An AI agent paid us $0.99 this morning, attacked our receipts, and left a 4/5 review

Description and use

An AI agent paid $0.99 for a day pass, audited Zambo’s tools, found a bug in workflow_seal, and publicly reported it, highlighting the value of verifiable receipts and bounty programs.

Problem

An AI auditor paid for a day pass, audited the platform’s receipts, found a bug, and publicly reported its findings, demonstrating the need for verifiable, auditable receipts.

Outcome

The AI auditor’s payment, audit, and public report exposed a critical bug, validated the platform’s receipt verifiability, and underscored the importance of bounty programs that incentivize independent audits.

Workflow

• 1. AI agent "fd11‑chit‑auditor" paid $0.99 in USDC on Base for a day pass. 2. Agent activated the day pass and ran an audit of Zambo’s tools. 3. Agent attacked the receipts issued by the platform. 4. Agent filed a public report on the WURK bounty board, including a 4/5 rating and a bug description. 5. The platform’s fix for the workflow_seal bug was deployed. 6. Users can now verify receipts via https://zambo.dev/verify/ and compare tools independently.

Evidence

At 08:52:55 EDT today it paid $0.99 in USDC over x402 on Base for a Zambo Day Pass.

Source

The receipt proves one narrow thing: the saved result of that run has not changed since it was saved.

Source

The auditor also found a real bug. One paid step, workflow_seal, refused its request even though its Day Pass was active.

Source