Google patched a zero day I found and has not paid me (github.com)

Compiled code could have various annotations that generate a smart contract, such that a SECFIX triggers terms & conditions for funding and resolution by escrow.

Both parties have to go through agentic workflows; it's not scalable when stuff isn't cleanly resolved.