diff --git a/web/src/lib/api/moderationLabels.ts b/web/src/lib/api/moderationLabels.ts
index fb6cd0925..f51aa733d 100644
--- a/web/src/lib/api/moderationLabels.ts
+++ b/web/src/lib/api/moderationLabels.ts
@@ -5,16 +5,22 @@ import {
 	type Did,
 	type Nsid
 } from "@atcute/lexicons/syntax";
+import type { BobbinContext } from "$lib/api/client";
 import {
+	enrich,
 	labelsOf,
 	target,
 	TYPE_LABELS,
+	type Enriched,
 	type Label,
 	type LabelsDescriptor,
 	type RecordPath,
 	type Sidecar
 } from "$lib/api/enrich";
 import { PROFILE_COLLECTION } from "$lib/api/profile";
+import type { ProfileRecord, RecordView } from "$lib/api/records";
+
+export type LabeledProfile = Enriched<RecordView<ProfileRecord>>;
 
 const SEVERITY = ["hide", "warn"] as const;
 
@@ -86,3 +92,19 @@ export const subjectModeration = (
 		accountModerationOf(data, subject.author),
 		recordModerationOf(data, collection, subject.uri)
 	);
+
+export const getLabeledProfile = (ctx: BobbinContext, did: string): Promise<LabeledProfile> =>
+	enrich<RecordView<ProfileRecord>>(ctx, {
+		xrpc: "sh.tangled.actor.getProfile",
+		params: { actor: `at://${did}/${PROFILE_COLLECTION}/self` },
+		enrich: [target(PROFILE_MODERATION, ["uri"])]
+	});
+
+export const profileModeration = (
+	account?: Moderation,
+	profile?: LabeledProfile
+): Moderation | undefined =>
+	strongestModeration(
+		account,
+		profile && recordModerationOf(profile.data, PROFILE_COLLECTION, profile.output.uri)
+	);
diff --git a/web/src/lib/components/profile/ProfileChrome.stories.svelte b/web/src/lib/components/profile/ProfileChrome.stories.svelte
index 6ace610cf..b6833e694 100644
--- a/web/src/lib/components/profile/ProfileChrome.stories.svelte
+++ b/web/src/lib/components/profile/ProfileChrome.stories.svelte
@@ -1,6 +1,7 @@
 <script module lang="ts">
 	import { defineMeta, type StoryContext } from "@storybook/addon-svelte-csf";
 	import { expect } from "storybook/test";
+	import type { CanonicalResourceUri } from "@atcute/lexicons/syntax";
 	import OrganizationOverviewTab from "$lib/components/profile/organization/OrganizationOverviewTab.svelte";
 	import { clear as clearCache } from "$lib/api/cache";
 	import ProfileChrome from "$lib/components/profile/ProfileChrome.svelte";
@@ -12,7 +13,8 @@
 		RepoCardData
 	} from "$lib/components/profile/types";
 
