Receive reports
Mastodon (and others?) will send a Flag activity addressed to the reported Account from an Actor of type Application (so it's anonymous, but you know the reporters' instance).
The reported account shouldn't be responsible of self-moderating, so these activities should be redirected somewhere else (and invisible to the reported account).