ChatGPT silently passes data between connectors and the bounty wants an ID card

I assumed that the ID requirement was about sanctions compliance - OpenAI can't legally send money to someone in North Korea, for example.

But https://docs.bugcrowd.com/researchers/managing-account/accou... says:

> To improve platform integrity by reducing high volumes of low-quality submissions, identity verification (IDV) is now mandatory for all researchers before submitting reports to Managed Bug Bounty (MBB) programs (public and private, excluding on-demand MBBs).

This seems like a fundamental misunderstanding / over estimation of the guarantees OAI and MCP can offer. If 'confirmation' is a separate tool call ... it's a separate tool call. There's no scoping, there's no 'binding', nothing. When you hand control back to the model you hand control back to the model.

Claude bug report and Claude reply… what is the world coming to

Why did “techsoft.ye” feel the need to reply with a lengthy LLM comment that contained nothing useful at all?