What it does
Combine compatible cleanup actions into one bounded job.
Preview every affected record before anything changes.
Require team approval for protected replacement workflows.
Encrypt original values, verify writes, and support guarded rollback.