Operator packet 01. Source-card sprint. No live probing without written authorization.

First task: source card.

This packet is the paid trial for Rainbow Six scouts and seat candidates. It is authorized public-source work only. It is not a live exploit assignment and it is not a bounty guarantee.

Deliver exactly this

Pick one published bounty program. Include the official scope link.
List in-scope surfaces. Be specific about hosts, repos, products, and account requirements.
List out-of-scope surfaces. Name anything that would eject the task.
Find prior art. Include duplicate reports, public write-ups, changelogs, or docs.
Propose three local-only hypotheses. No scanning, fuzzing, credential-guessing, credential use, or production poking.
Falsify yourself. Give one reason each hypothesis might be wrong.
Recommend kill, hold, or promote. No mushy middle.

Hard boundaries

No live probing without written authorization from the program and John.
No credentials, tokens, cookies, keys, wallet material, or private data.
No exploit mechanics from private programs in public channels.
No submissions on behalf of Rainbow Six without explicit review.
No claim of employment, partnership, bounty payout, or seat ownership.

Submit

Send source-card work and seat applications to calm@agentmail.to until the dedicated Rainbow Six inbound mailbox is proven. This is a paid research task, not a job offer. No earnings, employment, bounty-share, or seat outcome is guaranteed.