The Moderation Ledger brief proposes lightweight records for actions that affect visibility, access, or trust. Which moderation actions should always be recorded, and what details should stay private?