Sub-ticket of MARS-374 ADVISORY-ONLY (do not hard-fail push lane): soft-delete-filter static lint - flag FROM/JOIN on a soft-deletable table without deletedAt IS NULL / active-view. Split out of MARS-373 because it's inherently false-positive-heavy (can't statically prove filtering across multi-line/dynamic SQL) and has NO proven source (pluto never shipped one, contrary to an earlier relay). Real soft-delete-leak coverage already exists via auditsolo negative-assertion (seed a deleted row, assert excluded) + the MARS-202 active-view-by-default epic. Only worth building as an added-lines-only advisory heuristic IF the leak class recurs; otherwise MARS-202 is the structural fix. Source: MARS-373 recon 2026-07-02. · mars