Destructive

Model of record: ADR 0029 (strict omission). A madtea surface never carries an operation that can destroy unrecoverable work or data; destruction is offered only when madtea can machine-prove nothing is lost (content-verified prune, force-with-lease push, merged-only branch delete). The irreversible forge-data deletes (repository, issue, release, tag, wiki page) are omitted from both the MCP tools and the CLI: each delete subcommand remains discoverable but refuses, naming the forge web UI. Use the forge web UI (or raw git) for a genuine hard delete.