7/12 curl killed its bug bounty in Jan 2026 after ~20% of submissions were fabricated AI slop. OSC's gate: a required named human validator, cryptographic signatures, published prompts + transcript hashes. No raw model output ever ships as a validated finding.
