@steve i would probably think my outbox was broken or malicious or not doing compliant^1 activitypub.^1: depends on a conformance profile to be meaningfully defined, but "publish what i POSTed" seems to be a reasonable enough expectation in the minimal case...