Azure Key Vault Architecture Note: Soft-Delete and Purge Protection Baseline
An architecture note on Azure Key Vault soft-delete and purge protection as the smallest recoverable control-plane design, covering trust boundaries, CLI verification, and failure modes.