๐ The parts I care about most
โข Receipt totals are checked by plain code, not by the model. If the math doesn't add up, it gets flagged.
โข Money is stored as whole numbers (IDR), never decimals, so there are no rounding bugs.
โข Every user's data is locked at the database level with Postgres row-level security. Even if the app has a bug, it can't show someone else's records.
โข Text on a receipt is treated as untrusted. If a receipt says "ignore your instructions", it's just text.
โข The agents have tests, so when I change a prompt I can see right away if it got worse.