Expected DELETE facts are assertions only.

highlighted = computed this step

Honest by construction

Expected DELETE facts are assertions only.

compiler is source of truth\text{compiler is source of truth}

Render checked facts

The guarded DELETE removes 1 row and keeps 3 rows.

removed=1\text{removed}=1

DELETE examples are tiny finite row removals; SQL dialect completeness, joins in DELETE, subqueries, triggers, constraints, transactions, locks, indexes, optimizer behavior, performance, and product behavior are out of scope.

Honest by construction: base rowsidownerstatuspoints1Adaopen102Benopen203Cydone154DeeNULL5 WHERE chooses rowssourcevaluecompareTotruthremoved012FALSEno122TRUEyes232FALSEno342FALSEno Rows removedsourcerowreason1(2, Ben, open, 20)WHERE_TRUE Rows after DELETEidownerstatuspoints1Adaopen103Cydone154DeeNULL5 DELETE factsfactvaluebaseRowCount4removedRowCount1keptRowCount3finalRowCount3whereUnknownCount0deleteStatusremoved_rowswhereKindeq

Try to tamper

Wrong expected facts, derived sidecars, unsupported WHERE kinds, missing columns, bools, and floats fail closed.

tamper rejected\text{tamper rejected}

Summary

This book shows exact finite DELETE behavior only.

scoped DELETE model\text{scoped DELETE model}