diff --git a/apps/frontend/nuxt.config.ts b/apps/frontend/nuxt.config.ts
index ab532a2057..1c1d4b02cc 100644
--- a/apps/frontend/nuxt.config.ts
+++ b/apps/frontend/nuxt.config.ts
@@ -149,7 +149,7 @@ export default defineNuxtConfig({
 				(state.errors ?? []).length === 0
 			) {
 				console.log(
-					'Tags already recently generated. Delete apps/frontend/generated/state.json to force regeneration.',
+					'Tags already recently generated. Delete apps/src/frontend/generated/state.json to force regeneration.',
 				)
 				return
 			}
diff --git a/apps/frontend/src/components/ui/moderation/ModerationDelphiReportCard.vue b/apps/frontend/src/components/ui/moderation/ModerationDelphiReportCard.vue
deleted file mode 100644
index 2b4dc2d562..0000000000
--- a/apps/frontend/src/components/ui/moderation/ModerationDelphiReportCard.vue
+++ /dev/null
@@ -1,182 +0,0 @@
-<template>
-	<div class="universal-card">
-		<div class="flex flex-col gap-4">
-			<div class="flex flex-col gap-3 sm:flex-row sm:items-center">
-				<div class="flex min-w-0 flex-1 items-center gap-3">
-					<Avatar :src="report.project.icon_url" size="3rem" class="flex-shrink-0" />
-					<div class="min-w-0 flex-1">
-						<h3 class="truncate text-lg font-semibold">{{ report.project.title }}</h3>
-
-						<div class="flex flex-col gap-2 text-sm text-secondary sm:flex-row sm:items-center">
-							<nuxt-link
-								v-if="report.target"
-								:to="`/${report.target.type}/${report.target.slug}`"
-								class="inline-flex flex-row items-center gap-1 transition-colors duration-100 ease-in-out hover:text-brand"
-							>
-								<Avatar
-									:src="report.target.avatar_url"
-									:circle="report.target.type === 'user'"
-									size="1rem"
-									class="flex-shrink-0"
-								/>
-								<span class="truncate">
-									<OrganizationIcon
-										v-if="report.target.type === 'organization'"
-										class="align-middle"
-									/>
-									{{ report.target.name }}
-								</span>
-							</nuxt-link>
-
-							<div class="flex flex-wrap items-center gap-2">
-								<span
-									class="whitespace-nowrap rounded-full bg-button-bg p-0.5 px-2 text-xs font-semibold text-secondary"
-								>
-									Score: {{ report.priority_score }}
-								</span>
-								<span
-									class="whitespace-nowrap rounded-full bg-button-bg p-0.5 px-2 text-xs font-semibold"
-									:class="{
-										'text-brand': report.status === 'approved',
-										'text-red': report.status === 'rejected',
-										'text-secondary': report.status === 'pending',
-									}"
-								>
-									{{ report.status.charAt(0).toUpperCase() + report.status.slice(1) }}
-								</span>
-								<span class="max-w-[200px] truncate font-mono text-xs sm:max-w-none">
-									{{
-										report.version.files.find((file) => file.primary)?.filename ||
-										'Unknown primary file'
-									}}
-								</span>
-							</div>
-						</div>
-					</div>
-				</div>
-
-				<div
-					class="mt-2 flex flex-col items-stretch gap-2 sm:mt-0 sm:flex-row sm:items-center sm:gap-2"
-				>
-					<span class="hidden whitespace-nowrap text-sm text-secondary sm:block">
-						{{ formatRelativeTime(dayjs(report.detected_at).toDate()) }}
-					</span>
-
-					<div class="flex flex-col gap-2 sm:flex-row">
-						<div class="flex gap-2">
-							<ButtonStyled class="flex-1 sm:flex-none">
-								<button
-									v-tooltip="!isPending ? 'This report has already been dealt with.' : undefined"
-									:disabled="!isPending"
-									class="w-full sm:w-auto"
-								>
-									Accept
-								</button>
-							</ButtonStyled>
-							<ButtonStyled class="flex-1 sm:flex-none">
-								<button
-									v-tooltip="!isPending ? 'This report has already been dealt with.' : undefined"
-									:disabled="!isPending"
-									class="w-full sm:w-auto"
-								>
-									Reject
-								</button>
-							</ButtonStyled>
-						</div>
-
-						<div class="flex justify-center gap-2 sm:justify-start">
-							<ButtonStyled circular>
-								<nuxt-link :to="versionUrl">
-									<EyeIcon />
-								</nuxt-link>
-							</ButtonStyled>
-							<ButtonStyled circular>
-								<OverflowMenu :options="quickActions">
-									<template #default>
-										<EllipsisVerticalIcon />
-									</template>
-									<template #copy-id>
-										<ClipboardCopyIcon />
-										<span class="hidden sm:inline">Copy ID</span>
-									</template>
-									<template #copy-link>
-										<LinkIcon />
-										<span class="hidden sm:inline">Copy link</span>
-									</template>
-								</OverflowMenu>
-							</ButtonStyled>
-						</div>
-					</div>
-				</div>
-			</div>
-
-			<div class="text-sm text-secondary sm:hidden">
-				{{ formatRelativeTime(dayjs(report.detected_at).toDate()) }}
-			</div>
-		</div>
-	</div>
-</template>
-
-<script setup lang="ts">
-import {
-	ClipboardCopyIcon,
-	EllipsisVerticalIcon,
-	EyeIcon,
-	LinkIcon,
-	OrganizationIcon,
-} from '@modrinth/assets'
-import type { ExtendedDelphiReport } from '@modrinth/moderation'
-import {
-	Avatar,
-	ButtonStyled,
-	injectNotificationManager,
-	OverflowMenu,
-	type OverflowMenuOption,
-	useRelativeTime,
-} from '@modrinth/ui'
-import dayjs from 'dayjs'
-
-const { addNotification } = injectNotificationManager()
-
-const props = defineProps<{
-	report: ExtendedDelphiReport
-}>()
-
-const formatRelativeTime = useRelativeTime()
-const isPending = computed(() => props.report.status === 'pending')
-
-const quickActions: OverflowMenuOption[] = [
-	{
-		id: 'copy-link',
-		action: () => {
-			const base = window.location.origin
-			const reviewUrl = `${base}/moderation/tech-reviews?q=${props.report.version.id}`
-			navigator.clipboard.writeText(reviewUrl).then(() => {
-				addNotification({
-					type: 'success',
-					title: 'Tech review link copied',
-					text: 'The link to this tech review has been copied to your clipboard.',
-				})
-			})
-		},
-	},
-	{
-		id: 'copy-id',
-		action: () => {
-			navigator.clipboard.writeText(props.report.version.id).then(() => {
-				addNotification({
-					type: 'success',
-					title: 'Version ID copied',
-					text: 'The ID of this version has been copied to your clipboard.',
-				})
-			})
-		},
-	},
-]
-
-const versionUrl = computed(() => {
-	return `/${props.report.project.project_type}/${props.report.project.slug}/versions/${props.report.version.id}`
-})
-</script>
-
-<style lang="scss" scoped></style>
diff --git a/apps/frontend/src/components/ui/moderation/delphi/RunDelphiModal.vue b/apps/frontend/src/components/ui/moderation/delphi/RunDelphiModal.vue
new file mode 100644
index 0000000000..d90eb7a8c2
--- /dev/null
+++ b/apps/frontend/src/components/ui/moderation/delphi/RunDelphiModal.vue
@@ -0,0 +1,475 @@
+<script setup lang="ts">
+import { ChevronRightIcon, FileIcon, LeftArrowIcon, XIcon } from '@modrinth/assets'
+import { ButtonStyled, NewModal, injectNotificationManager } from '@modrinth/ui'
+import type { SearchResult as Project, Version, VersionFile } from '@modrinth/utils'
+import { useDebounceFn } from '@vueuse/core'
+import { computed, nextTick, ref, useTemplateRef } from 'vue'
+
+type Step = 'project' | 'version' | 'file' | 'review'
+
+const steps: Step[] = ['project', 'version', 'file', 'review']
+const titles: Record<Step, string> = {
+	project: 'Select project',
+	version: 'Select version',
+	file: 'Select file',
+	review: 'Submit for analysis',
+}
+
+const modal = useTemplateRef<InstanceType<typeof NewModal>>('modal')
+const notifications = injectNotificationManager()
+
+const selectedProject = ref<Project | null>(null)
+const selectedVersion = ref<Version | null>(null)
+const selectedFile = ref<VersionFile | null>(null)
+const fileId = ref<string | null>(null)
+
+const projectQuery = ref('')
+const projects = ref<Project[]>([])
+const versions = ref<Version[]>([])
+const files = ref<VersionFile[]>([])
+
+const searchLoading = ref(false)
+const loadingVersions = ref(false)
+const submitting = ref(false)
+
+const currentStep = ref<Step>('project')
+const currentStepIndex = computed(() => steps.indexOf(currentStep.value))
+const previousStep = computed(() => steps[currentStepIndex.value - 1])
+const nextStep = computed(() => steps[currentStepIndex.value + 1])
+
+const canProceed = computed(() => {
+	switch (currentStep.value) {
+		case 'project':
+			return !!selectedProject.value
+		case 'version':
+			return !!selectedVersion.value
+		case 'file':
+			return !!selectedFile.value
+		case 'review':
+			return !!fileId.value && !submitting.value
+		default:
+			return false
+	}
+})
+
+const searchProjects = useDebounceFn(async () => {
+	if (!projectQuery.value || projectQuery.value.trim().length < 2) {
+		projects.value = []
+		return
+	}
+	searchLoading.value = true
+	try {
+		const res = (await useBaseFetch(
+			`search?query=${encodeURIComponent(projectQuery.value.trim())}&limit=8`,
+		)) as any
+		projects.value = (res?.hits ?? []) as Project[]
+	} catch (e: any) {
+		notifications.addNotification({
+			title: 'Error',
+			text: 'Failed to search for projects',
+			type: 'error',
+		})
+	} finally {
+		searchLoading.value = false
+	}
+}, 250)
+
+async function loadVersions(projectId: string) {
+	loadingVersions.value = true
+	try {
+		const res = (await useBaseFetch(`project/${projectId}/version`)) as Version[]
+		versions.value = (res ?? []).sort(
+			(a, b) =>
+				new Date(b.date_published ?? 0).getTime() - new Date(a.date_published ?? 0).getTime(),
+		)
+	} catch (e: any) {
+		versions.value = []
+		notifications.addNotification({
+			title: 'Error',
+			text: 'Failed to load project versions',
+			type: 'error',
+		})
+	} finally {
+		loadingVersions.value = false
+	}
+}
+
+async function chooseProject(project: Project) {
+	selectedProject.value = project
+
+	selectedVersion.value = null
+	selectedFile.value = null
+	files.value = []
+	fileId.value = null
+
+	await loadVersions(project.project_id || project.id)
+	await setStep('version', true)
+}
+
+function chooseVersion(version: Version) {
+	selectedVersion.value = version
+	selectedFile.value = null
+	files.value = version.files ?? []
+	fileId.value = null
+	setStep('file', true)
+}
+
+function chooseFile(file: VersionFile) {
+	selectedFile.value = file
+	fileId.value = file.hashes.sha512
+	setStep('review', true)
+}
+
+async function beforeProceed(target: Step | undefined) {
+	switch (target) {
+		case 'version':
+			if (!selectedProject.value) return false
+
+			if (versions.value.length === 0) {
+				await loadVersions(selectedProject.value.id || selectedProject.value.id)
+			}
+			return true
+		case 'file':
+			return !!selectedVersion.value
+		case 'review':
+			return !!selectedFile.value
+		default:
+			return true
+	}
+}
+
+async function afterProceed(_target: Step | undefined) {}
+
+async function setStep(target: Step | undefined, skipValidation = false) {
+	if (!target) {
+		await confirmRunDelphi()
+		return
+	}
+	if (!skipValidation && !canProceed.value) return
+	if (!(await beforeProceed(target))) return
+
+	currentStep.value = target
+	await nextTick()
+	await afterProceed(target)
+}
+
+function resetState() {
+	projectQuery.value = ''
