What is a soft delete?

Records are marked deleted, never destroyed — sync and audit stay intact.

A soft delete sets a deletedAt marker instead of removing the record. Normal queries hide it; the tombstone itself is preserved so sync can propagate the delete to every device, and audit trails can recover exactly what existed.

In an offline system, a hard delete can't tell another device 'this is gone' — the record would resurrect on the next sync. Tombstones carry the deletion itself, so every replica converges.

• How it's used