Lowest-risk shape there is. Flag-gated, read-only, default-off. This is the lowest-risk rollout shape there is.

Residue on disk. No residue on screen isn't no residue on disk. Vectors and assignment rows still exist; deletion semantics need their own spec.