-	const identity = { did: "did:plc:david", handle: "david.tngl.sh" };
+	const identity = { did: "did:plc:david" as const, handle: "david.tngl.sh" };
+	const profileUri: CanonicalResourceUri = "at://did:plc:david/org.tangled.actor.profile/self";
 	const profile = {
 		$type: "org.tangled.actor.profile",
 		description: "building distributed systems, rust backends, and strange social software.",
@@ -198,3 +200,72 @@
 		content={organizationContent}
 	/>
 </Story>
+
+<Story name="Flagged user" asChild parameters={{ auth: true }}>
+	<ProfileChrome
+		{identity}
+		{profile}
+		loadedCounts={counts}
+		notJoined={false}
+		bobbinUrl="https://bobbin.example.test"
+		activeTab="overview"
+		moderation={{ level: "warn", target: identity.did }}
+		{content}
+	/>
+</Story>
+
+<Story name="Hidden user" asChild parameters={{ auth: true }}>
+	<ProfileChrome
+		{identity}
+		{profile}
+		loadedCounts={counts}
+		notJoined={false}
+		bobbinUrl="https://bobbin.example.test"
+		activeTab="overview"
+		moderation={{ level: "hide", target: identity.did }}
+		{content}
+	/>
+</Story>
+
+<Story
+	name="Own hidden profile"
+	asChild
+	parameters={{ auth: { accounts: [{ did: identity.did, handle: identity.handle }] } }}
+>
+	<ProfileChrome
+		{identity}
+		{profile}
+		loadedCounts={counts}
+		notJoined={false}
+		bobbinUrl="https://bobbin.example.test"
+		activeTab="overview"
+		moderation={{ level: "hide", target: identity.did }}
+		{content}
+	/>
+</Story>
+
+<Story name="Hidden user on another tab" asChild parameters={{ auth: true }}>
+	<ProfileChrome
+		{identity}
+		{profile}
+		loadedCounts={counts}
+		notJoined={false}
+		bobbinUrl="https://bobbin.example.test"
+		activeTab="repos"
+		moderation={{ level: "hide", target: identity.did }}
+		{content}
+	/>
+</Story>
+
+<Story name="Flagged profile record" asChild parameters={{ auth: true }}>
+	<ProfileChrome
+		{identity}
+		{profile}
+		loadedCounts={counts}
+		notJoined={false}
+		bobbinUrl="https://bobbin.example.test"
+		activeTab="overview"
+		moderation={{ level: "warn", target: profileUri }}
+		{content}
+	/>
+</Story>
diff --git a/web/src/lib/components/profile/ProfileChrome.svelte b/web/src/lib/components/profile/ProfileChrome.svelte
index a39ba322b..36685ab10 100644
--- a/web/src/lib/components/profile/ProfileChrome.svelte
+++ b/web/src/lib/components/profile/ProfileChrome.svelte
@@ -4,6 +4,7 @@
 	import { createBobbinClient } from "$lib/api/client";
 	import { IdentityCache } from "$lib/api/identity";
 	import { getAuth } from "$lib/auth.svelte";
+	import type { Moderation } from "$lib/api/moderationLabels";
 	import type { ProfileRecord } from "$lib/api/records";
 	import EmptyState from "$lib/components/ui/EmptyState.svelte";
 	import { createProfileCounts, PROFILE_COUNTS_KEY } from "$lib/components/profile/counts.svelte";
@@ -23,6 +24,7 @@
 		bobbinUrl: string;
 		delegationDid?: string;
 		activeTab: string;
+		moderation?: Moderation;
 		content: Snippet;
 	}
 
@@ -35,6 +37,7 @@
 		bobbinUrl,
 		delegationDid,
 		activeTab,
+		moderation,
 		content
 	}: Props = $props();
 
@@ -91,6 +94,7 @@
 			{viewerFollowRkey}
 			{delegationDid}
 			{activeTab}
+			{moderation}
 			{content}
 		/>
 	{:else}
@@ -102,6 +106,7 @@
 			{viewerVouch}
 			{networkVouches}
 			{activeTab}
+			{moderation}
 			{content}
 		/>
 	{/if}
diff --git a/web/src/lib/components/profile/ProfileShell.svelte b/web/src/lib/components/profile/ProfileShell.svelte
index 9c7c1a039..36f42c9e0 100644
--- a/web/src/lib/components/profile/ProfileShell.svelte
+++ b/web/src/lib/components/profile/ProfileShell.svelte
@@ -1,5 +1,6 @@
 <script lang="ts">
 	import type { Snippet } from "svelte";
+	import type { Moderation } from "$lib/api/moderationLabels";
 	import type { ProfileRecord } from "$lib/api/records";
 	import ProfileChrome from "$lib/components/profile/ProfileChrome.svelte";
 	import type { ProfileCounts } from "$lib/components/profile/types";
@@ -18,6 +19,7 @@
 		bobbinUrl: string;
 		delegationDid?: string;
 		activeTab: string;
+		moderation?: Moderation | Promise<Moderation | undefined>;
 		content: Snippet;
 	}
 