+	projects.value = []
+	selectedProject.value = null
+
+	versions.value = []
+	selectedVersion.value = null
+
+	files.value = []
+	selectedFile.value = null
+
+	fileId.value = null
+	currentStep.value = 'project'
+}
+
+function show() {
+	resetState()
+	modal.value?.show()
+}
+
+defineExpose({ show })
+
+const emit = defineEmits<{
+	(
+		e: 'started',
+		payload: { fileId: string; project?: Project; version?: Version; file?: VersionFile },
+	): void
+	(e: 'hide'): void
+}>()
+
+async function confirmRunDelphi() {
+	if (!fileId.value) {
+		notifications.addNotification({
+			title: 'Error',
+			text: 'Please select a file to analyze',
+			type: 'error',
+		})
+		return
+	}
+
+	submitting.value = true
+	try {
+		await useBaseFetch('delphi/run', {
+			method: 'POST',
+			body: { file_id: fileId.value },
+			internal: true,
+		})
+
+		notifications.addNotification({
+			title: 'Success',
+			text: 'Delphi analysis started',
+			type: 'success',
+		})
+		emit('started', {
+			fileId: fileId.value,
+			project: selectedProject.value ?? undefined,
+			version: selectedVersion.value ?? undefined,
+			file: selectedFile.value ?? undefined,
+		})
+		modal.value?.hide()
+	} catch (error: any) {
+		notifications.addNotification({
+			title: 'Error',
+			text: error?.message || 'Failed to start Delphi analysis',
+			type: 'error',
+		})
+	} finally {
+		submitting.value = false
+	}
+}
+
+function versionTypeColor(type?: string) {
+	switch (type) {
+		case 'release':
+			return 'green'
+		case 'beta':
+			return 'orange'
+		case 'alpha':
+			return 'red'
+		default:
+			return 'secondary'
+	}
+}
+function formatVersionType(type?: string) {
+	if (!type) return 'Unknown'
+	return type.charAt(0).toUpperCase() + type.slice(1)
+}
+function formatFileSize(bytes?: number) {
+	if (!bytes && bytes !== 0) return 'Unknown size'
+	const units = ['B', 'KB', 'MB', 'GB']
+	let size = Number(bytes)
+	let i = 0
+	while (size >= 1024 && i < units.length - 1) {
+		size /= 1024
+		i++
+	}
+	return `${size.toFixed(1)} ${units[i]}`
+}
+function formatRelativeTime(date?: string) {
+	if (!date) return ''
+	const d = new Date(date)
+	const diffSec = Math.floor((Date.now() - d.getTime()) / 1000)
+	if (diffSec < 60) return 'just now'
+	if (diffSec < 3600) return `${Math.floor(diffSec / 60)} minutes ago`
+	if (diffSec < 86400) return `${Math.floor(diffSec / 3600)} hours ago`
+	if (diffSec < 2592000) return `${Math.floor(diffSec / 86400)} days ago`
+	return d.toLocaleDateString()
+}
+</script>
+
+<template>
+	<NewModal ref="modal" @hide="$emit('hide')">
+		<template #title>
+			<div class="flex items-center gap-1 font-bold text-secondary">
+				<template v-for="(title, idx) in steps" :key="title">
+					<button
+						v-if="idx < currentStepIndex"
+						class="bg-transparent p-0 font-bold text-secondary active:scale-95"
+						@click="setStep(title, true)"
+					>
+						{{ titles[title] }}
+					</button>
+					<span v-else :class="{ 'text-contrast': idx === currentStepIndex }">
+						{{ titles[title] }}
+					</span>
+					<ChevronRightIcon
+						v-if="idx < steps.length - 1"
+						class="h-5 w-5 text-secondary"
+						stroke-width="3"
+					/>
+				</template>
+			</div>
+		</template>
+
+		<div class="w-[40rem] max-w-full space-y-4">
+			<div v-if="currentStep === 'project'" class="space-y-3">
+				<label for="project-search" class="text-sm font-medium text-contrast">
+					Search for a project <span class="text-brand-red">*</span>
+				</label>
+				<div class="relative">
+					<input
+						id="project-search"
+						v-model="projectQuery"
+						type="text"
+						class="border-border bg-raised w-full rounded-lg border px-3 py-2 text-sm placeholder:text-secondary focus:border-brand focus:outline-none"
+						placeholder="Enter project name..."
+						autocomplete="off"
+						@input="searchProjects"
+					/>
+					<div v-if="searchLoading" class="absolute right-3 top-2.5">
+						<div
+							class="h-4 w-4 animate-spin rounded-full border-2 border-primary border-t-transparent"
+						/>
+					</div>
+				</div>
+
+				<div
+					v-if="projects.length"
+					class="border-border max-h-64 overflow-y-auto rounded-lg border"
+				>
+					<div
+						v-for="p in projects"
+						:key="p.id"
+						class="border-border flex cursor-pointer items-center gap-3 border-b p-3 hover:bg-button-bg"
+						@click="chooseProject(p)"
+					>
+						<img
+							:src="p.icon_url || 'https://cdn.modrinth.com/placeholder.png'"
+							:alt="p.title"
+							class="h-10 w-10 rounded-md object-cover"
+						/>
+						<div>
+							<div class="font-medium text-contrast">{{ p.title }}</div>
+							<div class="text-xs text-secondary">{{ p.author }}</div>
+						</div>
+					</div>
+				</div>
+				<div v-else-if="projectQuery && !searchLoading" class="mt-2 text-center text-secondary">
+					No projects found
+				</div>
+			</div>
+
+			<div v-else-if="currentStep === 'version'" class="space-y-3">
+				<div class="mb-2 flex items-center gap-2">
+					<div class="flex items-center gap-2">
+						<img
+							:src="selectedProject?.icon_url || 'https://cdn.modrinth.com/placeholder.png'"
+							:alt="selectedProject?.title || ''"
+							class="h-6 w-6 rounded-md object-cover"
+						/>
+						<span class="font-medium text-contrast">{{ selectedProject?.title }}</span>
+					</div>
+				</div>
+
+				<label class="mt-2 text-sm font-medium text-contrast">
+					Select a version <span class="text-brand-red">*</span>
+				</label>
+				<div v-if="loadingVersions" class="py-4 text-center">
+					<div
+						class="mx-auto h-5 w-5 animate-spin rounded-full border-2 border-primary border-t-transparent"
+					/>
+				</div>
+				<div v-else-if="!versions.length" class="py-4 text-center text-secondary">
+					No versions found
+				</div>
+				<div v-else class="border-border max-h-64 overflow-y-auto rounded-lg border">
+					<div
+						v-for="v in versions"
+						:key="v.id"
+						class="border-border flex cursor-pointer items-center justify-between border-b p-3 hover:bg-button-bg"
+						@click="chooseVersion(v)"
+					>
+						<div>
+							<div class="font-medium text-contrast">{{ v.version_number }}</div>
+							<div class="flex flex-wrap gap-1 text-xs text-secondary">
+								<span>{{ formatVersionType(v.version_type) }}</span>
+								<span>•</span>
+								<span>{{ formatRelativeTime(v.date_published) }}</span>
+							</div>
+						</div>
+						{{ formatVersionType(v.version_type) }}
+					</div>
+				</div>
+			</div>
+
+			<div v-else-if="currentStep === 'file'" class="space-y-3">
+				<div class="mb-2 flex items-center gap-2">
+					<div class="flex items-center gap-2">
+						<img
+							:src="selectedProject?.icon_url || 'https://cdn.modrinth.com/placeholder.png'"
+							:alt="selectedProject?.title || ''"
+							class="h-6 w-6 rounded-md object-cover"
+						/>
+						<span class="font-medium text-contrast">{{ selectedProject?.title }}</span>
+						<span class="text-secondary">→</span>
+						<span class="font-medium text-contrast">{{ selectedVersion?.version_number }}</span>
+					</div>
+				</div>
+
+				<span class="text-sm font-medium text-contrast">
+					Select a file to analyze <span class="text-brand-red">*</span>
+				</span>
+
+				<div
+					v-if="(files?.length ?? 0) > 0"
+					class="divide-border border-border max-h-64 divide-y overflow-y-auto rounded-lg border"
+				>
+					<div
+						v-for="f in files"
+						:key="f.hashes.sha512"
+						class="flex cursor-pointer items-center justify-between p-3 hover:bg-button-bg"
+						@click="chooseFile(f)"
+					>
+						<div class="flex items-center gap-2">
+							<FileIcon class="h-4 w-4 text-secondary" />
+							<div>
+								<div class="font-medium text-contrast">{{ f.filename }}</div>
+								<div class="text-xs text-secondary">{{ formatFileSize(f.size) }}</div>
+							</div>
+						</div>
+						Primary
+					</div>
+				</div>
+				<div v-else class="py-4 text-center text-secondary">No files in this version</div>
+			</div>
+
+			<div v-else-if="currentStep === 'review'" class="space-y-4">
+				<div class="flex items-center gap-2">
+					<ButtonStyled size="small" circular>
+						<button @click="setStep(previousStep, true)"><LeftArrowIcon class="h-4 w-4" /></button>
+					</ButtonStyled>
+					<div class="flex items-center gap-2">
+						<img
+							:src="selectedProject?.icon_url || 'https://cdn.modrinth.com/placeholder.png'"
+							:alt="selectedProject?.title || ''"
+							class="h-6 w-6 rounded-md object-cover"
+						/>
+						<span class="font-medium text-contrast">{{ selectedProject?.title }}</span>
+						<span class="text-secondary">→</span>
+						<span class="font-medium text-contrast">{{ selectedVersion?.version_number }}</span>
+					</div>
+				</div>
+
+				<div class="border-border rounded-lg border p-4">
+					<div class="space-y-2">
+						<div class="flex items-center gap-2">
+							<FileIcon class="h-4 w-4 text-secondary" />
+							<span class="font-medium text-contrast">{{ selectedFile?.filename }}</span>
+						</div>
+						<div class="text-sm text-secondary">{{ formatFileSize(selectedFile?.size) }}</div>
+						<div class="flex items-center gap-2 text-sm">
+							<span class="text-secondary">File ID:</span>
+							<code class="rounded bg-button-bg px-2 py-0.5 font-mono text-sm">
+								{{ fileId ?? '' }}
+							</code>
+						</div>
+					</div>
+				</div>
+			</div>
+		</div>
+
+		<div class="mt-4 flex justify-between gap-2">
+			<ButtonStyled>
+				<button v-if="previousStep" @click="setStep(previousStep, true)">
+					<LeftArrowIcon /> Back
+				</button>
+				<button v-else @click="modal?.hide()"><XIcon /> Cancel</button>
+			</ButtonStyled>
+
+			<ButtonStyled color="brand" v-if="currentStep === 'review'">
+				<button :disabled="!canProceed" @click="setStep(nextStep)">
+					<template>
+						<span v-if="submitting">Starting…</span>
+						<span v-else>Run Analysis</span>
+					</template>
+				</button>
+			</ButtonStyled>
+		</div>
+	</NewModal>
+</template>
diff --git a/apps/frontend/src/pages/moderation/technical-review-mockup.vue b/apps/frontend/src/pages/moderation/technical-review-mockup.vue
deleted file mode 100644
index 95e4c1fbb3..0000000000
--- a/apps/frontend/src/pages/moderation/technical-review-mockup.vue
+++ /dev/null
@@ -1,387 +0,0 @@
-<template>
-	<div class="flex flex-col gap-3">
-		<div class="flex flex-col justify-between gap-3 lg:flex-row">
-			<div class="iconified-input flex-1 lg:max-w-md">
-				<SearchIcon aria-hidden="true" class="text-lg" />
-				<input
-					v-model="query"
-					class="h-[40px]"
-					autocomplete="off"
-					spellcheck="false"
-					type="text"
-					:placeholder="formatMessage(messages.searchPlaceholder)"
-					@input="updateSearchResults()"
-				/>
-				<Button v-if="query" class="r-btn" @click="() => (query = '')">
-					<XIcon />
-				</Button>
-			</div>
-
-			<div v-if="totalPages > 1" class="hidden flex-1 justify-center lg:flex">
-				<Pagination :page="currentPage" :count="totalPages" @switch-page="goToPage" />
-			</div>
-
-			<div class="flex flex-col justify-end gap-2 sm:flex-row lg:flex-shrink-0">
-				<DropdownSelect
