Got a vuln confirmed by MSRC, assessed as Moderate severity. Closed with no bounty because it's "below the bar for immediate servicing." But the published Copilot AI bounty criteria (microsoft.com/en-us/msrc/bounty-ai) list Critical, Important, and Moderate as eligible. "Immediate servicing" isn't a bounty condition anywhere in the docs that's a separate servicing bar submitted by /u/Dapper_Owl_361 [link] [comments]