[Minor note on last idea, since it got boosted: the system would to need either distinguish originating from federated mod decisions, or employ some other mechanism to prevent graph cycles and thus feedback loops where a since mod decision achieves an arbitrarily high level of trust by circulating. Solvable. Just not a completely obvious idea; needs a little thought.]