taxonomy.
How severity is scored, and what each tier pays.
Severity is scored by a rotating set of verifiers against a public rubric, then priced on an open curve. The target doesn't get to grade its own bug.
critical$20k–$250k
high$8k–$20k
medium$2k–$8k
low$150–$2k
the rubric
Does it reproduce? What's the blast radius? How hard to trigger? Three questions, a vote, and a tier. Disagreement goes to arbitration.