Who are defined as the community leaders that would be responsible for “enforcement”? Does it start with the steering committee? I am not sure that the community-wide mailing list is the correct first step to reporting.

Agreed, I put the mailing list address as a first approximation. Perhaps the steering committee is the best choice as it already exists.

The ultimate punishment, after being escalated by several violations, is a total ban on community contribution. Maybe this is as simple as removing from the mailing list and using github blocking:

https://docs.github.com/en/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization

and that's it, I mean, there's only so much we can do.

On that note, almost all other projects have CoCs already, for example redis (which also uses the Contributor Covenant):

https://redis.io/topics/governance

Anaconda:

https://www.anaconda.com/community-code-of-conduct

Given the cross language/database/ecosystem role that the GraphBLAS plays we are almost held to a higher standard because we must endeavor to respect them all.

-Michel