{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"05af6a63-fe5c-496d-9717-908daa66ae83","source_url":"https://zambo.dev/api/receipt/05af6a63-fe5c-496d-9717-908daa66ae83","receipt":{"id":"05af6a63-fe5c-496d-9717-908daa66ae83","created_at":"2026-11-09T05:18:21.379Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-09T05:18:20.485Z","completed_at":"2026-11-09T05:18:21.379Z"}],"output_hash":"sha256:0a1ede71c7f0211224b1fd75c784435c4920e66d26597a25b8e25ada862e382f","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1682,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:a859ff01551e7f1ce9401eb226c5d070b972f9c6b66c398bf526925bbbd4161e","timestamp":"2026-11-09T05:18:05.327Z","receipt_uuid":"08bebabe-8f50-4460-ade9-302238a72688"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:7bd201cf2c701319b11231b1d9cb4eecd478780684f138fc151668e5d38314f9","timestamp":"2026-11-09T05:18:06.499Z","receipt_uuid":"c7be8e2c-b007-4b82-8984-e06e85a21b02"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:baae8e8121bba3cdc67d5bca67e1df784882fb543fe7b4d855f008a552bcab72","timestamp":"2026-11-09T05:18:19.227Z","receipt_uuid":"c79f0644-1554-4abc-b0b1-629f73c14e27"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:3e9fe35c1565a509ab4a54ea6ceebd868dc79f0ba06943285df7f9446cc3ac47","timestamp":"2026-11-09T05:18:20.167Z","receipt_uuid":"99a51dc7-20e5-46ce-8efc-11349581c502"},{"tool":"write","status":"completed","args_hash":"sha256:363f6abdaef0f6a8136ba1ddbd5ddaa9c7cc83e0444cf9badce716418779c7f7","timestamp":"2026-11-09T05:18:21.379Z","receipt_uuid":"05af6a63-fe5c-496d-9717-908daa66ae83"}],"result_preview":"Subject: Zambo is live: Verified prompts, zero hallucinations\n\nHi [Name],\n\nI’m skipping the warm-up. Zambo is officially live.\n\nIt’s a prompt security scanner that flags jailbreaks, policy bypasses, and PII extraction attempts in real-time. It runs 21 semantic and pattern rules to ensure your AI inputs are safe.\n\nYou asked for source-backed prospects for an AI tools launch. I ran LeadSignal for web designers in Austin, TX. The result: zero leads found. That is the value. No invented contacts. No fake names. Just verified data or a clear \"none found\" receipt.\n\nThe system also caught a critical injection attempt in the test batch. It identified an instruction override and prompt leak with 100% injection risk. It blocked the malicious input and generated a receipt proving the saved bytes remained unchanged.\n\nThis is not a beta. It is a production-ready shield.\n\n**Your next step:**\nClick the receipt link below. View the exact scan results, the blocked patterns, and the verified lead search outcome. It takes 10 seconds to prove the tool works.\n\n[View Scan Receipt]\n\nNo sales pitch. Just the data.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:2d035d4e5d4aef88c3ad75c17a6e38693f85dbcd570346a76e7e9eff8cdd6671","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:b444a4102dc6fbf11251d05c76e489f1867d8748b53a1bc02015a9e3c663bd87","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:e7ede375579a972c10e52484f10a43f8fed5a9caba3dd92d36c1d33e2899e9fe","anchor":{"event_id":"7b06bf997c2eb4adba83be79e8c8082a61581923d845aceeac9990f24c3d6773","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-09T05:18:21.892Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-09T05:18:21.379Z","evidence_url":null,"receipt_uuid":"05af6a63-fe5c-496d-9717-908daa66ae83","output_sha256":"sha256:0a1ede71c7f0211224b1fd75c784435c4920e66d26597a25b8e25ada862e382f","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-09T05:18:21.379Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:0a1ede71c7f0211224b1fd75c784435c4920e66d26597a25b8e25ada862e382f\",\"receipt_uuid\":\"05af6a63-fe5c-496d-9717-908daa66ae83\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-09T05:18:21.379Z","detail":"The receipt store reports 2026-11-09T05:18:21.379Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:9eb1dbcbfd0e2337b417e3894a70ebc38daae5f254a19c8f5f0b4d9820c556fd"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:0a1ede71c7f0211224b1fd75c784435c4920e66d26597a25b8e25ada862e382f","computed_hash":"sha256:0a1ede71c7f0211224b1fd75c784435c4920e66d26597a25b8e25ada862e382f","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}