One erasure request across six copies
One erasure, six copies, six weapons
each copy names its mechanism and its evidence, a copy with no weapon is the finding
record: direct delete
cache: purge keys
index: purge + rebuild
log: tombstone
backup
train
log lane: append delete-user-X, compact segments without the user
or shred the per-user key: instant unreadability, no rewrite
backup lane: expire by retention, restores replay through tombstones
a backup older than retention is destroyed, never replayed
training lane: exclude at next retrain, document the lag honestly
dotted lane: the offline consumer, fenced by the deletion watermark
no serving until caught past the watermark, missed keys already destroyed so reads fail closed
resurrection guards: watermark for stragglers, tombstoned restore for backups
legend: purple/blue = easy copies, yellow = the hard log, green/pink = slow copies, dashed = the fenced straggler
deadlines needing a lawyer are named uncertain, never quoted as law