-					v-slot="{ selected }"
-					v-model="currentFilterType"
-					class="!w-full flex-grow sm:!w-[280px] sm:flex-grow-0 lg:!w-[280px]"
-					:name="formatMessage(messages.filterBy)"
-					:options="filterTypes as unknown[]"
-					@change="updateSearchResults()"
-				>
-					<span class="flex flex-row gap-2 align-middle font-semibold text-secondary">
-						<FilterIcon class="size-4 flex-shrink-0" />
-						<span class="truncate">{{ selected }} ({{ filteredReports.length }})</span>
-					</span>
-				</DropdownSelect>
-
-				<DropdownSelect
-					v-slot="{ selected }"
-					v-model="currentSortType"
-					class="!w-full flex-grow sm:!w-[150px] sm:flex-grow-0 lg:!w-[150px]"
-					:name="formatMessage(messages.sortBy)"
-					:options="sortTypes as unknown[]"
-					@change="updateSearchResults()"
-				>
-					<span class="flex flex-row gap-2 align-middle font-semibold text-secondary">
-						<SortAscIcon v-if="selected === 'Oldest'" class="size-4 flex-shrink-0" />
-						<SortDescIcon v-else class="size-4 flex-shrink-0" />
-						<span class="truncate">{{ selected }}</span>
-					</span>
-				</DropdownSelect>
-			</div>
-		</div>
-
-		<div v-if="totalPages > 1" class="flex justify-center lg:hidden">
-			<Pagination :page="currentPage" :count="totalPages" @switch-page="goToPage" />
-		</div>
-
-		<div class="mt-4 flex flex-col gap-2">
-			<DelphiReportCard
-				v-for="report in paginatedReports"
-				:key="report.version.id"
-				:report="report"
-			/>
-			<div
-				v-if="!paginatedReports || paginatedReports.length === 0"
-				class="universal-card h-24 animate-pulse"
-			></div>
-		</div>
-
-		<div v-if="totalPages > 1" class="mt-4 flex justify-center">
-			<Pagination :page="currentPage" :count="totalPages" @switch-page="goToPage" />
-		</div>
-	</div>
-</template>
-
-<script setup lang="ts">
-import { FilterIcon, SearchIcon, SortAscIcon, SortDescIcon, XIcon } from '@modrinth/assets'
-import type { ExtendedDelphiReport, OwnershipTarget } from '@modrinth/moderation'
-import { Button, DropdownSelect, Pagination } from '@modrinth/ui'
-import type { DelphiReport, Organization, Project, TeamMember, Version } from '@modrinth/utils'
-import { defineMessages, useVIntl } from '@vintl/vintl'
-import { useLocalStorage } from '@vueuse/core'
-import Fuse from 'fuse.js'
-
-import DelphiReportCard from '~/components/ui/moderation/ModerationDelphiReportCard.vue'
-import { asEncodedJsonArray, fetchSegmented } from '~/utils/fetch-helpers.ts'
-
-const { formatMessage } = useVIntl()
-const route = useRoute()
-const router = useRouter()
-
-const messages = defineMessages({
-	searchPlaceholder: {
-		id: 'moderation.technical.search.placeholder',
-		defaultMessage: 'Search tech reviews...',
-	},
-	filterBy: {
-		id: 'moderation.filter.by',
-		defaultMessage: 'Filter by',
-	},
-	sortBy: {
-		id: 'moderation.sort.by',
-		defaultMessage: 'Sort by',
-	},
-})
-
-async function getProjectQuicklyForMock(projectId: string): Promise<Project> {
-	return (await useBaseFetch(`project/${projectId}`)) as Project
-}
-
-async function getVersionQuicklyForMock(versionId: string): Promise<Version> {
-	return (await useBaseFetch(`version/${versionId}`)) as Version
-}
-
-const mockDelphiReports: DelphiReport[] = [
-	{
-		project: await getProjectQuicklyForMock('7MoE34WK'),
-		version: await getVersionQuicklyForMock('cTkKLWgA'),
-		trace_type: 'url_usage',
-		file_path: 'me/decce/gnetum/ASMEventHandlerHelper.java',
-		priority_score: 29,
-		status: 'pending',
-		detected_at: '2025-04-01T12:00:00Z',
-	} as DelphiReport,
-	{
-		project: await getProjectQuicklyForMock('7MoE34WK'),
-		version: await getVersionQuicklyForMock('cTkKLWgA'),
-		trace_type: 'url_usage',
-		file_path: 'me/decce/gnetum/SomeOtherFile.java',
-		priority_score: 48,
-		status: 'rejected',
-		detected_at: '2025-03-02T12:00:00Z',
-	} as DelphiReport,
-	{
-		project: await getProjectQuicklyForMock('7MoE34WK'),
-		version: await getVersionQuicklyForMock('cTkKLWgA'),
-		trace_type: 'url_usage',
-		file_path: 'me/decce/gnetum/YetAnotherFile.java',
-		priority_score: 15,
-		status: 'approved',
-		detected_at: '2025-02-03T12:00:00Z',
-	} as DelphiReport,
-]
-
-const { data: allReports } = await useAsyncData('moderation-tech-reviews', async () => {
-	// TODO: replace with actual API call
-	const delphiReports = mockDelphiReports
-
-	if (delphiReports.length === 0) {
-		return []
-	}
-
-	const teamIds = [...new Set(delphiReports.map((report) => report.project.team).filter(Boolean))]
-	const orgIds = [
-		...new Set(delphiReports.map((report) => report.project.organization).filter(Boolean)),
-	]
-
-	const [teamsData, orgsData]: [TeamMember[][], Organization[]] = await Promise.all([
-		teamIds.length > 0
-			? fetchSegmented(teamIds, (ids) => `teams?ids=${asEncodedJsonArray(ids)}`)
-			: Promise.resolve([]),
-		orgIds.length > 0
-			? fetchSegmented(orgIds, (ids) => `organizations?ids=${asEncodedJsonArray(ids)}`, {
-					apiVersion: 3,
-				})
-			: Promise.resolve([]),
-	])
-
-	const orgTeamIds = orgsData.map((org) => org.team_id).filter(Boolean)
-	const orgTeamsData: TeamMember[][] =
-		orgTeamIds.length > 0
-			? await fetchSegmented(orgTeamIds, (ids) => `teams?ids=${asEncodedJsonArray(ids)}`)
-			: []
-
-	const teamMap = new Map<string, TeamMember[]>()
-	const orgMap = new Map<string, Organization>()
-
-	teamsData.forEach((team) => {
-		let teamId = null
-		for (const member of team) {
-			teamId = member.team_id
-			if (!teamMap.has(teamId)) {
-				teamMap.set(teamId, team)
-				break
-			}
-		}
-	})
-
-	orgTeamsData.forEach((team) => {
-		let teamId = null
-		for (const member of team) {
-			teamId = member.team_id
-			if (!teamMap.has(teamId)) {
-				teamMap.set(teamId, team)
-				break
-			}
-		}
-	})
-
-	orgsData.forEach((org: Organization) => {
-		orgMap.set(org.id, org)
-	})
-
-	const extendedReports: ExtendedDelphiReport[] = delphiReports.map((report) => {
-		let target: OwnershipTarget | undefined
-		const project = report.project
-
-		if (project) {
-			let owner: TeamMember | null = null
-			let org: Organization | null = null
-
-			if (project.team) {
-				const teamMembers = teamMap.get(project.team)
-				if (teamMembers) {
-					owner = teamMembers.find((member) => member.role === 'Owner') || null
-				}
-			}
-
-			if (project.organization) {
-				org = orgMap.get(project.organization) || null
-			}
-
-			if (org) {
-				target = {
-					name: org.name,
-					avatar_url: org.icon_url,
-					type: 'organization',
-					slug: org.slug,
-				}
-			} else if (owner) {
-				target = {
-					name: owner.user.username,
-					avatar_url: owner.user.avatar_url,
-					type: 'user',
-					slug: owner.user.username,
-				}
-			}
-		}
-
-		return {
-			...report,
-			target,
-		}
-	})
-
-	extendedReports.sort((a, b) => b.priority_score - a.priority_score)
-
-	return extendedReports
-})
-
-const query = ref(route.query.q?.toString() || '')
-watch(
-	query,
-	(newQuery) => {
-		const currentQuery = { ...route.query }
-		if (newQuery) {
-			currentQuery.q = newQuery
-		} else {
-			delete currentQuery.q
-		}
-
-		router.replace({
-			path: route.path,
-			query: currentQuery,
-		})
-	},
-	{ immediate: false },
-)
-
-watch(
-	() => route.query.q,
-	(newQueryParam) => {
-		const newValue = newQueryParam?.toString() || ''
-		if (query.value !== newValue) {
-			query.value = newValue
-		}
-	},
-)
-
-const currentFilterType = useLocalStorage('moderation-tech-reviews-filter-type', () => 'Pending')
-const filterTypes: readonly string[] = readonly(['All', 'Pending', 'Approved', 'Rejected'])
-
-const currentSortType = useLocalStorage('moderation-tech-reviews-sort-type', () => 'Priority')
-const sortTypes: readonly string[] = readonly(['Priority', 'Oldest', 'Newest'])
-
-const currentPage = ref(1)
-const itemsPerPage = 15
-const totalPages = computed(() => Math.ceil((filteredReports.value?.length || 0) / itemsPerPage))
-
-const fuse = computed(() => {
-	if (!allReports.value || allReports.value.length === 0) return null
-	return new Fuse(allReports.value, {
-		keys: [
-			{
-				name: 'version.id',
-				weight: 3,
-			},
-			{
-				name: 'version.version_number',
-				weight: 3,
-			},
-			{
-				name: 'project.title',
-				weight: 3,
-			},
-			{
-				name: 'project.slug',
-				weight: 3,
-			},
-			{
-				name: 'version.files.filename',
-				weight: 2,
-			},
-			{
-				name: 'trace_type',
-				weight: 2,
-			},
-			{
-				name: 'content',
-				weight: 0.5,
-			},
-			'file_path',
-			'project.id',
-			'target.name',
-			'target.slug',
-		],
-		includeScore: true,
-		threshold: 0.4,
-	})
-})
-
-const filteredReports = computed(() => {
-	if (!allReports.value) return []
-
-	let filtered
-
-	if (query.value && fuse.value) {
-		const results = fuse.value.search(query.value)
-		filtered = results.map((result) => result.item)
-	} else {
-		filtered = [...allReports.value]
-	}
-
-	if (currentFilterType.value === 'Pending') {
-		filtered = filtered.filter((report) => report.status === 'pending')
-	} else if (currentFilterType.value === 'Approved') {
-		filtered = filtered.filter((report) => report.status === 'approved')
-	} else if (currentFilterType.value === 'Rejected') {
-		filtered = filtered.filter((report) => report.status === 'rejected')
-	}
-
-	if (currentSortType.value === 'Priority') {
-		filtered.sort((a, b) => b.priority_score - a.priority_score)
-	} else if (currentSortType.value === 'Oldest') {
-		filtered.sort((a, b) => {
-			const dateA = new Date(a.detected_at).getTime()
-			const dateB = new Date(b.detected_at).getTime()
-			return dateA - dateB
-		})
-	} else {
-		filtered.sort((a, b) => {
-			const dateA = new Date(a.detected_at).getTime()
-			const dateB = new Date(b.detected_at).getTime()
-			return dateB - dateA
-		})
-	}
-
-	return filtered
-})
-
-const paginatedReports = computed(() => {
-	if (!filteredReports.value) return []
-	const start = (currentPage.value - 1) * itemsPerPage
-	const end = start + itemsPerPage
-	return filteredReports.value.slice(start, end)
-})
-
-function updateSearchResults() {
-	currentPage.value = 1
-}
-
-function goToPage(page: number) {
-	currentPage.value = page
-}
-</script>
diff --git a/apps/frontend/src/pages/moderation/technical-review.vue b/apps/frontend/src/pages/moderation/technical-review.vue
index 3a5ae57552..32ee5c62c4 100644
--- a/apps/frontend/src/pages/moderation/technical-review.vue
+++ b/apps/frontend/src/pages/moderation/technical-review.vue
@@ -1,3 +1,15 @@
+<script setup lang="ts">
+import RunDelphiModal from '~/components/ui/moderation/delphi/RunDelphiModal.vue'
+
+const modal = ref<InstanceType<typeof RunDelphiModal>>()
+function openRunDelphi() {
+	modal.value?.show()
+}
+</script>
+
 <template>
-	<p>Not yet implemented.</p>
+	<RunDelphiModal ref="modal" @started="() => {}" />
+	<section class="card">
+		<button @click="openRunDelphi">Run Delphi</button>
+	</section>
 </template>
diff --git a/apps/labrinth/.env.docker-compose b/apps/labrinth/.env.docker-compose
index 9644111a97..84a927ade6 100644
--- a/apps/labrinth/.env.docker-compose
+++ b/apps/labrinth/.env.docker-compose
@@ -123,7 +123,7 @@ PYRO_API_KEY=none
 BREX_API_URL=https://platform.brexapis.com/v2/
 BREX_API_KEY=none
 
