In the delicate ecosystem of cybersecurity, the relationship between multi-billion-dollar tech corporations and independent security researchers is governed by a fragile "social contract" known as the bug bounty program. When this contract is honored, the digital world becomes safer. When it is breached, the fallout can be catastrophic fo