Decentralized reporting requires the reporter to either be in the management room or `config.acceptInvitesFromSpace`.

Nobody has claimed this yet.

The way room moderator reporting currently seems to work is that the same user is used to relay reports to the management room as is used by Mjolnir to protect rooms. A reporter invites the mjolnir user to a DM in order to send the report, which mjolnir will only accept if the reporter is in the management room or the space specified in `config.acceptInvitesFromSpace`.

For report-to-moderator to work properly, you'd expect that anyone could invite the relay bot, but this can't be allowed when the same user is being used as the protection and relay roles, not only because accepting any invite is an abuse vector, but also because it conflicts with `config.protectAllJoinedRooms`. Anyone would be able to use your Mjolnir to protect their rooms just by inviting it.

Start by tracing the report-to-moderator flow and how invites are handled under config.acceptInvitesFromSpace and config.protectAllJoinedRooms. Review how the protection and relay roles share a user, then define a change that lets reporters reach the relay without allowing arbitrary rooms to use Mjolnir for protection; the issue does not name specific files or tests.

Written by the indexing model from the issue text.