- Type: Security - Affected area: users service and controller - BackendAcademy - Summary: Deleted user IDs can still be written to process-local preference state. - Acceptance criteria: All user mutations reject deleted accounts; deletion is idempotent; tests verify no data reappears.