Status: IN
`merge_sstables()` accepts a `remove_tombstones` boolean from the caller rather than computing safety from level metadata, so correctness depends entirely on the caller passing the right value
Source: entries/2026/05/29/topic-leveled-compaction-tombstone-policy.md