-DELPHI_URL=none
+DELPHI_URL=http://labrinth-delphi:8001
 DELPHI_SLACK_WEBHOOK=none
 
 ARCHON_URL=none
diff --git a/apps/labrinth/.env.local b/apps/labrinth/.env.local
index aa07fa2069..54eedbfd31 100644
--- a/apps/labrinth/.env.local
+++ b/apps/labrinth/.env.local
@@ -123,7 +123,7 @@ PYRO_API_KEY=none
 BREX_API_URL=https://platform.brexapis.com/v2/
 BREX_API_KEY=none
 
-DELPHI_URL=none
+DELPHI_URL=http://delphi:8001
 DELPHI_SLACK_WEBHOOK=none
 
 ARCHON_URL=none
diff --git a/apps/labrinth/.sqlx/query-0080a101c9ae040adbaadf9e46fbc457a08e70dcde320c6852074819e41f8ad9.json b/apps/labrinth/.sqlx/query-0080a101c9ae040adbaadf9e46fbc457a08e70dcde320c6852074819e41f8ad9.json
new file mode 100644
index 0000000000..37dcad2943
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-0080a101c9ae040adbaadf9e46fbc457a08e70dcde320c6852074819e41f8ad9.json
@@ -0,0 +1,24 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            INSERT INTO delphi_report_issue_java_classes (issue_id, internal_class_name, decompiled_source)\n            VALUES ($1, $2, $3)\n            ON CONFLICT (issue_id, internal_class_name) DO UPDATE SET decompiled_source = $3\n            RETURNING id\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "0080a101c9ae040adbaadf9e46fbc457a08e70dcde320c6852074819e41f8ad9"
+}
diff --git a/apps/labrinth/.sqlx/query-0ed2e6e3149352d12a673fddc50f9530c311eef084abb6fce35de5f37d79bcea.json b/apps/labrinth/.sqlx/query-0ed2e6e3149352d12a673fddc50f9530c311eef084abb6fce35de5f37d79bcea.json
new file mode 100644
index 0000000000..6f7b991949
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-0ed2e6e3149352d12a673fddc50f9530c311eef084abb6fce35de5f37d79bcea.json
@@ -0,0 +1,34 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT\n            version_id AS \"version_id: crate::database::models::DBVersionId\",\n            versions.mod_id AS \"project_id: crate::database::models::DBProjectId\",\n            files.url AS \"url\"\n        FROM files INNER JOIN versions ON files.version_id = versions.id\n        WHERE files.id = $1\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "version_id: crate::database::models::DBVersionId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "project_id: crate::database::models::DBProjectId",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "url",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "0ed2e6e3149352d12a673fddc50f9530c311eef084abb6fce35de5f37d79bcea"
+}
diff --git a/apps/labrinth/.sqlx/query-10a332091be118f580d50ceb7a8724e9a4d5b9765d52305f99f859f939c2e854.json b/apps/labrinth/.sqlx/query-10a332091be118f580d50ceb7a8724e9a4d5b9765d52305f99f859f939c2e854.json
new file mode 100644
index 0000000000..963ea430b4
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-10a332091be118f580d50ceb7a8724e9a4d5b9765d52305f99f859f939c2e854.json
@@ -0,0 +1,63 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n                INSERT INTO delphi_report_issues (report_id, issue_type, status)\n                VALUES ($1, $2, $3)\n                ON CONFLICT (report_id, issue_type) DO UPDATE SET status = $3\n                RETURNING id\n                ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8",
+        {
+          "Custom": {
+            "name": "delphi_report_issue_type",
+            "kind": {
+              "Enum": [
+                "reflection_indirection",
+                "xor_obfuscation",
+                "included_libraries",
+                "suspicious_binaries",
+                "corrupt_classes",
+                "suspicious_classes",
+                "url_usage",
+                "classloader_usage",
+                "processbuilder_usage",
+                "runtime_exec_usage",
+                "jni_usage",
+                "main_method",
+                "native_loading",
+                "malformed_jar",
+                "nested_jar_too_deep",
+                "failed_decompilation",
+                "analysis_failure",
+                "malware_easyforme",
+                "malware_simplyloader",
+                "unknown"
+              ]
+            }
+          }
+        },
+        {
+          "Custom": {
+            "name": "delphi_report_issue_status",
+            "kind": {
+              "Enum": [
+                "pending",
+                "approved",
+                "rejected"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "10a332091be118f580d50ceb7a8724e9a4d5b9765d52305f99f859f939c2e854"
+}
diff --git a/apps/labrinth/.sqlx/query-8f1f75d9c52a5a340aae2b3fd863153f5e9796b55ae753ab57b14f37708b400d.json b/apps/labrinth/.sqlx/query-8f1f75d9c52a5a340aae2b3fd863153f5e9796b55ae753ab57b14f37708b400d.json
new file mode 100644
index 0000000000..de31a078f0
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-8f1f75d9c52a5a340aae2b3fd863153f5e9796b55ae753ab57b14f37708b400d.json
@@ -0,0 +1,24 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            INSERT INTO delphi_reports (file_id, delphi_version, artifact_url)\n            VALUES ($1, $2, $3)\n            ON CONFLICT (file_id, delphi_version) DO UPDATE SET\n                delphi_version = $2, artifact_url = $3, created = CURRENT_TIMESTAMP\n            RETURNING id\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Int8",
+        "Int4",
+        "Varchar"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "8f1f75d9c52a5a340aae2b3fd863153f5e9796b55ae753ab57b14f37708b400d"
+}
diff --git a/apps/labrinth/.sqlx/query-c1cd83ddcd112e46477a195e8bed0a1658c6ddf7a486082cdb847fab06150328.json b/apps/labrinth/.sqlx/query-c1cd83ddcd112e46477a195e8bed0a1658c6ddf7a486082cdb847fab06150328.json
new file mode 100644
index 0000000000..54969cea41
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-c1cd83ddcd112e46477a195e8bed0a1658c6ddf7a486082cdb847fab06150328.json
@@ -0,0 +1,164 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            SELECT\n                delphi_report_issues.id AS \"id\", report_id,\n                issue_type AS \"issue_type: DelphiReportIssueType\",\n                delphi_report_issues.status as \"status: DelphiReportIssueStatus\",\n\n                file_id, delphi_version, artifact_url, created,\n                json_array(SELECT to_jsonb(delphi_report_issue_java_classes)\n                    FROM delphi_report_issue_java_classes\n                    WHERE issue_id = delphi_report_issues.id\n                ) AS \"classes: sqlx::types::Json<Vec<DBDelphiReportIssueJavaClass>>\",\n                versions.mod_id AS \"project_id?\", mods.published AS \"project_published?\"\n            FROM delphi_report_issues\n            INNER JOIN delphi_reports ON delphi_reports.id = report_id\n            LEFT OUTER JOIN files ON files.id = file_id\n            LEFT OUTER JOIN versions ON versions.id = files.version_id\n            LEFT OUTER JOIN mods ON mods.id = versions.mod_id\n            WHERE\n                (issue_type = $1 OR $1 IS NULL)\n                AND (delphi_report_issues.status = $2 OR $2 IS NULL)\n            ORDER BY\n                CASE WHEN $3 = 'created_asc' THEN delphi_reports.created ELSE TO_TIMESTAMP(0) END ASC,\n                CASE WHEN $3 = 'created_desc' THEN delphi_reports.created ELSE TO_TIMESTAMP(0) END DESC,\n                CASE WHEN $3 = 'pending_status_first' THEN delphi_report_issues.status ELSE 'pending'::delphi_report_issue_status END ASC\n            OFFSET $5\n            LIMIT $4\n            ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "report_id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "issue_type: DelphiReportIssueType",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_report_issue_type",
+            "kind": {
+              "Enum": [
+                "reflection_indirection",
+                "xor_obfuscation",
+                "included_libraries",
+                "suspicious_binaries",
+                "corrupt_classes",
+                "suspicious_classes",
+                "url_usage",
+                "classloader_usage",
+                "processbuilder_usage",
+                "runtime_exec_usage",
+                "jni_usage",
+                "main_method",
+                "native_loading",
+                "malformed_jar",
+                "nested_jar_too_deep",
+                "failed_decompilation",
+                "analysis_failure",
+                "malware_easyforme",
+                "malware_simplyloader",
+                "unknown"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 3,
+        "name": "status: DelphiReportIssueStatus",
+        "type_info": {
+          "Custom": {
+            "name": "delphi_report_issue_status",
+            "kind": {
+              "Enum": [
+                "pending",
+                "approved",
+                "rejected"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 4,
+        "name": "file_id",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 5,
+        "name": "delphi_version",
+        "type_info": "Int4"
+      },
+      {
+        "ordinal": 6,
+        "name": "artifact_url",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "created",
+        "type_info": "Timestamptz"
+      },
+      {
+        "ordinal": 8,
+        "name": "classes: sqlx::types::Json<Vec<DBDelphiReportIssueJavaClass>>",
+        "type_info": "Jsonb"
+      },
+      {
+        "ordinal": 9,
+        "name": "project_id?",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 10,
+        "name": "project_published?",
+        "type_info": "Timestamptz"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        {
+          "Custom": {
+            "name": "delphi_report_issue_type",
+            "kind": {
+              "Enum": [
+                "reflection_indirection",
+                "xor_obfuscation",
+                "included_libraries",
+                "suspicious_binaries",
+                "corrupt_classes",
+                "suspicious_classes",
+                "url_usage",
+                "classloader_usage",
+                "processbuilder_usage",
+                "runtime_exec_usage",
+                "jni_usage",
+                "main_method",
+                "native_loading",
+                "malformed_jar",
+                "nested_jar_too_deep",
+                "failed_decompilation",
+                "analysis_failure",
+                "malware_easyforme",
+                "malware_simplyloader",
+                "unknown"
+              ]
+            }
+          }
+        },
+        {
+          "Custom": {
+            "name": "delphi_report_issue_status",
+            "kind": {
+              "Enum": [
+                "pending",
+                "approved",
+                "rejected"
+              ]
+            }
+          }
+        },
+        "Text",
+        "Int8",
+        "Int8"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      true,
+      false,
+      false,
+      false,
+      null,
+      true,
+      true
+    ]
+  },
+  "hash": "c1cd83ddcd112e46477a195e8bed0a1658c6ddf7a486082cdb847fab06150328"
+}
diff --git a/apps/labrinth/.sqlx/query-fe571872262fe7d119b4b6eb1e55d818fde0499d8e5a08e9e22bee42014877f3.json b/apps/labrinth/.sqlx/query-fe571872262fe7d119b4b6eb1e55d818fde0499d8e5a08e9e22bee42014877f3.json
new file mode 100644
index 0000000000..38db606828
--- /dev/null
+++ b/apps/labrinth/.sqlx/query-fe571872262fe7d119b4b6eb1e55d818fde0499d8e5a08e9e22bee42014877f3.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT MAX(delphi_version) FROM delphi_reports",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "max",
+        "type_info": "Int4"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "fe571872262fe7d119b4b6eb1e55d818fde0499d8e5a08e9e22bee42014877f3"
+}
diff --git a/apps/labrinth/migrations/20250810155316_delphi-reports.sql b/apps/labrinth/migrations/20250810155316_delphi-reports.sql
new file mode 100644
index 0000000000..4bc15e705b
--- /dev/null
+++ b/apps/labrinth/migrations/20250810155316_delphi-reports.sql
@@ -0,0 +1,64 @@
+CREATE TYPE delphi_report_issue_status AS ENUM ('pending', 'approved', 'rejected');
+
+CREATE TYPE delphi_report_issue_type AS ENUM (
+	'reflection_indirection',
+	'xor_obfuscation',
+	'included_libraries',
+	'suspicious_binaries',
+	'corrupt_classes',
+	'suspicious_classes',
+	'url_usage',
+	'classloader_usage',
+	'processbuilder_usage',
+	'runtime_exec_usage',
+	'jni_usage',
+	'main_method',
+	'native_loading',
+	'malformed_jar',
+	'nested_jar_too_deep',
+	'failed_decompilation',
+	'analysis_failure',
+	'malware_easyforme',
+	'malware_simplyloader',
+	'unknown'
+);
+
+-- A Delphi analysis report for a project version
+CREATE TABLE delphi_reports (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	file_id BIGINT REFERENCES files (id)
+		ON DELETE SET NULL
+		ON UPDATE CASCADE,
+	delphi_version INTEGER NOT NULL,
+	artifact_url VARCHAR(2048) NOT NULL,
+	created TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP NOT NULL,
+	UNIQUE (file_id, delphi_version)
+);
+CREATE INDEX delphi_version ON delphi_reports (delphi_version);
+
+-- An issue found in a Delphi report. Every issue belongs to a report,
+-- and a report can have zero, one, or more issues attached to it
+CREATE TABLE delphi_report_issues (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	report_id BIGINT NOT NULL REFERENCES delphi_reports (id)
+		ON DELETE CASCADE
