How are AI companies doing with their voluntary commitments on vulnerability reporting?| adamjones.me