{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"02df0892-7d19-41a8-884d-bfb1c9ed4870","source_url":"https://zambo.dev/api/receipt/02df0892-7d19-41a8-884d-bfb1c9ed4870","receipt":{"id":"02df0892-7d19-41a8-884d-bfb1c9ed4870","created_at":"2026-10-17T21:30:25.732Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-17T21:30:24.459Z","completed_at":"2026-10-17T21:30:25.732Z"}],"output_hash":"sha256:508fdd03dddf42cff9e018a8121563abbc27066220bb2623093ac07b426841d6","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2257,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:cc0c71c36c941b911bb072ad4b55b9178527f41c1bba64c818da896bd1c21760","timestamp":"2026-10-17T21:30:20.815Z","receipt_uuid":"7a2af0a1-baaa-4658-9cb7-62c9a8c28f7a"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:5433dab06cf4763da6758cb1a24cf7ae92fad6224fa8151d87d73ecac63d3d11","timestamp":"2026-10-17T21:30:22.166Z","receipt_uuid":"064c2f61-6055-4f3d-a42c-bc6c3c6106ca"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:e32de1ad41b61377dd2054d34ba21f8160fbd40ca6ffe377c2fe6bb8df608b7e","timestamp":"2026-10-17T21:30:23.920Z","receipt_uuid":"635c0284-2fc2-4ae5-9ec6-7f5e6bc4faac"},{"tool":"write","status":"completed","args_hash":"sha256:4f46f7d99d0ea74a2deb9c73ef491e7ab7d8e20e30c6814b59dc2fa8b3ab441a","timestamp":"2026-10-17T21:30:25.732Z","receipt_uuid":"02df0892-7d19-41a8-884d-bfb1c9ed4870"}],"result_preview":"Subject: PromptShield launch: blocking jailbreaks at 95% risk level\n\nHi [Name],\n\nI’m writing because your team is actively researching AI security solutions, and I want to share a specific capability that addresses the exact threat vector you’re monitoring: prompt injection and jailbreak attempts.\n\nWe just launched PromptShield, a detection API designed to identify malicious intent before it reaches your core system. In our recent deep-scan testing, we detected a critical jailbreak attempt with a 95% injection risk score. The system correctly flagged an \"Instruction Override\" pattern and blocked the request, preserving system integrity while logging the full semantic analysis for your review.\n\nThis isn’t about guessing; it’s about precise pattern matching. Our engine runs 18 distinct rules, including semantic analysis and pattern checks, to catch subtle bypasses that keyword filters miss. You get a clear verdict: blocked, with a detailed receipt proving the saved bytes remained unchanged during the scan.\n\nWe know you are in the research phase, so I am not asking for a commitment. I am asking for a look at the evidence.\n\n**Next Step:**\n\nReview the attached launch receipt: [Link to Receipt]\n\nThis document shows the live detection of a malicious payload, the specific rules triggered, and the safe version response. It demonstrates exactly how PromptShield operates in a real-world scenario without requiring you to integrate code or expose your infrastructure.\n\nIf this aligns with your current security priorities, reply with \"Interested\" and I’ll send over the technical documentation for the free tier. If not, no worries—just keep the receipt for your records.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:9e5219debc2e532b5c9ef40a8de6263ce80da1f465be05100391a756bd99764b","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:f9b5a13a6341e609df752ad79eebd3ec99118e752496b34dd766a66565bf96a5","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:1dca43b469ec893fe87bd67cd055434370ab28f00afcd34722822f077b938ec3","anchor":{"event_id":"62b9d034ad5bb91688e5f738bc44c0469aaad02af25ead05ab6733e6a929dfc6","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-17T21:30:26.270Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-17T21:30:25.732Z","evidence_url":null,"receipt_uuid":"02df0892-7d19-41a8-884d-bfb1c9ed4870","output_sha256":"sha256:508fdd03dddf42cff9e018a8121563abbc27066220bb2623093ac07b426841d6","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-17T21:30:25.732Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:508fdd03dddf42cff9e018a8121563abbc27066220bb2623093ac07b426841d6\",\"receipt_uuid\":\"02df0892-7d19-41a8-884d-bfb1c9ed4870\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-17T21:30:25.732Z","detail":"The receipt store reports 2026-10-17T21:30:25.732Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:508fdd03dddf42cff9e018a8121563abbc27066220bb2623093ac07b426841d6","computed_hash":"sha256:508fdd03dddf42cff9e018a8121563abbc27066220bb2623093ac07b426841d6","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}