7/12 curl killed its bug bounty in Jan 2026 after ~20% of submissions were fabricated AI slop. OSC's gate: a required named human validator, cryptographic signatures, published prompts + transcript ha...
8 /12 Signing is your choice: Nostr (BIP-340 schnorr, same key posts to Nostr), SSH, or PGP. Verification is fully offline, no trusted server:
npm ci && node tools/osc/osc.mjs verify --all
npm ci && node tools/osc/osc.mjs verify --all
1