Reported listings move to suspended status, not hard-deleted

Hard-deleting reported listings destroys the evidence needed to investigate abuse patterns, respond to legal holds, and meet GDPR Art. 17 obligations (which require a deliberate erasure decision, not automatic deletion on report). CWE-778 (Insufficient Logging) applies: if the record is gone, you cannot determine whether the report was legitimate, who submitted the listing, or whether the reporter is gaming the system to suppress competitors.

Move reported listings to a 'suspended' status rather than deleting them. Keep the row and the report record intact for moderator review:

// app/api/listings/[id]/report/route.ts
await db.$transaction([
  db.listingReports.create({
    data: { listing_id: listingId, reason, details, reported_by: req.auth?.userId ?? 'anonymous' }
  }),
  db.listings.update({
    where: { id: listingId },
    data: { status: 'suspended' }
  })
])

return Response.json({ message: 'Report received. Listing hidden pending review.' })

In the admin moderation queue, show suspended listings alongside their reports. Moderators should have three options: reinstate (set status = 'approved'), permanently reject (status = 'rejected'), or escalate for legal review — never auto-delete on report submission.