Posted: the seal, and unposting — What is refused

Edits to any field, from any direction — including the paths people forget are write paths: imports that would update matching rows, automations whose step targets a sealed record (the run log says so plainly), and API writes. Subitem changes beneath it count as edits. And a posted record cannot be deleted: the seal outranks the bin — unpost first, then delete if you must.