PieFed and Mbin take reports from the reporter too

Both speak Lemmy's shapes and joined the servers that get reports in that shape only once the pasture showed each keeps
one with its reason. By their source, PieFed dropped the instance actor's report (it makes a user only of a Person or a
Service) and Mbin kept it without the persona's words (it reads the reason from `summary` alone). With them in
`ServiceReportTakers`, each keeps the reports of a thread and of a comment from "Reports from privapub.test" with
alice's words, and none names her (piefed.sh and mbin.sh, 65 checks with the full sweep's 876). A report of a PieFed
account alone, which PieFed would take from the reporter, is not sent yet; INTEROP says so.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw

docs/INTEROP.md

@@ -630,6 +630,14 @@ What it showed:
     alice's home and her Note becomes a microblog post in it; comments both ways; Mbin's favourite counts as a like and
     its upvote as a boost, alice's like and boost count there; alice's first message and mbuser's answer; a moderator's
     lock, unlock and removal; the unfollow; statistics.
+- **Reports** (owner decision 2026-10-06): both take a report about a post or comment as Lemmy does, so it leaves from
+  the reporter `privapub_reports` (a `Service`), one `Flag` per post, `to` its community
+  (`ReportService.ServiceReportTakers`). The instance actor's report did not serve either, by their source: **PieFed
+  drops a Flag whose actor is an `Application`** (`actor_json_to_model` makes a user only of a Person or a Service), and
+  **Mbin reads the reason from `summary` alone** (`FlagHandler`), so it kept the report without the persona's words.
+  PieFed keeps the first 255 characters of a reason. **Pasture evidence (2026-10-06, `piefed.sh` and `mbin.sh`):** alice's report of a thread
+  and of a comment in it is kept on each, from the reporter, with her words, and no report names her. Not sent yet: a
+  report of a PieFed account alone, which PieFed would take from the reporter (`process_report` on a user).
 - **Gaps:**
   - **P1:** Lemmy's P1 set, W2, and tolerating `source` as a string.
   - **P2:** galleries; post `Move`; `repliesEnabled`; `nsfl`; flairs; publish `likes`/`shares` totals.

docs/ROADMAP.md

@@ -275,7 +275,7 @@ and circles (see Owner decisions).
 |---|---|
 | May a persona join a remote event? | **Yes.** A persona joins and leaves another server's event (`Join`/`Leave`, sent to the event's organiser only). Its participation is public on that server, as on every platform with events. Events that take participants only by invitation or on another site are refused before anything is sent. |
 | A first private message to Lemmy 0.19 or Mbin (G-0008) | **Decide by the server's software.** Lemmy before 1.0 and Mbin take a private message only as a `ChatMessage` and their actors do not say so, so a direct message to one account on a server whose NodeInfo names one of them goes as a `ChatMessage`: the one exception to "a server's software is for display only". |
-| Reports to Lemmy (2026-10-06) | **In Lemmy's shape, for Lemmy only.** Lemmy takes a report only from a person or a service, about one post or comment, addressed to its community, so a report of a post in a community on a server whose NodeInfo names Lemmy leaves from an anonymous `Service`, `privapub_reports`, one `Flag` per post: the second exception to "a server's software is for display only". PieFed and Mbin, which speak Lemmy's shapes, join only once the pasture shows each keeps such a report with its reason; every other server keeps the instance actor's report. |
+| Reports to Lemmy (2026-10-06) | **In Lemmy's shape, for Lemmy only.** Lemmy takes a report only from a person or a service, about one post or comment, addressed to its community, so a report of a post in a community on a server whose NodeInfo names Lemmy leaves from an anonymous `Service`, `privapub_reports`, one `Flag` per post: the second exception to "a server's software is for display only". PieFed and Mbin, which speak Lemmy's shapes, join only once the pasture shows each keeps such a report with its reason (both did the same day; by their source, PieFed drops the instance actor's report and Mbin keeps it without its words); every other server keeps the instance actor's report. |
 | An account a persona follows moves | **Move the follow, as Mastodon does.** After a verified `Move` the persona follows the new account (a Follow to its server) and unfollows the old, in the same lists; a mute or a block of the old account carries over. |
 | Should PrivaPub pass on replies to a persona's posts? | **Yes, "the fediverse is broken without".** A public or unlisted reply that someone on another server writes to a persona's post goes on to the persona's followers, as Mastodon forwards it: the activity as its author signed it, never to the replier's own server, never for a post that is local-only, in a group or not shown to followers. Its edits and deletion follow the same way. |
 
@@ -542,8 +542,8 @@ The first refactor commit is a pure move with namespaces only. Logic changes fol
 - **Blocks and mutes:** per avatar. **Block is not federated**: it sends Reject or Undo Follow instead and drops the
   blocked actor's traffic. Domain blocks per account as well.
 - **Reports:** inbound Flag becomes a `Report`. Outbound Flag is **sent by the instance actor**, or for a post in a
-  Lemmy community by the reporter `privapub_reports` (2026-10-06), so the reporting persona isn't revealed. Moderator
-  endpoints on `/clientapi`.
+  community on Lemmy, PieFed or Mbin by the reporter `privapub_reports` (2026-10-06), so the reporting persona isn't
+  revealed. Moderator endpoints on `/clientapi`.
 - **Locked accounts:** the follow-request flow.
 
 ### P4 Groups and privacy features
@@ -665,8 +665,8 @@ it, raw where it doesn't.
   - the outbound shape Lemmy requires;
   - communities we host announce to the author's own instance too: **done 2026-10-06** (its server's shared inbox,
     whether anyone there follows the community or not: Lemmy keeps its user's post pending until it is announced back);
-  - Flags from a `Service`-typed reporter actor: **done 2026-10-06** for Lemmy (owner decision below; `privapub_reports`,
-    one Flag per post `to` its community, checked live on 1.0 and 0.19).
+  - Flags from a `Service`-typed reporter actor: **done 2026-10-06** for Lemmy, PieFed and Mbin (owner decision below;
+    `privapub_reports`, one Flag per post `to` its community, checked live on Lemmy 1.0 and 0.19, PieFed and Mbin).
 - **GoToSocial interaction policies** (**done 2026-10-05**, `InteractionApprovals`): stored and shown as
   `interaction_policy`; `ReplyRequest`/`LikeRequest`/`AnnounceRequest` where approval is needed; `Accept{result}`
   verified and carried; replies a policy does not let in kept only with an authorization.