The requirement I would add is: never silently replace a failed capture with a different screen. Reconnecting a monitor should not accidentally put a private window on the stream. My preferred recovery sequence would be a safe holding scene, a source reset, a check that the intended source is back, then an alert if it still fails. Also, an unchanged picture alone is a poor failure detector: sometimes the slide really is that boring.