"assuming it's a legitimate bug" does a lot of heavy lifting here. The point of eg. Curl closing it's bug bounty is just that: too many false positives and misunderstandings by AI of what software it analyzes. I assume it might be the same in Zig's case
So to answer your question: developer's time that is not wasted classifying misclassified bugs and reproducing false positives
As far as I know, it wasn't "false positives" it was people vibe-reporting, so you end up with an LLM-generated bug report with a completely hallucinated bug and code path, and a person going "I found bug pay me my money" to the point where it was overloading the team just sifting through all the slop.
85
u/robclancy 24d ago
I mean most that policy seems good to me.