Disclosure desk

Three reports just landed in security@

Run each one and watch the pipeline reproduce, shield, verify, fix, and authorize the bounty — or refuse. Every step says whether it ran live, locally, or simulated.

Authorized on proof

5 seeded (SIMULATED) + this desk's cases

Bountyloop fees

—

20% on top of each bounty · SIMULATED: no Stripe charge yet

Pool remaining

—

of a $5,000 demo pool (SIMULATED)

Cases verified

—

5 seeded (SIMULATED) + this desk's cases

False payouts

—

this desk's cases (seeded reports)

Mode

security@ inbox

0 reports

Select a report.

Every step is labelled live local simulated. The shield and treasurer never read the reporter's words — only the sterile sandbox trace. WAF rule is staged pending owner approval; the 403 is enforced by the target Worker.

This case: local evidence gate · Claude (triage, shield, patch draft, refusal) · Cloudflare (Sandbox repro, WAF staged, the live 403) · Stripe test (payout simulated) · Brainbase: separate orchestration thread.