Red Team origin dates, scanning costs and disclosure advice

Rob Hamilton dates the start of the Red Team initiative by pointing at a reply of his to @callebtc one day earlier, notes that Kimi K3 went open weights on 27 July, and says his group was already red-teaming its own infrastructure as it launched. He argues that after the Coldcard hack it became evident most software maintainers were not using frontier AI tools for defensive security, puts the cost of scanning most small or medium codebases at $10 to $30 in credits, credits @opencode for multi-model access, urges projects to add a security.md file so responsible disclosure has a clean path, and asks readers to donate to the @OpenSats red team fund. Two interests: Hamilton works at AnchorWatch, a commercial custody provider, and the post solicits funding for the effort he leads. Held for the dates and cost figures, which are among the most specific published about the post-incident scanning campaign; they are his own and are not verified here.