userIds property
Runtime hygiene, not an app-facing event: every live instance of an erased user's space drops that user's in-memory partitions so its shutdown save cannot write back rows the platform sweep just deleted. It runs no app handler, deletes nothing persisted, is idempotent per instance, and is never acknowledged. The erasure work itself is delivered once per space, to one instance.
Implementation
List<String> userIds;