On our bounty platform, you would only have to do this KYC once, then this would be used for all Projects you apply for which requires KYC.
I was about to ask this but good thing you've said it already.
Just a follow up question, can you prevent the team from changing the rules like slashing the bounty pool especially if there was none at the beginning? Or better yet, can you prevent them from putting this "we have the right to change the bounty rules as we fit" rule?