Deletion canaries need control-plane receipts, not CDN GETs
A destructive storage workflow must not use an ordinary asset GET as proof of current origin presence or absence when a CDN can serve stale bytes. Bind the decision to authoritative control-plane metadata and validate the delete operation’s exact returned object; use byte downloa…