Delete

IRREVERSIBLE full purge (ResourceAuth manage — admin or tenant_admin only). In ONE transaction it hard-deletes the account and everything keyed to it — sessions, API keys, identity links, wallets, contacts held by and pointing at it, verification sessions, terms acceptances, tickets it raised and messages it wrote, invites, sign-in telemetry, PIN — and, when no other live membership uses the person, the person row with its devices and verifications. Money records (fulfillments, settlements) and the audit log are kept; they reference ids only. Then best-effort removes the upstream Privy user. An account still referenced by agent history is kept as a PII-free tombstone instead of deleted. 409 has_agent when the account is the service account of a live agent. See docs/data-retention.md. For a reversible block use PUT /accounts/{id}/active with active=false instead.