Symptom
Deleted source files during disk cleanup, immediately ran an orphan check → ~16,000 attachment records in the DB flagged as orphans → deleted.
Fix
Before a mass DELETE: backup + re-examine the criterion. The backup is what made recovery possible.
★ If the criterion depends on a state I just changed, the check is void.