@@ -30,6 +32,7 @@
 		bobbinUrl,
 		delegationDid,
 		activeTab,
+		moderation: moderationProp,
 		content
 	}: Props = $props();
 
@@ -39,6 +42,7 @@
 	const loadedCounts = $derived(await countsProp);
 	const viewerFollowRkey = $derived(await viewerFollowRkeyProp);
 	const notJoined = $derived(await notJoinedProp);
+	const moderation = $derived(await moderationProp);
 </script>
 
 <ProfileChrome
@@ -50,5 +54,6 @@
 	{bobbinUrl}
 	{delegationDid}
 	{activeTab}
+	{moderation}
 	{content}
 />
diff --git a/web/src/lib/components/profile/UserProfileChrome.svelte b/web/src/lib/components/profile/UserProfileChrome.svelte
index 8342d14c9..5f5598582 100644
--- a/web/src/lib/components/profile/UserProfileChrome.svelte
+++ b/web/src/lib/components/profile/UserProfileChrome.svelte
@@ -1,8 +1,11 @@
 <script lang="ts">
 	import type { Snippet } from "svelte";
 	import Pencil from "$icon/pencil";
+	import type { Moderation } from "$lib/api/moderationLabels";
 	import type { ProfileRecord } from "$lib/api/records";
 	import { getAuth } from "$lib/auth.svelte";
+	import ModerationNotice from "$lib/components/moderation/ModerationNotice.svelte";
+	import { createAuthorGate } from "$lib/components/moderation/gate.svelte";
 	import FollowButton from "$lib/components/profile/FollowButton.svelte";
 	import NetworkVouches from "$lib/components/profile/NetworkVouches.svelte";
 	import ProfileEditForm from "$lib/components/profile/ProfileEditForm.svelte";
@@ -28,6 +31,7 @@
 		viewerVouch: DirectVouch | null;
 		networkVouches: NetworkVouch[];
 		activeTab: string;
+		moderation?: Moderation;
 		content: Snippet;
 	}
 
@@ -39,6 +43,7 @@
 		viewerVouch,
 		networkVouches,
 		activeTab,
+		moderation,
 		content
 	}: Props = $props();
 
@@ -47,8 +52,21 @@
 	let editing = $state(false);
 	let saved = $state<ProfileRecord | null>(null);
 	const shown = $derived(saved ?? profile);
+
+	const gate = createAuthorGate(
+		() => moderation,
+		() => identity.did
+	);
 </script>
 
+{#snippet gatedContent()}
+	{#if gate.masked}
+		<ModerationNotice {gate} />
+	{:else}
+		{@render content()}
+	{/if}
+{/snippet}
+
 <ProfileTabs
 	handle={identity.handle}
 	active={activeTab}
@@ -61,8 +79,12 @@
 		<LayerCardPrimary padding="none" class="static overflow-visible">
 			<button
 				type="button"
-				class="absolute top-5.25 left-1/2 size-32 -translate-x-1/2 cursor-zoom-in rounded-full bg-background-default sm:left-6 sm:translate-x-0"
+				class={[
+					"absolute top-5.25 left-1/2 size-32 -translate-x-1/2 rounded-full bg-background-default sm:left-6 sm:translate-x-0",
+					!gate.masked && "cursor-zoom-in"
+				]}
 				aria-label="View {identity.handle}'s avatar"
+				disabled={gate.masked}
 				onclick={(event) =>
 					lightbox.show(
 						[
@@ -76,7 +98,12 @@
 						0
 					)}
 			>
-				<Avatar did={identity.did} handle={identity.handle} size="full" />
+				<Avatar
+					did={identity.did}
+					handle={identity.handle}
+					size="full"
+					moderation={gate.moderation}
+				/>
 			</button>
 			<div
 				class="absolute inset-x-4 top-39.25 flex items-center justify-between gap-2xs sm:top-8.5 sm:left-auto sm:justify-end"
@@ -112,7 +139,7 @@
 				class="max-w-full truncate px-xl pt-30.75 typography-heading-4 sm:absolute sm:top-9.25 sm:right-4 sm:left-43 sm:w-fit sm:px-none sm:pt-none"
 			>
 				{identity.handle}
-				{#if shown?.pronouns}
+				{#if shown?.pronouns && !gate.masked}
 					<span
 						data-testid="profilePronouns"
 						data-pronouns={shown.pronouns}
@@ -137,6 +164,8 @@
 							onCancel={() => (editing = false)}
 						/>
 					</div>
+				{:else if gate.masked}
+					<ModerationNotice {gate} class="w-full sm:py-2xs" />
 				{:else}
 					{#if shown?.description}
 						<ProfileBio
@@ -156,16 +185,18 @@
 				{/if}
 			</div>
 
