Hey, Sam, from your blog posts I have the impression you take this issue seriously. Please take this as a friendly suggestion.

Anyway, if I were the OP I'd be worried that YC might be more concerned with PR damage control than justice for a handful of low-level employees. For some companies, that has meant discrediting the complainant and building a paper trail against them. (EDIT: I'm not referring to any YC company, just companies in general.)

Are there any guarantees you can offer for whistleblowers?

obviously we'll keep their identity confidential.

if we were concerned about PR damage, we'd handle this a very different way. just want to help if possible. you should see some of the flames we send our portfolio companies when they do something wrong :)