DEFAULT_REMOVAL_WINDOW

How many removal identities are remembered by default.

Unchanged from the all-operations window it replaces, so no consumer's suppression gets worse — but it now holds only removes, so the same memory covers many times the traffic. A miss costs one duplicated operation in the archive, so the number is a space/bytes trade with no correctness edge to fall off.

It is still a default, not a bound that scales. Live tombstones are the minority of an offered log, so a fleet has to be large before this is the binding constraint — but it is bounded by operations, and the frontier is not. Raise it deliberately against the sizing rule on removalWindow rather than assuming it covers a fleet.