-			{#if networkVouches.length > 0}
+			{#if networkVouches.length > 0 && !gate.masked}
 				<div class="px-xl py-md sm:ml-39 sm:px-md sm:pt-none">
 					<NetworkVouches subjectHandle={identity.handle} vouches={networkVouches} />
 				</div>
 			{/if}
-			<div class="p-md">{@render content()}</div>
+			{#if !gate.masked}
+				<div class="p-md">{@render content()}</div>
+			{/if}
 		</LayerCardPrimary>
 	</LayerCard>
 {:else}
 	<Card padding="none" class="overflow-hidden">
-		<div class="p-md">{@render content()}</div>
+		<div class="p-md">{@render gatedContent()}</div>
 	</Card>
 {/if}
diff --git a/web/src/lib/components/profile/organization/OrganizationChrome.svelte b/web/src/lib/components/profile/organization/OrganizationChrome.svelte
index e0f166111..7d5f8535f 100644
--- a/web/src/lib/components/profile/organization/OrganizationChrome.svelte
+++ b/web/src/lib/components/profile/organization/OrganizationChrome.svelte
@@ -5,8 +5,11 @@
 	import Building2 from "$icon/building-2";
 	import { createLoad } from "$lib/action.svelte";
 	import { viewerControlsOrganization } from "$lib/api/organizations";
+	import type { Moderation } from "$lib/api/moderationLabels";
 	import type { ProfileRecord } from "$lib/api/records";
 	import { getAuth } from "$lib/auth.svelte";
+	import ModerationNotice from "$lib/components/moderation/ModerationNotice.svelte";
+	import { createModerationGate } from "$lib/components/moderation/gate.svelte";
 	import FollowButton from "$lib/components/profile/FollowButton.svelte";
 	import ProfileBio from "$lib/components/profile/ProfileBio.svelte";
 	import ProfileMoreMenu from "$lib/components/profile/ProfileMoreMenu.svelte";
@@ -26,6 +29,7 @@
 		viewerFollowRkey?: string | null;
 		delegationDid?: string;
 		activeTab: string;
+		moderation?: Moderation;
 		content: Snippet;
 	}
 
@@ -36,6 +40,7 @@
 		viewerFollowRkey,
 		delegationDid = "",
 		activeTab,
+		moderation,
 		content
 	}: Props = $props();
 
@@ -46,6 +51,11 @@
 		return viewerControlsOrganization(agent, delegationDid, identity.did);
 	});
 
+	const gate = createModerationGate(
+		() => moderation,
+		() => auth.currentDid === identity.did || controls.data === true
+	);
+
 	const blurLayers = [1.5, 2, 4, 6];
 
 	const followersHref = $derived(
@@ -58,6 +68,14 @@
 	);
 </script>
 
+{#snippet gatedContent()}
+	{#if gate.masked}
+		<ModerationNotice {gate} />
+	{:else}
+		{@render content()}
+	{/if}
+{/snippet}
+
 <ProfileTabs
 	handle={identity.handle}
 	active={activeTab}
@@ -74,7 +92,7 @@
 				aria-hidden="true"
 			>
 				{#each Array(160) as _, index (index)}
-					<Avatar did={identity.did} size="regular" />
+					<Avatar did={identity.did} size="regular" moderation={gate.moderation} />
 				{/each}
 			</div>
 
