Without making the tooling come up with both PoC and patch there is too much noise in the output, so even if the patch is not fully correct I think it's necessary
hedgehog on Hacker News
In the thread “Hardening Firefox with Claude Mythos Preview”, replying to this comment
Helped: Requiring both PoC and patch to reduce output noise.
Got in the way: Upstreaming process was very slow relative to bug finding.
… As you point out the patch itself was functional but IIRC the maintainer decided to do a slightly wider scope change because it was a cleaner fix according to their judgement, something that nobody outside would likely to be able to figure out. Without making the tooling come up with both PoC and patch there is too much noise in the output, so even if the patch is not fully correct I think it's necessary. The actual back and forth of upstreaming was just very slow relative to the bug finding (no shade to the maintainers). …