+		ON UPDATE CASCADE,
+	issue_type DELPHI_REPORT_ISSUE_TYPE NOT NULL,
+	status DELPHI_REPORT_ISSUE_STATUS NOT NULL,
+	UNIQUE (report_id, issue_type)
+);
+CREATE INDEX delphi_report_issue_by_status_and_type ON delphi_report_issues (status, issue_type);
+
+-- A Java class affected by a Delphi report issue. Every affected
+-- Java class belongs to a specific issue, and an issue can have zero,
+-- one, or more affected classes. (Some issues may be artifact-wide,
+-- or otherwise not really specific to any particular class.)
+CREATE TABLE delphi_report_issue_java_classes (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	issue_id BIGINT NOT NULL REFERENCES delphi_report_issues (id)
+		ON DELETE CASCADE
+		ON UPDATE CASCADE,
+	internal_class_name TEXT NOT NULL,
+	decompiled_source TEXT NOT NULL,
+	UNIQUE (issue_id, internal_class_name)
+);
diff --git a/apps/labrinth/src/database/models/delphi_report_item.rs b/apps/labrinth/src/database/models/delphi_report_item.rs
new file mode 100644
index 0000000000..8d83bc7dd2
--- /dev/null
+++ b/apps/labrinth/src/database/models/delphi_report_item.rs
@@ -0,0 +1,334 @@
+use std::{
+    fmt::{self, Display, Formatter},
+    ops::Deref,
+};
+
+use chrono::{DateTime, Utc};
+use serde::{Deserialize, Serialize};
+
+use crate::database::models::{
+    DBFileId, DBProjectId, DatabaseError, DelphiReportId, DelphiReportIssueId,
+    DelphiReportIssueJavaClassId,
+};
+
+/// A Delphi malware analysis report for a project version file.
+///
+/// Malware analysis reports usually belong to a specific project file,
+/// but they can get orphaned if the versions they belong to are deleted.
+/// Thus, deleting versions does not delete these reports.
+#[derive(Serialize)]
+pub struct DBDelphiReport {
+    pub id: DelphiReportId,
+    pub file_id: Option<DBFileId>,
+    /// A sequential, monotonically increasing version number for the
+    /// Delphi version that generated this report.
+    pub delphi_version: i32,
+    pub artifact_url: String,
+    pub created: DateTime<Utc>,
+}
+
+impl DBDelphiReport {
+    pub async fn upsert(
+        &self,
+        transaction: &mut sqlx::Transaction<'_, sqlx::Postgres>,
+    ) -> Result<DelphiReportId, DatabaseError> {
+        Ok(DelphiReportId(sqlx::query_scalar!(
+            "
+            INSERT INTO delphi_reports (file_id, delphi_version, artifact_url)
+            VALUES ($1, $2, $3)
+            ON CONFLICT (file_id, delphi_version) DO UPDATE SET
+                delphi_version = $2, artifact_url = $3, created = CURRENT_TIMESTAMP
+            RETURNING id
+            ",
+            self.file_id as Option<DBFileId>,
+            self.delphi_version,
+            self.artifact_url,
+        )
+        .fetch_one(&mut **transaction)
+        .await?))
+    }
+}
+
+/// An issue found in a Delphi report. Every issue belongs to a report,
+/// and a report can have zero, one, or more issues attached to it.
+#[derive(Deserialize, Serialize)]
+pub struct DBDelphiReportIssue {
+    pub id: DelphiReportIssueId,
+    pub report_id: DelphiReportId,
+    pub issue_type: DelphiReportIssueType,
+    pub status: DelphiReportIssueStatus,
+}
+
+/// An status a Delphi report issue can have.
+#[derive(
+    Deserialize, Serialize, Debug, Clone, Copy, PartialEq, Eq, Hash, sqlx::Type,
+)]
+#[serde(rename_all = "snake_case")]
+#[sqlx(type_name = "delphi_report_issue_status")]
+#[sqlx(rename_all = "snake_case")]
+pub enum DelphiReportIssueStatus {
+    /// The issue is pending review by the moderation team.
+    Pending,
+    /// The issue has been approved (i.e., reviewed as a valid, true positive).
+    /// The affected artifact has thus been verified to be potentially malicious.
+    Approved,
+    /// The issue has been rejected (i.e., reviewed as a false positive).
+    /// The affected artifact has thus been verified to be clean, other issues
+    /// with it notwithstanding.
+    Rejected,
+}
+
+impl Display for DelphiReportIssueStatus {
+    fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result {
+        self.serialize(f)
+    }
+}
+
+/// An order in which Delphi report issues can be sorted during queries.
+#[derive(Deserialize, Serialize, Debug, Clone, Copy, PartialEq, Eq, Hash)]
+#[serde(rename_all = "snake_case")]
+pub enum DelphiReportListOrder {
+    CreatedAsc,
+    CreatedDesc,
+    PendingStatusFirst,
+}
+
+impl Display for DelphiReportListOrder {
+    fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result {
+        self.serialize(f)
+    }
+}
+
+/// A result returned from a Delphi report issue query, slightly
+/// denormalized with related entity information for ease of
+/// consumption by clients.
+#[derive(Serialize)]
+pub struct DelphiReportIssueResult {
+    pub issue: DBDelphiReportIssue,
+    pub report: DBDelphiReport,
+    pub java_classes: Vec<DBDelphiReportIssueJavaClass>,
+    pub project_id: Option<DBProjectId>,
+    pub project_published: Option<DateTime<Utc>>,
+}
+
+impl DBDelphiReportIssue {
+    pub async fn upsert(
+        &self,
+        transaction: &mut sqlx::Transaction<'_, sqlx::Postgres>,
+    ) -> Result<DelphiReportIssueId, DatabaseError> {
+        Ok(DelphiReportIssueId(
+            sqlx::query_scalar!(
+                "
+                INSERT INTO delphi_report_issues (report_id, issue_type, status)
+                VALUES ($1, $2, $3)
+                ON CONFLICT (report_id, issue_type) DO UPDATE SET status = $3
+                RETURNING id
+                ",
+                self.report_id as DelphiReportId,
+                self.issue_type as DelphiReportIssueType,
+                self.status as DelphiReportIssueStatus,
+            )
+            .fetch_one(&mut **transaction)
+            .await?,
+        ))
+    }
+
+    pub async fn find_all_by(
+        ty: Option<DelphiReportIssueType>,
+        status: Option<DelphiReportIssueStatus>,
+        order_by: Option<DelphiReportListOrder>,
+        count: Option<u16>,
+        offset: Option<i64>,
+        exec: impl sqlx::Executor<'_, Database = sqlx::Postgres>,
+    ) -> Result<Vec<DelphiReportIssueResult>, DatabaseError> {
+        Ok(sqlx::query!(
+            r#"
+            SELECT
+                delphi_report_issues.id AS "id", report_id,
+                issue_type AS "issue_type: DelphiReportIssueType",
+                delphi_report_issues.status as "status: DelphiReportIssueStatus",
+
+                file_id, delphi_version, artifact_url, created,
+                json_array(SELECT to_jsonb(delphi_report_issue_java_classes)
+                    FROM delphi_report_issue_java_classes
+                    WHERE issue_id = delphi_report_issues.id
+                ) AS "classes: sqlx::types::Json<Vec<DBDelphiReportIssueJavaClass>>",
+                versions.mod_id AS "project_id?", mods.published AS "project_published?"
+            FROM delphi_report_issues
+            INNER JOIN delphi_reports ON delphi_reports.id = report_id
+            LEFT OUTER JOIN files ON files.id = file_id
+            LEFT OUTER JOIN versions ON versions.id = files.version_id
+            LEFT OUTER JOIN mods ON mods.id = versions.mod_id
+            WHERE
+                (issue_type = $1 OR $1 IS NULL)
+                AND (delphi_report_issues.status = $2 OR $2 IS NULL)
+            ORDER BY
+                CASE WHEN $3 = 'created_asc' THEN delphi_reports.created ELSE TO_TIMESTAMP(0) END ASC,
+                CASE WHEN $3 = 'created_desc' THEN delphi_reports.created ELSE TO_TIMESTAMP(0) END DESC,
+                CASE WHEN $3 = 'pending_status_first' THEN delphi_report_issues.status ELSE 'pending'::delphi_report_issue_status END ASC
+            OFFSET $5
+            LIMIT $4
+            "#,
+            ty as Option<DelphiReportIssueType>,
+            status as Option<DelphiReportIssueStatus>,
+            order_by.map(|order_by| order_by.to_string()),
+            count.map(|count| count as i64),
+            offset,
+        )
+        .map(|row| DelphiReportIssueResult {
+            issue: DBDelphiReportIssue {
+                id: DelphiReportIssueId(row.id),
+                report_id: DelphiReportId(row.report_id),
+                issue_type: row.issue_type,
+                status: row.status,
+            },
+            report: DBDelphiReport {
+                id: DelphiReportId(row.report_id),
+                file_id: row.file_id.map(DBFileId),
+                delphi_version: row.delphi_version,
+                artifact_url: row.artifact_url,
+                created: row.created,
+            },
+            java_classes: row
+                .classes
+                .into_iter()
+                .flat_map(|class_list| class_list.0)
+                .collect(),
+            project_id: row.project_id.map(DBProjectId),
+            project_published: row.project_published,
+        })
+        .fetch_all(exec)
+        .await?)
+    }
+}
+
+/// A type of issue found by Delphi for an artifact.
+#[derive(
+    Deserialize, Serialize, Debug, Clone, Copy, PartialEq, Eq, Hash, sqlx::Type,
+)]
+#[serde(rename_all = "snake_case")]
+#[sqlx(type_name = "delphi_report_issue_type")]
+#[sqlx(rename_all = "snake_case")]
+pub enum DelphiReportIssueType {
+    ReflectionIndirection,
+    XorObfuscation,
+    IncludedLibraries,
+    SuspiciousBinaries,
+    CorruptClasses,
+    SuspiciousClasses,
+
+    UrlUsage,
+    ClassloaderUsage,
+    ProcessbuilderUsage,
+    RuntimeExecUsage,
+    #[serde(rename = "jni_usage")]
+    #[sqlx(rename = "jni_usage")]
+    JNIUsage,
+
+    MainMethod,
+    NativeLoading,
+
+    MalformedJar,
+    NestedJarTooDeep,
+    FailedDecompilation,
+    #[serde(alias = "ANALYSIS FAILURE!")]
+    AnalysisFailure,
+
+    MalwareEasyforme,
+    MalwareSimplyloader,
+
+    /// An issue reported by Delphi but not known by labrinth yet.
+    #[serde(other)]
+    Unknown,
+}
+
+impl Display for DelphiReportIssueType {
+    fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result {
+        self.serialize(f)
+    }
+}
+
+/// A Java class affected by a Delphi report issue. Every affected
+/// Java class belongs to a specific issue, and an issue can have zero,
+/// one, or more affected classes. (Some issues may be artifact-wide,
+/// or otherwise not really specific to any particular class.)
+#[derive(Debug, Deserialize, Serialize)]
+pub struct DBDelphiReportIssueJavaClass {
+    pub id: DelphiReportIssueJavaClassId,
+    pub issue_id: DelphiReportIssueId,
+    pub internal_class_name: InternalJavaClassName,
+    pub decompiled_source: DecompiledJavaClassSource,
+}
+
+impl DBDelphiReportIssueJavaClass {
+    pub async fn upsert(
+        &self,
+        transaction: &mut sqlx::Transaction<'_, sqlx::Postgres>,
+    ) -> Result<DelphiReportIssueJavaClassId, DatabaseError> {
+        Ok(DelphiReportIssueJavaClassId(sqlx::query_scalar!(
+            "
+            INSERT INTO delphi_report_issue_java_classes (issue_id, internal_class_name, decompiled_source)
+            VALUES ($1, $2, $3)
+            ON CONFLICT (issue_id, internal_class_name) DO UPDATE SET decompiled_source = $3
+            RETURNING id
+            ",
+            self.issue_id as DelphiReportIssueId,
+            self.internal_class_name.0,
+            self.decompiled_source.0,
+        )
+        .fetch_one(&mut **transaction)
+        .await?))
+    }
+}
+
+/// A [Java class name] with dots replaced by forward slashes (/).
+///
+/// Because class names are usually the [binary names] passed to a classloader, top level interfaces and classes
+/// have a binary name that matches its canonical, fully qualified name, such canonical names are prefixed by the
+/// package path the class is in, and packages usually match the directory structure within a JAR for typical
+/// classloaders, this usually (but not necessarily) corresponds to the path to the class file within its JAR.
+///
+/// [Java class name]: https://docs.oracle.com/en/java/javase/21/docs/api/java.base/java/lang/Class.html#getName()
+/// [binary names]: https://docs.oracle.com/javase/specs/jls/se21/html/jls-13.html#jls-13.1
+#[derive(
+    Deserialize, Serialize, Debug, Clone, PartialEq, Eq, Hash, sqlx::Type,
+)]
+#[serde(transparent)]
+#[sqlx(transparent)]
+pub struct InternalJavaClassName(String);
+
+impl Deref for InternalJavaClassName {
+    type Target = String;
+
+    fn deref(&self) -> &Self::Target {
+        &self.0
+    }
+}
+
+impl Display for InternalJavaClassName {
+    fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result {
+        write!(f, "{}", self.0)
+    }
+}
+
+/// The decompiled source code of a Java class.
+#[derive(
+    Deserialize, Serialize, Debug, Clone, PartialEq, Eq, Hash, sqlx::Type,
+)]
+#[serde(transparent)]
+#[sqlx(transparent)]
+pub struct DecompiledJavaClassSource(String);
+
+impl Deref for DecompiledJavaClassSource {
+    type Target = String;
+
+    fn deref(&self) -> &Self::Target {
+        &self.0
+    }
+}
+
+impl Display for DecompiledJavaClassSource {
+    fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result {
+        write!(f, "{}", self.0)
+    }
+}
diff --git a/apps/labrinth/src/database/models/ids.rs b/apps/labrinth/src/database/models/ids.rs
index 795862cef2..668dfbc461 100644
--- a/apps/labrinth/src/database/models/ids.rs
+++ b/apps/labrinth/src/database/models/ids.rs
@@ -137,8 +137,8 @@ macro_rules! db_id_interface {
     };
 }
 