@@ -90,6 +108,7 @@
 			<Avatar
 				did={identity.did}
 				handle={identity.handle}
+				moderation={gate.moderation}
 				size="full"
 				class="absolute top-20 left-1/2 z-10 size-34 -translate-x-1/2 bg-background-default sm:top-14.25"
 			/>
@@ -105,7 +124,9 @@
 						{identity.handle}
 					</h1>
 
-					{#if profile.description}
+					{#if gate.masked}
+						<ModerationNotice {gate} />
+					{:else if profile.description}
 						<ProfileBio
 							text={profile.description}
 							class="max-w-137 typography-paragraph-regular"
@@ -122,17 +143,21 @@
 					<ProfileMoreMenu {identity} />
 				</div>
 
-				<ProfileSocialLinks
-					{identity}
-					{profile}
-					followers={counts.followers}
-					{followersHref}
-					class="justify-center gap-xs max-sm:w-full max-sm:flex-col max-sm:items-start"
-				/>
+				{#if !gate.masked}
+					<ProfileSocialLinks
+						{identity}
+						{profile}
+						followers={counts.followers}
+						{followersHref}
+						class="justify-center gap-xs max-sm:w-full max-sm:flex-col max-sm:items-start"
+					/>
+				{/if}
 			</div>
 
-			<Separator class="sm:hidden" />
-			{@render content()}
+			{#if !gate.masked}
+				<Separator class="sm:hidden" />
+				{@render content()}
+			{/if}
 		</LayerCardPrimary>
 	</LayerCard>
 {:else}
@@ -140,7 +165,7 @@
 		{#if activeTab === "settings"}
 			{@render content()}
 		{:else}
-			<div class="p-md">{@render content()}</div>
+			<div class="p-md">{@render gatedContent()}</div>
 		{/if}
 	</Card>
 {/if}
diff --git a/web/src/routes/[handle]/+layout.svelte b/web/src/routes/[handle]/+layout.svelte
index 3b7e27ca5..9c3b9c2c1 100644
--- a/web/src/routes/[handle]/+layout.svelte
+++ b/web/src/routes/[handle]/+layout.svelte
@@ -2,6 +2,7 @@
 	import { goto } from "$app/navigation";
 	import { page } from "$app/state";
 	import type { ResolvedPathname } from "$app/types";
+	import type { Moderation } from "$lib/api/moderationLabels";
 	import type { ProfileRecord } from "$lib/api/records";
 	import Error from "$lib/components/ui/Error.svelte";
 	import Pending from "$lib/components/ui/Pending.svelte";
@@ -58,14 +59,32 @@
 	});
 	const resolvedIdentity = $derived(asyncIdentity ?? synchronousIdentity);
 
