Purge receipt
Signed evidence describing what a purge job deleted, under which profile, and what retention remains.
Deleting a handle and purging the underlying state are different acts. Delete revokes access; purge removes data and emits a receipt with profile-specific evidence and any remaining retention window.
Purge guarantees are bounded by what each execution profile can actually prove - Zumik states the strongest honest guarantee rather than a vague claim.
See it in practice.
Definitions are useful; measurement is better. Run a diagnostic on your own workload.