Physical deletion with declared dependency protection

Context

Configuration can remain useful to existing financial records after it stops being offered for new work. Availability and deletion therefore serve different purposes.

The cited product choice establishes unit deletion and its owned cascade. Applying physical deletion and restricting references across the other configuration collections is observed implementation, so this broader design remains proposed.

Decision

Eligible records are physically deleted. Declared restricting references prevent removal and recognized constraints produce a readable refusal; owned collections cascade. Payment methods provide no ordinary deletion operation.

Alternatives Considered

Archive instead of deleting. The existing active flag already retains unavailable records. A separate archive state would need a distinct product purpose.

Delete every dependent by cascade. That proposed alternative could remove financial records and independently maintained setup.

Check dependencies only before the delete. A reference created after a preliminary check would race with deletion; restricting keys guard the actual write.

Consequences

Staff can deactivate records that remain in use.

Unrecognized constraints can produce an untranslated error; installment references to payment terms exhibit this gap.

Bulk deletion performs individual requests and can leave some selected records deleted and others retained.