Private broadcasts end like recordings: Enter keeps, Escape deletes (KeepBroadcastDialog). Privacy read from YouTube; delete = videos.delete (fallback liveBroadcasts.delete on 404). Refs: https://developers.google.com/youtube/v3/docs/videos/delete https://developers.google.com/youtube/v3/live/docs/liveBroadcasts/delete (Unit: private broadcast close-out)

ai.md

@@ -982,6 +982,15 @@ lights when a session is actually running.
   survives the rename, and without it two instances started in the same minute compute the *same* start
   path and both ffmpeg processes write one file — which is exactly the dev multi-instance case
   (`Helpers/InstanceProfile`, one instance recording the other).
+- **Private broadcasts end the same way (creator ruling 2026-10-09).** After `StopStream`'s
+  transition(complete), `OfferToKeepPrivateBroadcastAsync` reads the broadcast's privacy **from YouTube**
+  (`GetBroadcastPrivacyAsync` — visibility can change mid-stream, local state isn't trusted) and, only if
+  it is `private`, shows `KeepBroadcastDialog` (repo root): **Enter = Keep** (`IsDefault`), **Escape /
+  Delete / the X = delete** via `DeleteFinishedBroadcastAsync` — `videos.delete?id=<broadcastId>` (a live
+  broadcast's id IS its video id; 204), falling back to `liveBroadcasts.delete` on 404. An unreadable
+  status asks nothing and deletes nothing; a failed delete toasts that the video is still on YouTube.
+  Decision logic = `MainViewModel.ClosePrivateBroadcastAsync` (internal static, tested in
+  `PrivateBroadcastCloseOutTests`); `KeepBroadcastPromptOverride` is the dialog seam.
 - **Save dialog: Cancel DISCARDS (creator ruling 2026-09-26).** The `RenameRecordingDialog` result is a
   two-outcome decision, and it lives in the extracted `MainViewModel.CompleteRecordingSave(startPath, dir,
   autoStem, chosenStem, creatorSaved)` (internal, so `ytLive.Tests` can drive it against real files without