[Walter-byte]

Summary

Completes the PPR-2 privacy readiness changes for scoped pilot account lifecycle operations and webhook cleanup.

• Restricts account lifecycle actions to the authenticated tenant/store identity and handles normal soft-deleted members safely.
• Preserves and verifies restoration evidence, and makes account enumeration stable for operational use.
• Constrains WooCommerce privacy webhook cleanup to the intended scope and replay behavior.
• Documents the Redis AOF rewrite thresholds used by the privacy operations configuration.

Validation

Reported by implementation: 27 targeted Jest tests passed; backend typecheck, build, lint, formatting, shell checks, and disposable PostgreSQL 16 backup/restore regressions passed. The environment used Node 26.10 although the project pins Node 24.20. The full suite was not rerun, and live acceptance was not performed.

Operational follow-up

PPR-2 remains active. Account lifecycle and recovery still require isolated production-like validation, including representative WordPress recovery with salt loss and post-deploy AOF evidence. Missing or expired ledger completion proof requires operator reconciliation. Merchant onboarding remains blocked; Phase 7 remains paused.