Three review rounds found the same family of race: the delete decided
what to remove across many awaits while the library stayed editable.
Now it decides and calls deleteAll on both boxes with nothing awaited
in between (Hive drops the records from the library as it is called),
then removes files and pins of what went.