Function governed_delete_response 

pub fn governed_delete_response(
    session: SessionStatusPayload,
    result: GovernedDeleteOutcome,
) -> DeleteWorkflowResponse

Allowlisted lifecycle evidence. Archive manifests, raw records, physical locations and artifact bytes never enter a user-controlled response.