Community guidelines and moderation

New posts and comments are held for review before they appear publicly. This is not a quality filter — it is a safety one.

Why moderation is on

The boards are public and hosted by a third party. Holding posts and comments is the only control that keeps two specific things from becoming public the moment someone hits submit:

• an accidentally disclosed security vulnerability
• pasted repository content — file paths, diffs, tokens, keys, or another person's data

Moderation stays on until general availability. It costs you a wait; it prevents a disclosure that cannot be undone. It is also the one part of the weekly routine that is never postponed, however far behind everything else has fallen.

What gets removed

• Anything that may describe a security issue. It is taken down without a public reply, and the author is contacted privately by email with the disclosure route — never as a comment on the post, because a comment would point at the thing being removed.
• Pasted repository or customer content. The same treatment, for the same reason.
• Abuse, harassment, or conduct that breaches the project's code of conduct. Participation in the portal is governed by the same code of conduct as every other TOVIO space. Conduct concerns go to conduct@tovio.dev, not to a public board.

Removal for the first two is never a judgement on you. Accidental disclosure is common, and the procedure exists precisely because it is easy to do.

What removal actually involves

If something sensitive did become visible before it was caught, it is hidden and then deleted, the window during which it was visible is recorded, and the hosting vendor is asked to delete the content on their side. The content is never re-pasted into any field on the portal — not into a reply, not onto the project's internal board — because that would recreate the problem somewhere else.

What does not get removed

Criticism. A post saying TOVIO is slow, confusing, or wrong about something stays up and gets an answer. If a critical post disappeared, it hit one of the rules above — ask, and you will get a straight explanation.

Duplicates

Near-identical posts are merged rather than deleted, so the votes and the notifications land in one place. You are notified on the surviving post.