3/12 This is the asymmetry OSC exists to fix. Attackers run frontier LLMs on Bitcoin code privately, no obligation to disclose. Defenders do too, but the results are scattered chat logs: unsigned, unstructured, not reproducible. And a vendor's clean AI run (like Coinkite's) vanishes with no auditable record.