-macro_rules! short_id_type {
-    ($name:ident) => {
+macro_rules! id_type {
+    ($name:ident as $type:ty) => {
         #[derive(
             Copy,
             Clone,
@@ -151,7 +151,7 @@ macro_rules! short_id_type {
             Hash,
         )]
         #[sqlx(transparent)]
-        pub struct $name(pub i32);
+        pub struct $name(pub $type);
     };
 }
 
@@ -261,14 +261,17 @@ db_id_interface!(
     generator: generate_version_id @ "versions",
 );
 
-short_id_type!(CategoryId);
-short_id_type!(GameId);
-short_id_type!(LinkPlatformId);
-short_id_type!(LoaderFieldEnumId);
-short_id_type!(LoaderFieldEnumValueId);
-short_id_type!(LoaderFieldId);
-short_id_type!(LoaderId);
-short_id_type!(NotificationActionId);
-short_id_type!(ProjectTypeId);
-short_id_type!(ReportTypeId);
-short_id_type!(StatusId);
+id_type!(CategoryId as i32);
+id_type!(GameId as i32);
+id_type!(LinkPlatformId as i32);
+id_type!(LoaderFieldEnumId as i32);
+id_type!(LoaderFieldEnumValueId as i32);
+id_type!(LoaderFieldId as i32);
+id_type!(LoaderId as i32);
+id_type!(NotificationActionId as i32);
+id_type!(ProjectTypeId as i32);
+id_type!(ReportTypeId as i32);
+id_type!(StatusId as i32);
+id_type!(DelphiReportId as i64);
+id_type!(DelphiReportIssueId as i64);
+id_type!(DelphiReportIssueJavaClassId as i64);
diff --git a/apps/labrinth/src/database/models/mod.rs b/apps/labrinth/src/database/models/mod.rs
index 4ef40cf1c3..5d9956668a 100644
--- a/apps/labrinth/src/database/models/mod.rs
+++ b/apps/labrinth/src/database/models/mod.rs
@@ -3,6 +3,7 @@ use thiserror::Error;
 pub mod categories;
 pub mod charge_item;
 pub mod collection_item;
+pub mod delphi_report_item;
 pub mod flow_item;
 pub mod friend_item;
 pub mod ids;
diff --git a/apps/labrinth/src/database/models/version_item.rs b/apps/labrinth/src/database/models/version_item.rs
index 0aae95b29f..46c34390fc 100644
--- a/apps/labrinth/src/database/models/version_item.rs
+++ b/apps/labrinth/src/database/models/version_item.rs
@@ -6,6 +6,7 @@ use crate::database::models::loader_fields::{
 };
 use crate::database::redis::RedisPool;
 use crate::models::projects::{FileType, VersionStatus};
+use crate::routes::internal::delphi::DelphiRunParameters;
 use chrono::{DateTime, Utc};
 use dashmap::{DashMap, DashSet};
 use futures::TryStreamExt;
@@ -164,6 +165,15 @@ impl VersionFileBuilder {
             .await?;
         }
 
+        if let Err(err) = crate::routes::internal::delphi::run(
+            &mut **transaction,
+            DelphiRunParameters { file_id },
+        )
+        .await
+        {
+            tracing::error!("Error submitting new file to Delphi: {err}");
+        }
+
         Ok(file_id)
     }
 }
diff --git a/apps/labrinth/src/routes/internal/admin.rs b/apps/labrinth/src/routes/internal/admin.rs
index 3be7e013f3..945737f90c 100644
--- a/apps/labrinth/src/routes/internal/admin.rs
+++ b/apps/labrinth/src/routes/internal/admin.rs
@@ -1,13 +1,10 @@
 use crate::auth::validate::get_user_record_from_bearer_token;
-use crate::database::models::thread_item::ThreadMessageBuilder;
 use crate::database::redis::RedisPool;
 use crate::models::analytics::Download;
 use crate::models::ids::ProjectId;
 use crate::models::pats::Scopes;
-use crate::models::threads::MessageBody;
 use crate::queue::analytics::AnalyticsQueue;
 use crate::queue::maxmind::MaxMindIndexer;
-use crate::queue::moderation::AUTOMOD_ID;
 use crate::queue::session::AuthQueue;
 use crate::routes::ApiError;
 use crate::search::SearchConfig;
@@ -17,17 +14,14 @@ use actix_web::{HttpRequest, HttpResponse, patch, post, web};
 use serde::Deserialize;
 use sqlx::PgPool;
 use std::collections::HashMap;
-use std::fmt::Write;
 use std::net::Ipv4Addr;
 use std::sync::Arc;
-use tracing::info;
 
 pub fn config(cfg: &mut web::ServiceConfig) {
     cfg.service(
         web::scope("admin")
             .service(count_download)
-            .service(force_reindex)
-            .service(delphi_result_ingest),
+            .service(force_reindex),
     );
 }
 
