{"id":"deletion-is-doubly-preserved","text":"Data preservation through deletion is enforced by two independent mechanisms: preconditions prevent premature deletion (empty-bucket requirements, trash-first workflows) and the deletion operation itself preserves data (append-only tombstones, delete markers, version entries) — neither alone suffices, but together they guarantee no data is irrecoverably lost through a delete operation at any distribution level.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[{"type":"SL","antecedents":["deletion-is-cautious-at-every-level","deletion-is-append-only-across-all-contexts"],"outlist":[],"label":"Guards prevent accidental deletion while append-only semantics prevent intentional deletion from destroying data — independent mechanisms, joint guarantee"}],"dependents":["deletion-reinforces-monotonic-state"],"metadata":{"last_reviewed":"2026-06-06T06:26:57","review_result":"pass"},"created_at":"","updated_at":"","reviewed_at":"","verified_at":"","retracted_at":"","explanation":{"steps":[{"node":"deletion-is-doubly-preserved","truth_value":"IN","reason":"SL justification valid","antecedents":["deletion-is-cautious-at-every-level","deletion-is-append-only-across-all-contexts"],"label":"Guards prevent accidental deletion while append-only semantics prevent intentional deletion from destroying data — independent mechanisms, joint guarantee"},{"node":"deletion-is-cautious-at-every-level","truth_value":"IN","reason":"SL justification valid","antecedents":["deletion-is-guarded-by-preconditions","deletion-is-metadata-in-replicated-systems"],"label":"Preconditions guard single-node deletion while metadata models guard distributed deletion, leaving no unprotected path"},{"node":"deletion-is-guarded-by-preconditions","truth_value":"IN","reason":"SL justification valid","antecedents":["s3-bucket-delete-requires-empty","email-service-two-phase-delete"],"label":"Both systems gate permanent deletion behind a prior state transition, making accidental data loss a two-mistake problem"},{"node":"s3-bucket-delete-requires-empty","truth_value":"IN","reason":"premise"},{"node":"email-service-two-phase-delete","truth_value":"IN","reason":"premise"},{"node":"deletion-is-metadata-in-replicated-systems","truth_value":"IN","reason":"SL justification valid","antecedents":["soft-delete-prevents-distributed-resurrection","append-only-versioning-makes-restore-non-destructive"],"label":"both depth-1 conclusions independently arrive at the same principle — never physically destroy data — but for complementary reasons (anti-resurrection vs non-destructive restore); combined they show this is a fundamental constraint of any system that replicates or versions state"},{"node":"soft-delete-prevents-distributed-resurrection","truth_value":"IN","reason":"SL justification valid","antecedents":["kv-store-deletes-use-tombstones","s3-delete-marker-hides-not-removes"],"label":"Both systems independently arrived at write-over-delete to prevent resurrection from unsynchronized replicas"},{"node":"kv-store-deletes-use-tombstones","truth_value":"IN","reason":"premise"},{"node":"s3-delete-marker-hides-not-removes","truth_value":"IN","reason":"premise"},{"node":"append-only-versioning-makes-restore-non-destructive","truth_value":"IN","reason":"SL justification valid","antecedents":["s3-version-list-append-only","gdrive-restore-creates-new-version"],"label":"Append-only version lists make restore a forward operation, not a rollback"},{"node":"s3-version-list-append-only","truth_value":"IN","reason":"premise"},{"node":"gdrive-restore-creates-new-version","truth_value":"IN","reason":"premise"},{"node":"deletion-is-append-only-across-all-contexts","truth_value":"IN","reason":"SL justification valid","antecedents":["deletion-strategy-scales-with-distribution","append-only-semantics-span-storage-and-streaming"],"label":"Deletion scales with distribution (depth-3, covering single/distributed) and append-only spans storage/streaming (depth-2) — combining shows append-only is the universal mutation model"},{"node":"deletion-strategy-scales-with-distribution","truth_value":"IN","reason":"SL justification valid","antecedents":["soft-delete-is-dual-purpose","kv-anti-entropy-covers-writes-and-deletes"],"label":"Soft delete for structure preservation and tombstones for distributed convergence are complementary layers that compose"},{"node":"soft-delete-is-dual-purpose","truth_value":"IN","reason":"SL justification valid","antecedents":["soft-delete-preserves-structural-invariants","soft-delete-prevents-distributed-resurrection"],"label":"Both depth-1 soft-delete conclusions identify different motivations (structural invariants vs. resurrection prevention) for the same technique, revealing dual utility"},{"node":"soft-delete-preserves-structural-invariants","truth_value":"IN","reason":"SL justification valid","antecedents":["chat-soft-delete-preserves-sequence","autocomplete-delete-is-soft"],"label":"chat keeps deleted messages with `[deleted]` content to preserve sequence numbering; autocomplete zeroes frequency without removing trie nodes to preserve tree structure — both are single-node structural concerns distinct from distributed anti-resurrection"},{"node":"chat-soft-delete-preserves-sequence","truth_value":"IN","reason":"premise"},{"node":"autocomplete-delete-is-soft","truth_value":"IN","reason":"premise"},{"node":"kv-anti-entropy-covers-writes-and-deletes","truth_value":"IN","reason":"SL justification valid","antecedents":["kv-read-path-is-self-healing","soft-delete-prevents-distributed-resurrection"],"label":"without read repair, write divergence persists; without tombstones, deletes get resurrected — both mechanisms are independently necessary for full convergence"},{"node":"kv-read-path-is-self-healing","truth_value":"IN","reason":"SL justification valid","antecedents":["kv-read-repair-on-get","kv-node-stores-sibling-versions"],"label":"Read repair + sibling detection make the read path an active consistency mechanism, not just a query"},{"node":"kv-read-repair-on-get","truth_value":"IN","reason":"premise"},{"node":"kv-node-stores-sibling-versions","truth_value":"IN","reason":"premise"},{"node":"append-only-semantics-span-storage-and-streaming","truth_value":"IN","reason":"SL justification valid","antecedents":["append-only-versioning-makes-restore-non-destructive","watermark-finalization-is-irreversible"],"label":"Storage and streaming independently converge on append-only/no-retraction semantics for the same underlying reason: preventing historical revision"},{"node":"watermark-finalization-is-irreversible","truth_value":"IN","reason":"SL justification valid","antecedents":["watermark-drives-finalization","window-lifecycle-one-directional","no-window-merging-or-retraction"],"label":"Three properties compose into hard irreversibility: watermark-only trigger + one-way lifecycle + no retraction"},{"node":"watermark-drives-finalization","truth_value":"IN","reason":"premise"},{"node":"window-lifecycle-one-directional","truth_value":"IN","reason":"premise"},{"node":"no-window-merging-or-retraction","truth_value":"IN","reason":"premise"}]}}