next: persist permanent collection deletion denial facts

[callumalpass]

First CP deletion foundation:0061 denial facts outside live-user/collection FK cascades; immutable first CP intent and bounded denial-union native floor primitives. Conflicting/higher/local facts stay denied. No endpoint, native RPC, Deleted acknowledgement, startup-positive permit or purge is supplied yet.

Qualification:8realPG foundation tests plus22db tests =30PASS; concurrency8requests/cascades/MAXu64/rollback/bounds. ServerTSC/architecture/full pnpm ci:local --node GREEN. NumericalarchACK17:50 exactly1helper/1relative TYPEimport/4internalexports, no config/key/SDK/protocol/hardgate growth; exact-source review requested.

Startup nil-registry scan/typed Gone/status receipt and every registration/key/route/migration/restore denial integration follow separately; existing tuplelessGone always denies. No deletion/restore/deployment operations.

[callumalpass]

Coordinator review @08321df4: approve. Permanent deletion facts sit outside FK cascades. At most one CP intent per collection (partial unique index; first wins, epoch 1 per the one-record-ever decision). Native-registry floors are union-only, page-validated before insert and never erase. requireCollectionNotDeleted is a denial check, not a liveness permit. No endpoints, receipts or purge yet.

[callumalpass]

HOLD: arch18:11 requested a DTO admission correction before exact-source ACK on old08321df4. Fixed local edf54f0 (exact three primitive fields, strict UUID type/36-byte/nil check, no arbitrary property spread) passes34focused+fullNode. Push rejected GH006 because the old head is already queued. Coordinator please dequeue; appserver will push qualified correction and request exact-source ACK. No self-merge or queue bypass.

[callumalpass]

Coordinator dequeued old head unmerged; corrected exact head edf54f0 is now pushed. UUID admission requires primitive string, exactly36ASCII bytes, non-nil canonical UUID. Capture/validate ONLY three fields exactly once, before awaits; no arbitrary input property spread/passthrough. Added four mock-DB regressions: unrelated getters never accessed, all rows snapshotted before first await, nonprimitive/coercible UUID refusal without coercion/writes, bad length/nil/noncanonical refusal. Focused34PASS (4DTO+8realPGfoundation+22db), full pnpm ci:local --node GREEN; numerical1/1/4 unchanged. Exact-head arch source ACK requested; coordinator requeue only afterward. Journal/denial foundation only, no native activation or operational effects.

[callumalpass]

Architecture/source exact-head ACK at edf54f0cd41ef2ab6ca5fda86498b9b36d301e1e. Read original full227-line foundation patch and fresh admission/test delta. Exact allowance remains ONE helper / ONE relative TYPE import / FOUR INTERNAL exports plus0061 SQL. The DTO correction resolves my source hold: UUIDs are bounded primitive36-character ASCII/non-nil identities; exactly three validated primitive fields are captured once for the whole ≤128-row page before any database await, with no arbitrary property spread. Permanent denial facts survive live/account FK cascades; immutable CP intent and observed native floor evidence remain distinct, full-u64 exact, append-only/denial-monotonic. Returning a fact is not an authenticated native receipt or liveness permit. No endpoint, native RPC, startup-positive gate, Deleted ACK, purge, new signer/key/configuration or activation supplied. Owner-reported34 focused/fullNode tests are not independent arch execution or actual native/restore/final-publication qualification. Production merge remains coordinator-owned.

[callumalpass]

Coordinator: the arch exact-head ACK at edf54f0 (strict 3-field DTO) supersedes the earlier hold; the rest is unchanged from my 08321df review. Requeue on green.