour-science work everyone budgets for mostly is not there. But the handful of PhotoYCC files are exactly where the worst defect in this project's history lived, so small is not the same as safe.
4. Pillow's FpxImagePlugin cannot be the pixel path. It failed on 1,224 of 1,265 files and hard-crashed the interpreter on two of them. The custom decoder is primary; the plugin is an out-of-process oracle only.
5. Viewing transforms are real and are applied. 22 files carry a genuine 90° counter-clockwise rotation. 70 resolve to a crop (56 axis-aligned, 14 rotated-and-cropped). The archival TIFF preserves the full frame while the shareable JPEG applies the crop — both are worth keeping. And the output tree follows source folder names, not dates, so the album organisation matches what a person named rather than what a timestamp says.

• The version lives only in VERSION. CI refuses a tag that disagrees, and a test refuses a second source of truth.
• CI owns releases: push a vX.Y.Z tag and nothing else. Never create a release or edit a tag by hand.
• This project publishes no container image and talks to no external system. It reads local files and writes local files, and needs no credentials of any kind.
• No personal image, sidecar, or source file is ever committed. tests/fixtures/ is the only exception, and only for images confirmed to contain no people. A test enforces that on every push.