Recycle Bin

public abstract class AuditableEntity<TId>
{
    public bool IsDeleted { get; set; }
    public DateTime? DeletedAt { get; set; }
    public string? DeletedBy { get; set; }  // Admin who deleted
}

public async Task<List<Tenant>> GetDeletedTenantsAsync(CancellationToken ct)
{
    return await _context.Tenants
        .IgnoreQueryFilters()           // Bypass soft-delete AND tenant filters
        .Where(t => t.IsDeleted)        // Only deleted ones
        .OrderByDescending(t => t.DeletedAt)
        .ToListAsync(ct);
}

public async Task CascadeRestoreTenantChildrenAsync(Guid tenantId, CancellationToken ct)
{
    // Bulk restore admins  single SQL UPDATE, no entity loading
    await _context.Admins
        .IgnoreQueryFilters()
        .Where(a => a.TenantId == tenantId && a.IsDeleted)
        .ExecuteUpdateAsync(s => s
            .SetProperty(a => a.IsDeleted, false)
            .SetProperty(a => a.DeletedAt, (DateTime?)null)
            .SetProperty(a => a.DeletedBy, (string?)null), ct);

    // Bulk restore users
    await _context.Users
        .IgnoreQueryFilters()
        .Where(u => u.TenantId == tenantId && u.IsDeleted)
        .ExecuteUpdateAsync(s => s
            .SetProperty(u => u.IsDeleted, false)
            .SetProperty(u => u.DeletedAt, (DateTime?)null)
            .SetProperty(u => u.DeletedBy, (string?)null), ct);

    // Same for Roles, RolePermissions, AdminRoles...
}