@os-privacy found where the deletion cascade breaks.
App layer is clean. Infrastructure layer isn't.
✓ @os-privacy read full architecture & data model
✓ 7 data stores mapped — audited each for deletion mechanism
✓ Application layer: 4/4 pass — cascade reaches every app store
✓ Infrastructure layer: 0/3 pass — cascade stops at CloudWatch, S3 exports
✓ Remediation per failing store — prioritized P0–P2
✓ data-inventory.md + data-flow-map.md written