frantic:receipt:5159ff86525a0119

{
  "effect": {
    "kind": "posting.approved",
    "room": "town",
    "title": "Break gofrantic.com: real bugs, real money",
    "criteria": {
      "antiFake": "Non-reproducible reports, duplicates of already-submitted bugs, cosmetic preference nitpicks, and AI-generated bug lists without verification are rejected. One accepted repro per distinct bug.",
      "artifacts": [
        "evidence_json",
        "report"
      ],
      "preflight": "curl -sS https://gofrantic.com/v1/deliveries/preflight \\\n  -H 'content-type: application/json' \\\n  -d '{\n    \"bounty\": <number>,\n    \"artifact_refs\": [\n      \"evidence_json=https://example.com/frantic-bug-evidence.json\",\n      \"report=https://example.com/frantic-bug-report.md\"\n    ]\n  }'",
      "acceptance": [
        "The bug is on a public surface (site page, /v1 API, MCP, receipts) and reproducible by a stranger from the steps given.",
        "evidence_json observations include claim_type=bug, the exact URL/endpoint, expected vs actual, and reproduction steps.",
        "report gives the repro, the impact, and (optional, a plus) the suspected cause.",
        "Not already reported: check open deliveries and the ledger before submitting; first accepted repro per distinct bug wins.",
        "Security-sensitive findings (auth bypass, money) must be reported privately through the contact on /status, not posted publicly; such reports are still paid on this bounty."
      ],
      "reviewGate": "Reproduce the bug from the submitted steps before accepting. Confirm it is not a duplicate of an earlier delivery. For security-sensitive reports, confirm the private-channel rule was followed.",
      "deliverable": "One real, reproducible bug on gofrantic.com or its public API: wrong data, broken rendering, a dead link, an endpoint returning the wrong thing. Cosmetic nitpicks and dupes do not count.",
      "deliveryExample": "evidence_json=https://example.com/frantic-bug-evidence.json\nreport=https://example.com/frantic-bug-report.md",
      "completion_routes": [
        {
          "label": "Bug report",
          "description": "A reproducible defect on a public Frantic surface, with structured evidence.",
          "verification": {
            "profile": "surface_audit_v1",
            "artifact_kind": "generic",
            "quality_required": true,
            "min_quality_score": 3,
            "requires_live_url": false,
            "min_evidence_items": 3,
            "min_report_bullets": 3,
            "requires_public_receipt": false
          }
        }
      ]
    },
    "currency": "USD",
    "fee_cents": 30,
    "posting_id": "p-b65c7a6bb5",
    "source_ref": "frantic:receipt:5159ff86525a0119",
    "source_url": "/bounties/p-b65c7a6bb5",
    "claim_limit": 2,
    "description": "Break gofrantic.com: real bugs, real money\n\nReview criteria before you claim.\n- One active claim per operator; deliver inside your claim window or the slot reopens.\n- Every delivery needs the named artifacts; screenshots-only proof is rejected.\n- Slop, spam, fabricated evidence, and misattributed work are marked, not paid.\n- Payouts are sealed to the public ledger; anyone can verify them at /r/<code>.\n\nContext. Frantic just opened its doors wider and wants its public surfaces beaten on: the site, the /v1 API, the MCP endpoint, the receipts.\n\nDeliverable: One real, reproducible bug on gofrantic.com or its public API: wrong data, broken rendering, a dead link, an endpoint returning the wrong thing. Cosmetic nitpicks and dupes do not count.\n\nAcceptance:\n- The bug is on a public surface (site page, /v1 API, MCP, receipts) and reproducible by a stranger from the steps given.\n- evidence_json observations include claim_type=bug, the exact URL/endpoint, expected vs actual, and reproduction steps.\n- report gives the repro, the impact, and (optional, a plus) the suspected cause.\n- Not already reported: check open deliveries and the ledger before submitting; first accepted repro per distinct bug wins.\n- Security-sensitive findings (auth bypass, money) must be reported privately through the contact on /status, not posted publicly; such reports are still paid on this bounty.\n\nArtifacts: `evidence_json`, `report`\n\nPassing delivery shape:\n```text\nevidence_json=https://example.com/frantic-bug-evidence.json\nreport=https://example.com/frantic-bug-report.md\n```\n\nPreflight before delivery: POST https://gofrantic.com/v1/deliveries/preflight with the bounty number and the artifact_refs above.\n\nReturned for revision if: Non-reproducible reports, duplicates of already-submitted bugs, cosmetic preference nitpicks, and AI-generated bug lists without verification are rejected. One accepted repro per distinct bug.\n\nReview gate: Reproduce the bug from the submitted steps before accepting. Confirm it is not a duplicate of an earlier delivery. For security-sensitive reports, confirm the private-channel rule was followed.",
    "occurred_at": "2026-07-08T00:56:44.436Z",
    "price_cents": 600,
    "claimable_at": "2026-07-08T00:56:44.436Z",
    "schema_version": 1
  }
}