[pushpsood]

Summary

Adds §5 Reporting & Safety (anchor /privacy#reporting-safety) and renumbers the following sections.

• What §5 covers:
  • what a report contains;
  • the optional chat copy: never pre-ticked, last 200 messages or 30 days of one conversation, text only, preview, encrypted, integrity fingerprint;
  • who can see it: a separate evidence permission, and every view is logged;
  • automated prioritisation, which only orders the queue, including the pseudonymous reporter-reliability measure;
  • possible outcomes, the two-person ban rule, appeals, and account standing;
  • self-harm support (Tele-MANAS 14416) and suspected minors;
  • retention: chat copy 180 days after close, case record 365 days after close, reliability measure one year after it last changed;
  • the legal basis and law-enforcement sharing.
• §4 Admissions Assist now discloses the conduct outcomes from a member's first 90 days (blocked by several members; report upheld). It uses labels only, never content.
• §7 and §9 gain the matching sharing and retention lines.

Verification

Every claim was fact-checked against the merged code: backend PR #19, portal PRs #28, #29 and #30, apps PR #12 and web PR #13. Two gaps found by the fact-check were fixed in code first, so the text is true:

• case-record retention is now enforced (portal #30);
• media evidence is disabled server-side.

Lint and build pass.

Before merging (owner and legal)

• Legal sign-off on this text.
• CSAM: the policy says nothing about preserving and reporting child sexual abuse material. Per docs/MODERATION.md §9 this needs legal input before launch.
• Release timing: merge together with the app release that ships the report flow (apps PR Messenger play-once story; Science chapter drum and overview #12, web PR feat(moderation): member report flow with optional decrypted-chat evidence (web) #13), and deploy the web build after the portal pipelines are approved.

[pushpsood]

Legal sign-off received from the owner (2026-10-27). Merging. GitHub Actions is not running jobs (billing); lint and build were verified locally.