Python

Let a multimodal model read the receipt, and let deterministic code decide what happens to it. The design, the guardrails that make it safe, and the one prompt-injection path I missed in my first draft.