What problem does it solve? Destructive sweeps, purges, and cleanup scripts can permanently delete live data when they rely on deny-lists or stale safety signals. This Skill prevents unrecoverable data loss by forcing every deletion to be positively justified and every safety signal to be refreshed on real use. ## Core Features & Use Cases - Allow-list enforcement: Enumerate exactly what to DELETE using positively validated canonical identifiers, never what to skip, so unknown shapes survive by default. - Safety signal discipline: Require the liveness signal to be touched on every successful operation, closing the race where an actively resuming upload ages out mid-use. - Pre-run checklist: Canonicalize identifiers, take backups in the same breath as the delete, check for other live processes, and prefer reversible moves like quarantine directories or backup refs. - Use Case: When writing a retention sweep for aged upload directories, apply this Skill so only directories whose names are canonical 32-hex upload ids are deleted, while malformed names, partitions, and in-progress uploads all survive. ## Quick Start Review my cleanup script with the destructive-sweeps-lean-to-keep skill before I run it against the uploads directory.