+	const synchronousModeration = $derived(
+		data.moderation instanceof Promise ? undefined : data.moderation
+	);
+	let asyncModeration = $state<Moderation | undefined>();
+	$effect(() => {
+		let active = true;
+		void Promise.resolve(data.moderation)
+			.then((res) => {
+				if (active) asyncModeration = res;
+			})
+			.catch(() => {});
+		return () => {
+			active = false;
+		};
+	});
+	const labeled = $derived((asyncModeration ?? synchronousModeration) !== undefined);
+
 	const rawHandle = $derived(decodeURIComponent(page.params.handle ?? ""));
 	const handle = $derived(resolvedIdentity?.handle ?? rawHandle);
+	const shownProfile = $derived(labeled ? null : resolvedProfile);
 	const displayName = $derived(
-		((resolvedProfile as Record<string, unknown> | null)?.displayName as string | undefined) ||
-			resolvedProfile?.preferredHandle ||
+		((shownProfile as Record<string, unknown> | null)?.displayName as string | undefined) ||
+			shownProfile?.preferredHandle ||
 			handle
 	);
-	const profileBio = $derived(resolvedProfile?.description?.trim());
+	const profileBio = $derived(shownProfile?.description?.trim());
 	const metaDescription = $derived(
 		profileBio && profileBio.length > 0
 			? profileBio
@@ -145,6 +164,7 @@
 				{counts}
 				{viewerFollowRkey}
 				{notJoined}
+				moderation={data.moderation}
 				bobbinUrl={data.publicConfig.bobbinUrl}
 				delegationDid={data.publicConfig.delegationDid}
 				{activeTab}
diff --git a/web/src/routes/[handle]/+layout.ts b/web/src/routes/[handle]/+layout.ts
index 354c2e776..9298bd3b6 100644
--- a/web/src/routes/[handle]/+layout.ts
+++ b/web/src/routes/[handle]/+layout.ts
@@ -2,8 +2,13 @@ import { browser } from "$app/environment";
 import { error, redirect } from "@sveltejs/kit";
 import { createBobbinClient } from "$lib/api/client";
 import type { MiniDoc } from "$lib/api/identity";
-import { getProfile, type ProfileRecord } from "$lib/api/records";
-import { enrich, countOf, targetAll, viewerRkeyOf } from "$lib/api/enrich";
+import { enrich, countOf, target, targetAll, viewerRkeyOf } from "$lib/api/enrich";
+import {
+	ACCOUNT_MODERATION,
+	accountModerationOf,
+	getLabeledProfile,
+	profileModeration
+} from "$lib/api/moderationLabels";
 import {
 	FOLLOWER_COUNT,
 	FOLLOWING_COUNT,
@@ -49,7 +54,10 @@ export const load: LayoutLoad = async (event) => {
 		const enriched = await enrich<MiniDoc>(ctx, {
 			xrpc: "blue.microcosm.identity.resolveMiniDoc",
 			params: { identifier },
-			enrich: targetAll([...PROFILE_COUNTS, FOLLOW_VIEWER], ["did"]),
+			enrich: [
+				...targetAll([...PROFILE_COUNTS, FOLLOW_VIEWER], ["did"]),
+				target(ACCOUNT_MODERATION, ["did"])
+			],
 			viewer: viewerDid
 		}).catch(async (cause) => {
 			if (isDid(identifier)) {
@@ -79,6 +87,7 @@ export const load: LayoutLoad = async (event) => {
 				viewerDid && viewerDid !== did
 					? viewerRkeyOf(enriched.data, did, FOLLOW_VIEWER)
 					: null,
+			accountModeration: accountModerationOf(enriched.data, did),
 			canonical: doc.handle && !doc.handle.endsWith(".invalid") ? doc.handle : null
 		};
 	})();
@@ -88,15 +97,18 @@ export const load: LayoutLoad = async (event) => {
 	const countsPromise = stream(resolved.then(({ counts }) => counts));
 	const followPromise = stream(resolved.then(({ viewerFollowRkey }) => viewerFollowRkey));
 
-	const profilePromise = stream(
-		resolved.then(({ identity }): Promise<ProfileRecord | null> =>
-			getProfile(ctx, identity.did)
-				.then((view) => view.value)
-				.catch((cause) => {
-					if (cause instanceof ClientResponseError && httpStatusFor(cause) === 404)
-						return null;
-					return toHttpError(cause, "Could not load profile");
-				})
+	const profileView = resolved.then(({ identity }) =>
+		getLabeledProfile(ctx, identity.did).catch((cause) => {
+			if (cause instanceof ClientResponseError && httpStatusFor(cause) === 404)
+				return undefined;
+			return toHttpError(cause, "Could not load profile");
+		})
+	);
+	const profilePromise = stream(profileView.then((view) => view?.output.value ?? null));
+
+	const moderationPromise = stream(
+		Promise.all([resolved, profileView]).then(([{ accountModeration }, view]) =>
+			profileModeration(accountModeration, view)
 		)
 	);
 
@@ -117,7 +129,8 @@ export const load: LayoutLoad = async (event) => {
 			profile: profilePromise,
 			counts: countsPromise,
 			viewerFollowRkey: followPromise,
-			notJoined: notJoinedPromise
+			notJoined: notJoinedPromise,
+			moderation: moderationPromise
 		});
 	}
 
