The pre-recovery code sometimes appears to jump the gun and pre-recover when it shouldn't be (example). A fairly simple failsafe of reassigning the kerbals if the source vessel isn't confirmed destroyed within 5 to 10 seconds should at least prevent false positives from wrecking a save.
