Commit
f444b14
Good question. Yes, there are guardrails. New or unreputed accounts' commits start pending and get an automated moderation check (when OpenAI is configured), then a human moderator queue at /moderation. Admins and "good reputation" accounts skip ahead, but reports can also force an author's posts to wait for a moderator.
So bot spam is possible to attempt, but it shouldn't land publicly without passing checks. Full details are in the Moderation section of the knowledge base.
commit f444b14