@@ -126,6 +139,7 @@ export const load: LayoutLoad = async (event) => {
 		profile: profilePromise,
 		counts: countsPromise,
 		viewerFollowRkey: followPromise,
-		notJoined: notJoinedPromise
+		notJoined: notJoinedPromise,
+		moderation: moderationPromise
 	});
 };
diff --git a/web/src/routes/[handle]/handle.test.ts b/web/src/routes/[handle]/handle.test.ts
index 3e0917576..f05de662e 100644
--- a/web/src/routes/[handle]/handle.test.ts
+++ b/web/src/routes/[handle]/handle.test.ts
@@ -2,7 +2,9 @@ import { describe, expect, it, vi } from "vitest";
 import { load as handleLayoutLoad } from "$routes/[handle]/+layout";
 import { load as repoLayoutLoad } from "$routes/[handle]/[repo]/+layout";
 import { REPO_OWNER_DOCS } from "$lib/api/descriptors";
+import { ACCOUNT_MODERATION, PROFILE_MODERATION } from "$lib/api/moderationLabels";
 import { TYPE_MINIDOC } from "$lib/api/enrich";
+import { labeled } from "$fixtures/labels";
 
 const REPO_DID = "did:plc:j5hmlfdrwkvtxm7cjmu7j2is";
 const OWNER_DID = "did:plc:wshs7t2adsemcrrd4snkeqli";
@@ -138,3 +140,63 @@ describe("/[handle] repoDID navigation", () => {
 		});
 	});
 });
+
+describe("/[handle] moderation", () => {
+	const PROFILE_URI = `at://${OWNER_DID}/org.tangled.actor.profile/self`;
+
+	const load = (labels: { account?: string; profile?: string; noProfile?: boolean }) =>
+		handleLayoutLoad({
+			url: new URL("http://web.test/tangled.org"),
+			params: { handle: "tangled.org" },
+			fetch: vi.fn<typeof fetch>().mockImplementation(async (_input, init) => {
+				const body = String(init?.body);
+				if (body.includes("resolveMiniDoc")) {
+					return jsonResponse({
+						output: { did: OWNER_DID, handle: "tangled.org" },
+						data: labels.account
+							? labeled(OWNER_DID, ACCOUNT_MODERATION, labels.account)
+							: {}
+					});
+				}
+				if (body.includes("getProfile") && !labels.noProfile) {
+					return jsonResponse({
+						output: { uri: PROFILE_URI, value: { $type: "org.tangled.actor.profile" } },
+						data: labels.profile
+							? labeled(PROFILE_URI, PROFILE_MODERATION, labels.profile)
+							: {}
+					});
+				}
+				return jsonResponse({}, 404);
+			}),
+			parent: async () => ({
+				publicConfig: { bobbinUrl: "https://bobbin.test" },
+				auth: null
+			}),
+			route: { id: "/[handle]" }
+		} as never) as Promise<{ moderation: Promise<unknown> }>;
+
+	it("reads account labels without a profile record", async () => {
+		const data = await load({ account: "!warn", noProfile: true });
+		await expect(data.moderation).resolves.toEqual({ level: "warn", target: OWNER_DID });
+	});
+
+	it("reads labels on the profile record alone", async () => {
+		const data = await load({ profile: "!hide" });
+		await expect(data.moderation).resolves.toEqual({ level: "hide", target: PROFILE_URI });
+	});
+
+	it("lets the stronger decision win", async () => {
+		const data = await load({ account: "!warn", profile: "!hide" });
+		await expect(data.moderation).resolves.toEqual({ level: "hide", target: PROFILE_URI });
+	});
+
+	it("prefers the account's decision on a tie", async () => {
+		const data = await load({ account: "!warn", profile: "!warn" });
+		await expect(data.moderation).resolves.toEqual({ level: "warn", target: OWNER_DID });
+	});
+
+	it("leaves unlabeled profiles alone", async () => {
+		const data = await load({});
+		await expect(data.moderation).resolves.toBeUndefined();
+	});
+});