Moderation
Review submissions and remove entries without destroying catalog history.
Moderators and administrators use the native admin queue. Access is controlled by site roles; bootstrap administrators can also be configured by email on the server.
Reviewing a submission
Before approving, verify the image, proposed name, category, and tags. Approval and numeric-ID allocation occur in one database transaction, protected by a database advisory lock so concurrent approvals cannot assign the same ID.
Rejections require a useful explanation. The submission remains available to its author with that explanation.
Removing a head
Removal is a soft delete. The head keeps its numeric ID, texture, taxonomy, actor, timestamp, and reason, but disappears from public catalog responses and plugin snapshots. IDs are never recycled.
Every approval, rejection, and removal creates a moderation event and increments the catalog revision. This gives deployments and clients a single monotonic signal for catalog changes.