@unarist I disagree - I think exposing the real reporter is much worse (remote admin could be hostile). Since all remote reports will come from one user per server, I don't think admins will be misguided into believing that that actual user sent it.
Ideal solution would be introduction of a special actor with type: "Application" to represent the server itself. But I don't have the patience to do that right now...
@Gargron oh...then, it should be filtered with admin: true specifically. It's not clear from the query, and of course, not guaranteed.
Anyway, I don't think good that any user can send reports behalf of any other users, nor admins or the instance itself. Since nobody reviews the report before send to remote, so it should be done with their name and their responsibility, I think.
フラスタの絵です!!!
Actually some of these characters weren't included on the flower stand, because they don't have singers, but I drew them anyway
https://kirakiratter.com/media/Y9UCcrLQ-YFONF3CWWk