I'll take the challenge if it gets me Oxide hardware!

This is a myth, actual fraud rates on programs like this are tiny - especially if you compare them to the benefits.

Fraud rates on benefits are also absurdly low.

I read that more that the benefits society gets from lifting people from poverty as opposed to the food stamps benefits you seem to have in mind.

That is indeed what I meant.

The system should undo state drift even if a run hasn't been prompted by changes to the upstream definitions in the repository

I loaded up the hacker news dataset in google bigquery, which turned out https://news.ycombinator.com/item?id=42057647 as the biggest at 9624 comments. Second is https://news.ycombinator.com/item?id=43208973 at 5349.

Link to the API https://github.com/HackerNews/API (copied from the bottom of the page)

The post mentions 743 LOC records in the entire database; I'd be very curious to hear what that number's at now?

I will ask someone to find out and report back.

The answer is... 2,386 LOC records.

How many of those additional 1,643 were a result of your 2014 blog post? :)

Their example in the blog post, geekatlas.com, no longer provides an LOC!

Any chance of convincing someone to do a stat dump on all record types?

> correctly classified as having user generated active content

No it's not

> PRs can be autodeployed to this domain without passing review or approval.

No they can't

There is no untrusted/user content on these domains.

As I've mentioned in several other comments in this thread by now: The whole preview functionality only works for internal PRs, untrusted ones would never even make it to deployment.

> unless one of the developers in the team published something malicious through that system

If that happened we'd have much bigger problems than Google's flagging.

> Google flagged this domain for legitimate reasons.

No they didn't.

There is no user generated content involved here.