Circle had a moderator role and no moderator tools. The space.moderate permission was declared, granted to the Moderator template, and enforced by nothing — a community operator could delete individual messages and that was the whole toolkit.
What landed
- Timeout a member for a bounded period, with the reason recorded.
- Remove a member from a space, refused explicitly against organization owners and admins rather than silently doing nothing.
- Ban and unban, with an optional window of recent messages purged in the same action.
- A moderation log scoped to the space, readable by the people whose actions write to it.
A ban is space-scoped. It leaves the organization membership intact, so a banned person keeps direct messages. The confirmation copy says so rather than implying total exclusion.