Public posts use the same JWT-first account flow. After publishing, every post and asset enters moderation before appearing in the live feed.