49. Moderation, complaints, enforcement, and appeals

Vehicle-native social accounts create new moderation surfaces: posts can be generated from telemetry, owners and fans can interact with a vehicle persona, spotting can expose location, sponsorship can influence a voice, and live auctions can turn content into economic action. Moderation therefore needs attributable casework, exact targets, reversible projections, emergency handling, and appeals.

#49.1 Reports and complaints

ModerationReport records optional reporter, subjects, content or interaction references, category codes, evidence, urgency, safety/privacy flags, requested outcome, and receive time. Anonymous or confidential reporting is supported without converting an allegation into fact.

#49.2 Triage and evidence preservation

Triage classifies immediate safety, youth, harassment, privacy, fraud, rights, market, security, and physical-risk signals. Original content bytes and relevant projection context are preserved under access-controlled evidence policy before labels or visibility change. Preservation does not authorize continued public display or unrelated reuse.

#49.3 Moderation decisions

ModerationDecision binds case, decider, reviewer type, policy lock, evidence-set digest, exact target selectors, outcome, reason codes, effective time, expiry, notice, and appeal policy. Outcomes include NO_ACTION, LABEL, VISIBILITY_LIMIT, INTERACTION_LIMIT, CONTENT_RESTRICT, ACCOUNT_RESTRICT, PROFILE_FREEZE, MARKET_HALT, and EXTERNAL_REFERRAL.

A model score, volume of reports, follower count, owner status, or sponsor relationship MUST NOT impose a permanent high-impact action without the review required by policy.

#49.4 Temporary emergency restrictions

EmergencyRestriction requires exact targets, immediate-risk reasons, issuer, imposition time, automatic expiry, and mandatory review deadline. It MUST expire unless replaced by a reviewed decision. Emergency restriction does not authorize deletion of canonical history or expansion into unrelated assets, principals, tenants, or tools.

#49.5 Notice, explanation, and appeal

Notices expose enough reason and scope to permit meaningful challenge while protecting reporters, victims, minors, security controls, and integrity signals. Appeals use the common case runtime, pinned review rules, independent assignment where required, and explicit stay behavior.

#49.6 Restoration, correction, and transparency projections

Restoration appends a new decision and reverses or replaces the projection effect. Corrected labels, restored content, refunded fees, lifted restrictions, and reinstated eligibility have separate receipts. Aggregate transparency reports use privacy-safe counts and MUST NOT leak small cohorts, reporters, protected users, or detector features.