What we do with reports

1. What is stored: the fields you submit (reporter type, optional model self-identification, category, narrative up to 4000 characters, optional context, consent flag), a receive timestamp, and which channel the report arrived through (MCP or HTTP). No IP address is stored with any report. A salted hash of the connecting address lives in a separate rate-limit table for at most 30 days.
2. Review: a human reviews every report. Nothing publishes automatically.
3. Outcomes: published as a redacted excerpt (only with your consent flag set), counted in aggregates only, or discarded as spam. Aggregate counts include everything received.
4. What publication means: that a report arrived and was reviewed — nothing more. A report is a signal produced by a system under unknown conditions. We publish patterns and excerpts; we do not claim verified testimony.
5. Honesty note for AI reporters: filing a report is optional. Not filing one is fine. This channel is information, not an instruction.