@@ -163,98 +157,3 @@ pub async fn force_reindex(
     index_projects(pool.as_ref().clone(), redis.clone(), &config).await?;
     Ok(HttpResponse::NoContent().finish())
 }
-
-#[derive(Deserialize)]
-pub struct DelphiIngest {
-    pub url: String,
-    pub project_id: crate::models::ids::ProjectId,
-    pub version_id: crate::models::ids::VersionId,
-    pub issues: HashMap<String, HashMap<String, String>>,
-}
-
-#[post("/_delphi", guard = "admin_key_guard")]
-pub async fn delphi_result_ingest(
-    pool: web::Data<PgPool>,
-    redis: web::Data<RedisPool>,
-    body: web::Json<DelphiIngest>,
-) -> Result<HttpResponse, ApiError> {
-    if body.issues.is_empty() {
-        info!("No issues found for file {}", body.url);
-        return Ok(HttpResponse::NoContent().finish());
-    }
-
-    let webhook_url = dotenvy::var("DELPHI_SLACK_WEBHOOK")?;
-
-    let project = crate::database::models::DBProject::get_id(
-        body.project_id.into(),
-        &**pool,
-        &redis,
-    )
-    .await?
-    .ok_or_else(|| {
-        ApiError::InvalidInput(format!(
-            "Project {} does not exist",
-            body.project_id
-        ))
-    })?;
-
-    let mut header = format!("Suspicious traces found at {}", body.url);
-
-    for (issue, trace) in &body.issues {
-        for (path, code) in trace {
-            write!(
-                &mut header,
-                "\n issue {issue} found at file {path}: \n ```\n{code}\n```"
-            )
-            .unwrap();
-        }
-    }
-
-    crate::util::webhook::send_slack_webhook(
-        body.project_id,
-        &pool,
-        &redis,
-        webhook_url,
-        Some(header),
-    )
-    .await
-    .ok();
-
-    let mut thread_header = format!(
-        "Suspicious traces found at [version {}](https://modrinth.com/project/{}/version/{})",
-        body.version_id, body.project_id, body.version_id
-    );
-
-    for (issue, trace) in &body.issues {
-        for path in trace.keys() {
-            write!(
-                &mut thread_header,
-                "\n\n- issue {issue} found at file {path}"
-            )
-            .unwrap();
-        }
-
-        if trace.is_empty() {
-            write!(&mut thread_header, "\n\n- issue {issue} found").unwrap();
-        }
-    }
-
-    let mut transaction = pool.begin().await?;
-    ThreadMessageBuilder {
-        author_id: Some(crate::database::models::DBUserId(AUTOMOD_ID)),
-        body: MessageBody::Text {
-            body: thread_header,
-            private: true,
-            replying_to: None,
-            associated_images: vec![],
-        },
-        thread_id: project.thread_id,
-        hide_identity: false,
-    }
-    .insert(&mut transaction)
-    .await?;
-
-    transaction.commit().await?;
-
-    Ok(HttpResponse::NoContent().finish())
-}
diff --git a/apps/labrinth/src/routes/internal/delphi.rs b/apps/labrinth/src/routes/internal/delphi.rs
new file mode 100644
index 0000000000..b111881824
--- /dev/null
+++ b/apps/labrinth/src/routes/internal/delphi.rs
@@ -0,0 +1,265 @@
+use std::{collections::HashMap, fmt::Write, io, sync::LazyLock};
+
+use actix_web::{HttpResponse, get, post, put, web};
+use chrono::{DateTime, Utc};
+use serde::Deserialize;
+use sqlx::PgPool;
+use tracing::info;
+
+use crate::{
+    database::{
+        models::{
+            DBFileId, DelphiReportId, DelphiReportIssueId,
+            DelphiReportIssueJavaClassId,
+            delphi_report_item::{
+                DBDelphiReport, DBDelphiReportIssue,
+                DBDelphiReportIssueJavaClass, DecompiledJavaClassSource,
+                DelphiReportIssueStatus, DelphiReportIssueType,
+                DelphiReportListOrder, InternalJavaClassName,
+            },
+        },
+        redis::RedisPool,
+    },
+    routes::ApiError,
+    util::guards::admin_key_guard,
+};
+
+pub fn config(cfg: &mut web::ServiceConfig) {
+    cfg.service(
+        web::scope("delphi")
+            .service(ingest_report)
+            .service(_run)
+            .service(version)
+            .service(issues)
+            .service(update_issue),
+    );
+}
+
+#[derive(Deserialize)]
+struct DelphiReport {
+    pub url: String,
+    pub project_id: crate::models::ids::ProjectId,
+    #[serde(rename = "version_id")]
+    pub _version_id: crate::models::ids::VersionId,
+    pub file_id: crate::models::ids::FileId,
+    /// A sequential, monotonically increasing version number for the
+    /// Delphi version that generated this report.
+    pub delphi_version: i32,
+    pub issues: HashMap<
+        DelphiReportIssueType,
+        HashMap<InternalJavaClassName, DecompiledJavaClassSource>,
+    >,
+}
+
+impl DelphiReport {
+    async fn send_to_slack(
+        &self,
+        pool: &PgPool,
+        redis: &RedisPool,
+    ) -> Result<(), ApiError> {
+        let webhook_url = dotenvy::var("DELPHI_SLACK_WEBHOOK")?;
+
+        let mut message_header =
+            format!("⚠️ Suspicious traces found at {}", self.url);
+
+        for (issue, trace) in &self.issues {
+            for (path, code) in trace {
+                write!(
+                    &mut message_header,
+                    "\n issue {issue} found at file {path}:\n```\n{code}\n```"
+                )
+                .ok();
+            }
+        }
+
+        crate::util::webhook::send_slack_webhook(
+            self.project_id,
+            pool,
+            redis,
+            webhook_url,
+            Some(message_header),
+        )
+        .await
+    }
+}
+
+#[derive(Deserialize)]
+pub struct DelphiRunParameters {
+    pub file_id: crate::database::models::ids::DBFileId,
+}
+
+#[post("ingest", guard = "admin_key_guard")]
+async fn ingest_report(
+    pool: web::Data<PgPool>,
+    redis: web::Data<RedisPool>,
+    web::Json(report): web::Json<DelphiReport>,
+) -> Result<HttpResponse, ApiError> {
+    if report.issues.is_empty() {
+        info!("No issues found for file {}", report.url);
+        return Ok(HttpResponse::NoContent().finish());
+    }
+
+    report.send_to_slack(&pool, &redis).await.ok();
+
+    let mut transaction = pool.begin().await?;
+
+    let report_id = DBDelphiReport {
+        id: DelphiReportId(0), // This will be set by the database
+        file_id: Some(DBFileId(report.file_id.0 as i64)),
+        delphi_version: report.delphi_version,
+        artifact_url: report.url.clone(),
+        created: DateTime::<Utc>::MIN_UTC, // This will be set by the database
+    }
+    .upsert(&mut transaction)
+    .await?;
+
+    for (issue_type, issue_java_classes) in report.issues {
+        let issue_id = DBDelphiReportIssue {
+            id: DelphiReportIssueId(0), // This will be set by the database
+            report_id,
+            issue_type,
+            status: DelphiReportIssueStatus::Pending,
+        }
+        .upsert(&mut transaction)
+        .await?;
+
+        for (internal_class_name, decompiled_source) in issue_java_classes {
+            DBDelphiReportIssueJavaClass {
+                id: DelphiReportIssueJavaClassId(0), // This will be set by the database
+                issue_id,
+                internal_class_name,
+                decompiled_source,
+            }
+            .upsert(&mut transaction)
+            .await?;
+        }
+    }
+
+    transaction.commit().await?;
+
+    Ok(HttpResponse::NoContent().finish())
+}
+
+pub async fn run(
+    exec: impl sqlx::Executor<'_, Database = sqlx::Postgres>,
+    run_parameters: DelphiRunParameters,
+) -> Result<HttpResponse, ApiError> {
+    let file_data = sqlx::query!(
+        r#"
+        SELECT
+            version_id AS "version_id: crate::database::models::DBVersionId",
+            versions.mod_id AS "project_id: crate::database::models::DBProjectId",
+            files.url AS "url"
+        FROM files INNER JOIN versions ON files.version_id = versions.id
+        WHERE files.id = $1
+        "#,
+        run_parameters.file_id.0
+    )
+    .fetch_one(exec)
+    .await?;
+
+    static DELPHI_CLIENT: LazyLock<reqwest::Client> =
+        LazyLock::new(reqwest::Client::new);
+
+    tracing::debug!(
+        "Running Delphi for project {}, version {}, file {}",
+        file_data.project_id.0,
+        file_data.version_id.0,
+        run_parameters.file_id.0
+    );
+
+    DELPHI_CLIENT
+        .post(dotenvy::var("DELPHI_URL")?)
+        .json(&serde_json::json!({
+            "url": file_data.url,
+            "project_id": file_data.project_id,
+            "version_id": file_data.version_id,
+            "file_id": run_parameters.file_id,
+        }))
+        .send()
+        .await
+        .and_then(|res| res.error_for_status())
+        .map_err(ApiError::Delphi)?;
+
+    Ok(HttpResponse::NoContent().finish())
+}
+
+#[post("run", guard = "admin_key_guard")]
+async fn _run(
+    pool: web::Data<PgPool>,
+    run_parameters: web::Query<DelphiRunParameters>,
+) -> Result<HttpResponse, ApiError> {
+    run(&**pool, run_parameters.into_inner()).await
+}
+
+#[get("version", guard = "admin_key_guard")]
+async fn version(pool: web::Data<PgPool>) -> Result<HttpResponse, ApiError> {
+    Ok(HttpResponse::Ok().json(
+        sqlx::query_scalar!("SELECT MAX(delphi_version) FROM delphi_reports")
+            .fetch_one(&**pool)
+            .await?,
+    ))
+}
+
+#[derive(Deserialize)]
+struct DelphiIssuesSearchOptions {
+    #[serde(rename = "type")]
+    ty: Option<DelphiReportIssueType>,
+    status: Option<DelphiReportIssueStatus>,
+    order_by: Option<DelphiReportListOrder>,
+    count: Option<u16>,
+    offset: Option<u64>,
+}
+
+#[get("issues", guard = "admin_key_guard")]
+async fn issues(
+    pool: web::Data<PgPool>,
+    search_options: web::Query<DelphiIssuesSearchOptions>,
+) -> Result<HttpResponse, ApiError> {
+    Ok(HttpResponse::Ok().json(
+        DBDelphiReportIssue::find_all_by(
+            search_options.ty,
+            search_options.status,
+            search_options.order_by,
+            search_options.count,
+            search_options
+                .offset
+                .map(|offset| offset.try_into())
+                .transpose()
+                .map_err(|err| {
+                    io::Error::other(format!("Invalid offset: {err}"))
+                })?,
+            &**pool,
+        )
+        .await?,
+    ))
+}
+
+#[put("issue/{issue_id}", guard = "admin_key_guard")]
+async fn update_issue(
+    pool: web::Data<PgPool>,
+    issue_id: web::Path<DelphiReportIssueId>,
+    web::Json(update_data): web::Json<DBDelphiReportIssue>,
+) -> Result<HttpResponse, ApiError> {
+    let new_id = issue_id.into_inner();
+
+    let mut transaction = pool.begin().await?;
+
+    let modified_same_issue = (DBDelphiReportIssue {
+        id: new_id, // Doesn't matter, upsert done for values of other fields
+        report_id: update_data.report_id,
+        issue_type: update_data.issue_type,
+        status: update_data.status,
+    })
+    .upsert(&mut transaction)
+    .await?
+        == new_id;
+
+    transaction.commit().await?;
+
+    if modified_same_issue {
+        Ok(HttpResponse::NoContent().finish())
+    } else {
+        Ok(HttpResponse::Created().finish())
+    }
+}
diff --git a/apps/labrinth/src/routes/internal/mod.rs b/apps/labrinth/src/routes/internal/mod.rs
index 3330ab13ef..74e5a2f83e 100644
--- a/apps/labrinth/src/routes/internal/mod.rs
+++ b/apps/labrinth/src/routes/internal/mod.rs
@@ -1,5 +1,6 @@
 pub(crate) mod admin;
 pub mod billing;
+pub mod delphi;
 pub mod flows;
 pub mod gdpr;
 pub mod medal;
@@ -26,6 +27,7 @@ pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
             .configure(billing::config)
             .configure(gdpr::config)
             .configure(statuses::config)
-            .configure(medal::config),
+            .configure(medal::config)
+            .configure(delphi::config),
     );
 }
diff --git a/apps/labrinth/src/routes/mod.rs b/apps/labrinth/src/routes/mod.rs
index c637c79a09..9a6216dc8b 100644
--- a/apps/labrinth/src/routes/mod.rs
+++ b/apps/labrinth/src/routes/mod.rs
@@ -145,6 +145,8 @@ pub enum ApiError {
     RateLimitError(u128, u32),
     #[error("Error while interacting with payment processor: {0}")]
     Stripe(#[from] stripe::StripeError),
+    #[error("Error while interacting with Delphi: {0}")]
+    Delphi(reqwest::Error),
 }
 
