Trust & safety — one screen, one write pathENGINE — moderation (MAV-owned map, 2026-08-09): FG’s T&S Overview converges with Folo’s /admin/trust-safety — one surface, both mount it. Every tile is a read that links the queue where the record lives; per-case actions (freeze · release · ban) work in place (§17e) — the write routes via the subject platform’s admin API (one write path, one audit trail). Fraud-controls tabs adopt Folo’s shape (the fuller implementation); the consolidation tiles adopt FG’s. folo.link answer: this page COMPOSES per-platform queues plus the one cross-platform identity read; actions act here and route to the owning platform — the deep-link into the owning queue is the quiet secondary, never the only path.
Everything that can hurt a person or the platform, on one screen — each tile links the queue that acts on it.
Demo dataPartial
↗Flagged content
8
per-platform: FG vault 6 · Folo mirror 2 · Receipt n/a
DEMO DATA · window: now · source: FG + Folo moderation queues (one engine, per-platform publish state)↗Suspended accounts17
per-platform ladders: FG 11 · Folo 6 · Receipt 0
DEMO DATA · window: now · source: each platform’s account-status store (no blended ladder exists)↗KYC failures22
genuinely cross-platform — one Ondato record per person, valid family-wide
DEMO DATA · window: now · source: identity engine (review surface: FG’s Verification queue)↗NCII takedown—
adapter-gated: waits on the muse-engine consumer
AWAITING SOURCE · named reason, never a fake zeroFraud controlsThe risk engine scores four signal types: velocity (spend/msg bursts), device co-occurrence (one device, many accounts), chargeback-proneness, synthetic identity. Freeze ≠ ban: freeze halts earn + spend pending human review and is reversible; ban is terminal. Owner + write path: both live on the account record of the subject’s platform — the platform tag on each case names whose ladder a decision writes; freeze/ban route via that platform’s admin API and are audited there. §17e: they work in place from this consolidation on every skin — the single write path constrains the write, not the operator; the owning queue stays one quiet deep-link away, never the only path. Effect: freeze halts earn + spend on that platform pending review (reversible, fans see content but cannot pay); ban is terminal on that platform — it goes family-wide only if the identity engine ties the same person to other accounts, and that is a separate, audited decision per platform.
SCOPE · cases are per-platform account records — the platform tag names whose status ladder a freeze/ban writes · WRITE PATH · acts in place on every skin, routed via that platform’s admin API, audited in its log (your grant: super admin) — the owning queue is the quiet secondary
| Case | Subject | Signal | Risk | Status | Action |
|---|---|---|---|---|---|
| TS-4471 | u2260114 · fan · FG | velocity · 41 tips / 6 min | High | Frozen · review | |
| TS-4468 | u2244902 · fan · Folo | device co-occurrence · 4 accounts | Medium | Watching | |
| TS-4462 | @veravoss · creator · FG | chargeback-prone payer cluster | Medium | Watching | |
| TS-4455 | u2291733 · signup · Folo | synthetic identity · doc mismatch | High | Banned | terminal · no action |
Leak tracer
forensic watermark readback
Freeze vs ban · 30d
reversible first — terminal last
Frozen · 23 (18 released)Banned · 9
DEMO DATA · window: 30d · source: account-status audit
→
One write path per record — and it runs from here (§17e). The tiles are reads; per-case freeze / release / ban act in place on every skin and route via the subject platform’s admin API, audited in its log. The owning queue stays a quiet deep-link, never the only path. Demo — no action mutates a real record.