Persist populated group deletion

docs/spec/09-distribution-board-components-and-protection-groups.md

@@ -662,9 +662,7 @@ Acceptance:
 
 ### D. Group Numbering and Circuit Moves
 
-Status: In progress. Group renumbering D1 and deterministic circuit-move
-planning and persistent moves D2 plus the deletion snapshot D3a are complete;
-persistent populated deletion D3b remains pending.
+Status: Complete.
 
 - implement nested identifier generation
 - support same-category cross-group circuit moves
@@ -721,6 +719,16 @@ Implemented in D3a:
 - the snapshot derives the confirmation summary for upstream protection, RCD,
   circuit count and device-row count
 
+Implemented in D3b:
+
+- `circuit-group.delete-subtree` requires the exact previously confirmed
+  snapshot and re-captures the full current subtree before deletion
+- `circuit-group.restore-subtree` restores stable UUIDs in foreign-key-safe
+  order, including both protection layers and row link/override metadata
+- deletion and restoration are exact persistent inverses for Undo/Redo
+- stale confirmation state and late history failures leave no partial delete
+  or restore
+
 Acceptance:
 
 - target identifiers use highest suffix plus one