Status: IN
Deletion is uniformly cautious across all system types: single-node systems require preconditions before permanent removal (empty buckets, trash-first workflow), and replicated/versioned systems model deletion as metadata rather than physical erasure (tombstones, delete markers) — the codebase provides no path to immediate, unguarded data destruction.
Preconditions guard single-node deletion while metadata models guard distributed deletion, leaving no unprotected path
Depends on (SL): deletion-is-guarded-by-preconditions, deletion-is-metadata-in-replicated-systems