> it's common for me to receive spam reports from yahoo on an entirely double-opt-in social site I run... legitimately requested messages...

Listen dude, it's spam. I can give you my personal definition of spam, which I hope is illuminating: if it's not transactional and not from a personal sender, it's spam. You can ask your users to define spam, it will reduce to more or less what I described. Tough cookie!