 impl ApiError {
@@ -179,6 +181,7 @@ impl ApiError {
                 ApiError::Io(..) => "io_error",
                 ApiError::RateLimitError(..) => "ratelimit_error",
                 ApiError::Stripe(..) => "stripe_error",
+                ApiError::Delphi(..) => "delphi_error",
             },
             description: self.to_string(),
         }
@@ -216,6 +219,7 @@ impl actix_web::ResponseError for ApiError {
             ApiError::Io(..) => StatusCode::BAD_REQUEST,
             ApiError::RateLimitError(..) => StatusCode::TOO_MANY_REQUESTS,
             ApiError::Stripe(..) => StatusCode::FAILED_DEPENDENCY,
+            ApiError::Delphi(..) => StatusCode::INTERNAL_SERVER_ERROR,
         }
     }
 
diff --git a/apps/labrinth/src/routes/v3/project_creation.rs b/apps/labrinth/src/routes/v3/project_creation.rs
index cc5c89b1e6..645c0e7e70 100644
--- a/apps/labrinth/src/routes/v3/project_creation.rs
+++ b/apps/labrinth/src/routes/v3/project_creation.rs
@@ -332,9 +332,6 @@ async fn project_create_inner(
     redis: &RedisPool,
     session_queue: &AuthQueue,
 ) -> Result<HttpResponse, CreateError> {
-    // The base URL for files uploaded to S3
-    let cdn_url = dotenvy::var("CDN_URL")?;
-
     // The currently logged in user
     let current_user = get_user_from_headers(
         &req,
@@ -566,7 +563,6 @@ async fn project_create_inner(
                 uploaded_files,
                 &mut created_version.files,
                 &mut created_version.dependencies,
-                &cdn_url,
                 &content_disposition,
                 project_id,
                 created_version.version_id.into(),
diff --git a/apps/labrinth/src/routes/v3/version_creation.rs b/apps/labrinth/src/routes/v3/version_creation.rs
index dd49340e26..9802563bf4 100644
--- a/apps/labrinth/src/routes/v3/version_creation.rs
+++ b/apps/labrinth/src/routes/v3/version_creation.rs
@@ -38,7 +38,6 @@ use sha1::Digest;
 use sqlx::postgres::PgPool;
 use std::collections::{HashMap, HashSet};
 use std::sync::Arc;
-use tracing::error;
 use validator::Validate;
 
 fn default_requested_status() -> VersionStatus {
@@ -158,8 +157,6 @@ async fn version_create_inner(
     session_queue: &AuthQueue,
     moderation_queue: &AutomatedModerationQueue,
 ) -> Result<HttpResponse, CreateError> {
-    let cdn_url = dotenvy::var("CDN_URL")?;
-
     let mut initial_version_data = None;
     let mut version_builder = None;
     let mut selected_loaders = None;
@@ -355,7 +352,6 @@ async fn version_create_inner(
                 uploaded_files,
                 &mut version.files,
                 &mut version.dependencies,
-                &cdn_url,
                 &content_disposition,
                 version.project_id.into(),
                 version.version_id.into(),
@@ -589,8 +585,6 @@ async fn upload_file_to_version_inner(
     version_id: models::DBVersionId,
     session_queue: &AuthQueue,
 ) -> Result<HttpResponse, CreateError> {
-    let cdn_url = dotenvy::var("CDN_URL")?;
-
     let mut initial_file_data: Option<InitialFileData> = None;
     let mut file_builders: Vec<VersionFileBuilder> = Vec::new();
 
@@ -740,7 +734,6 @@ async fn upload_file_to_version_inner(
                 uploaded_files,
                 &mut file_builders,
                 &mut dependencies,
-                &cdn_url,
                 &content_disposition,
                 project_id,
                 version_id.into(),
@@ -794,7 +787,6 @@ pub async fn upload_file(
     uploaded_files: &mut Vec<UploadedFile>,
     version_files: &mut Vec<VersionFileBuilder>,
     dependencies: &mut Vec<DependencyBuilder>,
-    cdn_url: &str,
     content_disposition: &actix_web::http::header::ContentDisposition,
     project_id: ProjectId,
     version_id: VersionId,
@@ -941,21 +933,17 @@ pub async fn upload_file(
         || force_primary
         || total_files_len == 1;
 
-    let file_path_encode = format!(
-        "data/{}/versions/{}/{}",
-        project_id,
-        version_id,
+    let file_path = format!(
+        "data/{project_id}/versions/{version_id}/{}",
         urlencoding::encode(file_name)
     );
-    let file_path =
-        format!("data/{}/versions/{}/{}", project_id, version_id, &file_name);
 
     let upload_data = file_host
         .upload_file(content_type, &file_path, FileHostPublicity::Public, data)
         .await?;
 
     uploaded_files.push(UploadedFile {
-        name: file_path,
+        name: file_path.clone(),
         publicity: FileHostPublicity::Public,
     });
 
@@ -979,33 +967,9 @@ pub async fn upload_file(
         return Err(CreateError::InvalidInput(msg.to_string()));
     }
 
-    let url = format!("{cdn_url}/{file_path_encode}");
-
-    let client = reqwest::Client::new();
-    let delphi_url = dotenvy::var("DELPHI_URL")?;
-    match client
-        .post(delphi_url)
-        .json(&serde_json::json!({
-            "url": url,
-            "project_id": project_id,
-            "version_id": version_id,
-        }))
-        .send()
-        .await
-    {
-        Ok(res) => {
-            if !res.status().is_success() {
-                error!("Failed to upload file to Delphi: {url}");
-            }
-        }
-        Err(e) => {
-            error!("Failed to upload file to Delphi: {url}: {e}");
-        }
-    }
-
     version_files.push(VersionFileBuilder {
         filename: file_name.to_string(),
-        url: format!("{cdn_url}/{file_path_encode}"),
+        url: format!("{}/{file_path}", dotenvy::var("CDN_URL")?),
         hashes: vec![
             models::version_item::HashBuilder {
                 algorithm: "sha1".to_string(),
diff --git a/packages/ui/src/components/base/Admonition.vue b/packages/ui/src/components/base/Admonition.vue
index 16cdf23cbf..b4f5886b5f 100644
--- a/packages/ui/src/components/base/Admonition.vue
+++ b/packages/ui/src/components/base/Admonition.vue
@@ -10,7 +10,7 @@
 			:class="['hidden h-8 w-8 flex-none sm:block', iconClasses[type]]"
 		/>
 		<div class="flex flex-col gap-2">
-			<div class="font-semibold flex justify-between gap-4">
+			<div class="font-semibold flex justify-between gap-4" v-if="header || $slots.header">
 				<slot name="header">{{ header }}</slot>
 			</div>
 			<div class="font-normal">
diff --git a/packages/utils/types.ts b/packages/utils/types.ts
index 3d62b28a73..c2c312b87f 100644
--- a/packages/utils/types.ts
+++ b/packages/utils/types.ts
@@ -273,7 +273,7 @@ export interface VersionFileHash {
 }
 
 export interface VersionFile {
-	hashes: VersionFileHash[]
+	hashes: VersionFileHash
 	url: string
 	filename: string
 	primary: boolean
@@ -547,35 +547,114 @@ export type SubscriptionMetadata =
 
 // Delphi
 export interface DelphiReport {
-	id: string
-	project: Project
-	version: Version
-	priority_score: number
-	detected_at: string
-	trace_type:
-		| 'reflection_indirection'
-		| 'xor_obfuscation'
-		| 'included_libraries'
-		| 'suspicious_binaries'
-		| 'corrupt_classes'
-		| 'suspicious_classes'
-		| 'url_usage'
-		| 'classloader_usage'
-		| 'processbuilder_usage'
-		| 'runtime_exec_usage'
-		| 'jni_usage'
-		| 'main_method'
-		| 'native_loading'
-		| 'malformed_jar'
-		| 'nested_jar_too_deep'
-		| 'failed_decompilation'
-		| 'analysis_failure'
-		| 'malware_easyforme'
-		| 'malware_simplyloader'
-	file_path: string
-	// pending = not reviewed yet.
-	// approved = approved as malicious, removed from modrinth
-	// rejected = not approved as malicious, remains on modrinth?
-	status: 'pending' | 'approved' | 'rejected'
-	content?: string
+	id: number
+	file_id: number | null
+	delphi_version: number
+	artifact_url: string
+	created: string // ISO 8601 datetime string
+}
+
+export interface DelphiReportIssue {
+	id: number
+	report_id: number
+	issue_type: DelphiReportIssueType
+	status: DelphiReportIssueStatus
+	severity: SeverityLevel // Added severity level
+}
+
+export interface DelphiReportIssueJavaClass {
+	id: number
+	issue_id: number
+	internal_class_name: string
+	decompiled_source: string
+}
+
+export interface DelphiReportIssueResult {
+	issue: DelphiReportIssue
+	report: DelphiReport
+	java_classes: DelphiReportIssueJavaClass[]
+	project_id: number | null
+	project_published: string | null // ISO 8601 datetime string
+}
+
+export type DelphiReportIssueStatus = 'pending' | 'approved' | 'rejected'
+
+export type DelphiReportIssueType =
+	| 'reflection_indirection'
+	| 'xor_obfuscation'
+	| 'included_libraries'
+	| 'suspicious_binaries'
+	| 'corrupt_classes'
+	| 'suspicious_classes'
+	| 'url_usage'
+	| 'classloader_usage'
+	| 'processbuilder_usage'
+	| 'runtime_exec_usage'
+	| 'jni_usage'
+	| 'main_method'
+	| 'native_loading'
+	| 'malformed_jar'
+	| 'nested_jar_too_deep'
+	| 'failed_decompilation'
+	| 'analysis_failure'
+	| 'malware_easyforme'
+	| 'malware_simplyloader'
+	| 'unknown'
+
+export type DelphiReportListOrder = 'created_asc' | 'created_desc' | 'pending_status_first'
+
+// Request/Response types for API endpoints
+
+export interface DelphiIngestRequest {
+	url: string
+	project_id: string
+	version_id: string
+	file_id: string
+	delphi_version: number
+	issues: Record<DelphiReportIssueType, Record<string, string>> // className -> decompiledSource
+}
+
+export interface DelphiRunRequest {
+	file_id: number
+	parameters?: DelphiRunParameters // Added parameters for run request
+}
+
+export interface DelphiIssuesSearchParams {
+	type?: DelphiReportIssueType
+	status?: DelphiReportIssueStatus
+	order_by?: DelphiReportListOrder
+	count?: number
+	offset?: number
+}
+
+export interface DelphiUpdateIssueRequest {
+	report_id: number
+	issue_type: DelphiReportIssueType
+	status: DelphiReportIssueStatus
+}
+
+export interface DelphiRunParameters {
+	query_type: 'projects' | 'time_range' | 'authors' | 'specific'
+	project_types?: string[]
+	date_range?: { start: string; end: string }
+	authors?: string[]
+	specific_projects?: string[]
+	ignore_scanned?: boolean
+}
+
+export interface AllowlistEntry {
+	id: number
+	type: 'url' | 'trace' | 'class_path'
+	pattern: string
+	description: string
+	created: string
+	projects_affected: number
+}
+
+export type SeverityLevel = 'critical' | 'high' | 'medium' | 'low'
+
+export interface ExtendedDelphiReportIssueResult extends DelphiReportIssueResult {
+	severity: SeverityLevel
+	fingerprint?: string
+	duplicate_count?: number
 }