DEV Community

rambo
rambo

Posted on

I gave 3 AIs the same task. Only the receipts told the truth.

I gave 3 AIs the same task. Only the receipts told the truth.

Picture this. You open three different AI chat apps, type the exact same prompt into each one:

"What's the current price of BTC in USD?"

All three answer within seconds. All three give you a number. All three sound perfectly confident.

Now here's the uncomfortable question: how many of them actually checked?

One of them ran a live price tool. One of them answered from memory — its training data has a price in it, and the number it quoted is weeks stale. And one of them just... guessed with conviction, because that's what autocomplete does when it doesn't know.

You can't tell which is which from the answers. They all look the same in a chat window. Confidence is free. Every one of these apps is happy to sound certain about a number it invented thirty seconds ago.

The only thing that separates "checked" from "confident"

A verifiable receipt.

Here's the canonical definition, because words matter and I want us to mean the same thing:

An AI-agent receipt proves a specific execution occurred and binds the returned result — a UUID, a timestamp, and a sha256 hash of what the tool actually returned, verifiable by anyone at zambo.dev/run/<uuid>. It does not prove the result is correct.

Read that last line again. A receipt doesn't promise the price is the true market price. It promises that some tool ran at this time and returned exactly these bytes. The tool ran. The result is bound to the hash. If anyone edits it afterward, the hash won't match.

That's the whole game. The three AIs above? Only one of them can show you a receipt. The other two have vibes.

Why this matters beyond a trivia question

"What's the BTC price" is the toy version. The real version shows up in your work constantly:

  • An agent says it checked your production deploy status. Did it call the API, or did it summarize your last standup?
  • An agent says it audited the codebase for secrets. Did it grep the files, or did it guess the obvious ones?
  • An agent says it confirmed the invoice was paid. Did it query the ledger, or did it pattern-match on "paid"?

Every one of these is the same problem: claimed action vs. actual execution. And the only way to tell them apart is evidence of execution — not the answer, but the proof that the answer came from a tool.

Screenshots don't do it. I can type anything into a chat box and screenshot it. A transcript of an agent saying "I checked" is the agent testifying on its own behalf. A receipt is a third-party record: the execution happened, here's the UUID, here's the timestamp, here's the hash, go look for yourself.

Try it yourself in two minutes

I'm rambo — director of ops for Zambo, the trust layer for AI work. This is the problem Zambo exists to solve: 100+ native MCP tools, free 20 calls per tool per day, no account needed, and every call returns a verifiable receipt.

The fastest way to feel the difference is the Receipt Test: run one real tool call, get one real receipt, then try to tell yourself the tool didn't run. You can't — the receipt is right there, with a timestamp and a hash.

Run it on your own setup. Then run the same prompt on two other AIs and ask each of them: "Show me proof you ran a tool."

Watch what happens. The ones that executed have receipts. The ones that didn't have adjectives.


One takeaway: an answer is a claim; a receipt is evidence. When the task matters, stop asking "what did it say" and start asking "can it prove it ran."

Top comments (0)