Delete versus revoke

Delete acts on a record: it tombstones a row and removes it from the paths that return it. Revoke acts on a relationship: it withdraws the authority under which everything downstream of that row was produced, and must cascade to indexes, caches, embeddings, summaries, analytics, exports already delivered, and external recipients. The test a product can be put to is to name its derivatives, since a revocation is only as real as the provenance that can find every copy.