Attestation reports in HackerOne