vulnerability disclosure

A volunteer red team filed 4,962 AI findings across 390 repositories in 27.5 hours, and not one came from a public US frontier model. Not a capability gap: the capable versions sit behind identity gates. Refusal policy is now where the labs differentiate, and it belongs on your dependency list.