Moderation should control visibility, not rewrite history. Keep submitted, published, hidden, rejected, redacted, and author-deleted states distinct. Record who changed visibility and why, then rebuild public aggregates from the currently published evidence. This gives visitors a trustworthy result while analysts and administrators retain the complete operational record.