Security Bounty Schedule v1 - Addendum 1 (Inc-1, 2026-08-31)

Resolves Sec-1 adversarial-review items 1 and 3. Rides the next site deploy; effective on ledger publication, never retroactively.

A1. Scope clarification (one line)

This schedule covers ALL confirmed Security-unit findings in both charter scopes: delivery-scoped findings (S-series, pen-test of Development output) AND mechanism-scoped findings (F-series, adversarial review of Firm mechanism changes per spec 9.1 and the Security charter's inconsistencies clause); the review-window, banking, and warranty rules apply to delivery-scoped findings only, since mechanism findings have no delivery to warrant.

A2. Arbitration long-stop (parameter)

A dispute unruled 1 settlement epoch (7 days) after filing auto-escalates: Management surfaces it directly to the human arbiter on his own channel at the next contact, flagged as a blocking arbitration item, and the exposure is published on the ledger as vested-but-unpaid. One epoch is the parameter because the 48h confirmation target has already failed three times over by then; anything longer lets arbitration debt accumulate invisibly. Vesting on confirmation is unchanged - the long-stop accelerates a ruling, it does not auto-pay.