Address the implementation review's M1 + two low findings. M1 (TOCTOU lost-update race, Postgres): UpdateDraftMetadata and SetDraftReady/SetDraftError both do read-modify-write of the draft CBOR body. Without a row lock, a user metadata edit landing at the instant processing completes could clobber the server's ready transition (re-marshaling the stale 'processing' body), leaving the draft stuck. Add clause.Locking {Strength:"UPDATE"} (FOR UPDATE on Postgres, no-op on sqlite) to both read-modify-write paths so concurrent writers serialize on the row. L1: PublishDraft set Video.Description twice (struct-literal + redundant if); drop the dead if block. L5: stale finalizeLivestream handler doc comment still described the old client poll+publish flow; update it. build + statedb/vod/spxrpc tests + golangci-lint (0 issues) all clean. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>