destructive-confirm

One confirm, three strengths, scaled to how hard the action is to undo (confirm-sheet board, mobile and web):

• Soft — delete a document, remove an approved sender, cancel a pending invite: one confirm, restorable from Trash for 30 days.
• Hard — leave the household, revoke a CA share, cancel a subscription: a "you keep / you lose" pair of lists, one confirm.
• Permanent — dissolve the household, delete the account: type the literal phrase to confirm; no Enter or Esc path confirms.
• Cancel sits left, the destructive action right, always. Back or a tap outside closes.