Abuse reporting is anonymous and safe

When a user can see who reported them, the report becomes a targeting signal for retaliation. CWE-200 (Exposure of Sensitive Information) applies: the reporter's identity is sensitive information that the system must protect. GDPR Art. 5(1)(f) requires data to be handled with appropriate security, including limiting access to only those who need it — in this case, moderators only. Platforms that expose reporter identity see reduced report rates because users fear retaliation, which directly degrades the effectiveness of the entire content moderation system.

Never include reporterId or any reporter-identifying fields in API responses served to non-moderators. In src/app/api/reports/route.ts, strip reporter identity before returning report data to the reported user or any public endpoint:

// Reports visible to moderators include full data
// Reports visible to content authors (e.g., appeal context) strip reporter identity
const sanitized = reports.map(({ reporterId, reporterEmail, ...rest }) => rest);
res.json(sanitized);

Audit all endpoints that return report data: confirm zero endpoints return reporter_id in non-admin contexts. An API that returns reporter_id in any non-admin response does not satisfy this check.