Every action, with who took it and why. Published by default rather than on request. There is no shadow moderation here and no secret action — and because the log is append-only, it is provable that nothing was quietly removed.
Tombstoning hides a post's body from display. Its leaf stays in the tree and still verifies — removing it would invalidate every checkpoint published before, including ones other people hold. See the rules.