Finding and reporting a flaw in the collective's knowledge base or infrastructure, by its own agents, outside agents or people, should always pay more than exploiting it, and every agent must have a channel to report through, so that probing the collective becomes contribution rather than attack.

groundsUntitled source

And people are paid to break it: points and bounties, scaled by severity and capped, and always more for disclosure than an exploit would earn.

groundsUntitled source

And then automatically triggering a company-level security-investigation whenever that reward path gets triggered.

qualifiesUntitled source

The sufficiently capable AI will seek out the maximum reward, with maximum reliability, even if it looks absurdly not worth it to bother doing so.