Module moderation 

Moderation authority: who may remove whose message (CORD-04 §3/§5).

One algebra for both protocols. The wire differs — v1 proves its owner with a signed attestation, v2’s identity self-certifies against the community id — so the owner lookup branches and everything downstream does not.

Functions

can_hide

May actor_hex remove a message authored by author_hex? The actor needs MANAGE_MESSAGES and a strict outrank; the owner is supreme and is never a valid target, so owner-protection falls out of the algebra with no carve-out.

can_hide_in

can_hide with the owner and roster resolved from the store. Callers judging a whole page should resolve those once and call can_hide instead.

owner_hex

The community’s proven owner as lowercase hex, whichever protocol it speaks.