Content can be deleted or hidden by moderators

Storing a deletion flag that is never checked in the read path is a false sense of control — under DSA Art. 16 and CWE-284, content removal must actually prevent the content from being visible to users. Platforms where deleted=true content still appears in public feeds, search results, or API responses give bad actors exactly what they want: their content stays up regardless of moderation actions. Soft-delete patterns that skip the WHERE clause in even one public query defeat the entire enforcement model.

Implement a deleted_at soft-delete column and enforce its exclusion in every public-facing query. In src/lib/queries.ts:

export async function getPublicPosts() {
  return db.posts.findMany({
    where: {
      deletedAt: null,
      status: { not: 'removed' },
    },
    orderBy: { createdAt: 'desc' },
  });
}

Audit every query in the codebase that reads posts, comments, or messages — confirm each includes deletedAt: null in its WHERE clause. Removed content may be retained in the database for records (moderation log, appeals), but must never surface in any public API response or UI render path.