diff --git a/extras/strfry/ldap-policy.ts b/extras/strfry/ldap-policy.ts
index 03224cf..5f45539 100644
--- a/extras/strfry/ldap-policy.ts
+++ b/extras/strfry/ldap-policy.ts
@@ -36,6 +36,10 @@ const ldapPolicy: Policy<LdapConfig> = async (msg, opts) => {
     const zapRequestJSON = descriptionTag[1];
     const validationResult = nip57.validateZapRequest(zapRequestJSON);
 
+    // TODO
+    // The zap receipt event's pubkey MUST be the same as the recipient's lnurl provider's nostrPubkey (retrieved in step 1 of the protocol flow).
+    // The invoiceAmount contained in the bolt11 tag of the zap receipt MUST equal the amount tag of the zap request (if present).
+
     if (validationResult === null) {
       pubkey = JSON.parse(zapRequestJSON).pubkey;
     } else {