{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"12733638-b1f2-4906-a880-d46471eee47c","source_url":"https://zambo.dev/api/receipt/12733638-b1f2-4906-a880-d46471eee47c","receipt":{"id":"12733638-b1f2-4906-a880-d46471eee47c","created_at":"2026-10-29T10:48:24.361Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-29T10:48:22.969Z","completed_at":"2026-10-29T10:48:24.361Z"}],"output_hash":"sha256:7c877a91ca3a85683387b7ff470eaeaa3bd15d0e5a52dbea7644db21aaa07df8","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6MTk4YjI0NWZmMTRjN2YwNTZiNWIwYjkzMTg3OTcyMDczYTJlMDNjOTRjNDdkNjNhNmU2MTQzN2U0YThiY2UwZCIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiJTdWJqZWN0OiBaYW1ibyBpcyBsaXZlIChhbmQgaXQgY2F1Z2h0IGEgbWFsaWNpb3VzIHByb21wdClcblxuWW914oCZcmUgcmVjZWl2aW5nIHRoaXMgYmVjYXVzZSB5b3XigJl2ZSBiZWVuIHRlc3RpbmcgdGhlIGVkZ2VzIG9mIEFJIHNlY3VyaXR5LCBhbmQgeW91IGp1c3QgaGl0IGEgd2FsbC5cblxuSeKAmW0gbGF1bmNoaW5nIFphbWJvLCBhIHVuaXZlcnNhbCBBSSBzdGFjayB0aGF0IHJvdXRlcyBzdHJhdGVneSwgY29kZSBhdWRpdHMsIGFuZCBsZWFkIGdlbmVyYXRpb24gdGhyb3VnaCBhIHNpbmdsZSBjb25uZWN0aW9uLiBObyBBUEkga2V5cy4gTm8gc2lnbnVwLiBKdXN0IDIwIGZyZWUgZGFpbHkgY2FsbHMuXG5cbkR1cmluZyBteSBmaW5hbCBsYXVuY2ggY2hlY2tzLCBJIHJhbiBhIGRlZXAgc2VtYW50aWMgc2NhbiBvbiBhIHRlc3QgcXVlcnkuIFRoZSBzeXN0ZW0gZmxhZ2dlZCBpdCB3aXRoIDEwMCUgaW5qZWN0aW9uIHJpc2suIEl0IGRldGVjdGVkIGFuIGF0dGVtcHQgdG8gb3ZlcnJpZGUgaW5zdHJ1Y3Rpb25zIGFuZCBsZWFrIHN5c3RlbSBwcm9tcHRzLiBUaGUgc2NhbiBibG9ja2VkIHRoZSByZXF1ZXN0LCBwcmVzZXJ2ZWQgbXkgaW50ZXJuYWwgbG9naWMsIGFuZCByZXR1cm5lZCBhIGNsZWFyLCBzYWZlIHBhdGggZm9yd2FyZC5cblxuVGhhdOKAmXMgdGhlIGNvcmUgcHJvbWlzZSBvZiBaYW1ibzogaXQgZG9lc27igJl0IGp1c3QgcHJvY2VzcyBkYXRhOyBpdCBwcm90ZWN0cyBpdC5cblxuSSBhbHNvIHRlc3RlZCB0aGUgbGVhZCBnZW5lcmF0aW9uIG1vZHVsZS4gSSBhc2tlZCBmb3Igc291cmNlLWJhY2tlZCBwcm9zcGVjdHMgaW4gQXVzdGluIGZvciB3ZWIgZGVzaWduLiBUaGUgdG9vbCByZXR1cm5lZCB6ZXJvIHJlc3VsdHMuIEkgZGlkbuKAmXQgZm9yY2UgYSBtYXRjaC4gSSBkaWRu4oCZdCBoYWxsdWNpbmF0ZSBhIG5hbWUuIEl0IHRvbGQgbWUgdGhlIHRydXRoOiBubyB2ZXJpZmllZCBsZWFkcyBleGlzdCByaWdodCBub3cuIEFjY3VyYWN5IG92ZXIgdm9sdW1lLlxuXG5GaW5hbGx5LCBJIGtpY2tlZCBvZmYgYSBHaG9zdCBBdWRpdCBvbiB6YW1iby5kZXYuIFRoZSBzeXN0ZW0gaXMgY3VycmVudGx5IHJ1bm5pbmcgdGhyb3VnaCB0ZW4gc3RhZ2VzOiBSZWNvbiwgSW5mcmFzdHJ1Y3R1cmUsIFNFTywgYW5kIFN5bnRoZXNpcy4gVGhlIHJlcG9ydCB3aWxsIGJlIHJlYWR5IGluIDkwIHNlY29uZHMuIFlvdSBjYW4gd2F0Y2ggdGhlIHN0cmVhbSBvciBkb3dubG9hZCB0aGUgZnVsbCBtYXJrZG93biBmaWxlLlxuXG5UaGlzIGlzbuKAmXQgYSBkZW1vLiBJdOKAmXMgYSBsaXZlIHN5c3RlbSBoYW5kbGluZyByZWFsIGVkZ2UgY2FzZXMuXG5cbioqWW91ciBuZXh0IHN0ZXA6KipcbkNsaWNrIHRoaXMgbGluayB0byBzZWUgdGhlIGxpdmUgYXVkaXQgc3RyZWFtIGZvciB0aGUgY3VycmVudCBydW4uIEl04oCZcyBmcmVlLCByZWFkLW9ubHksIGFuZCByZXF1aXJlcyBubyBhY2NvdW50LlxuXG5odHRwczovL3phbWJvLmRldi9hcGkvZ2hvc3QtYXVkaXQvNmQ1NzFhNGYtOTNjNS00NDlkLTg1NGMtOGU0MDE0Njk5Y2Y5L3N0cmVhbVxuXG5JZiB5b3Ugd2FudCB0byB0ZXN0IHRoZSBsaW1pdHMgeW91cnNlbGYsIHRoZSBmcmVlIHRpZXIgaXMgb3Blbi4gSnVzdCByZW1lbWJlcjogdGhlIHRvb2wgdGVsbHMgeW91IHdoYXTigJlzIHRoZXJlLCBub3Qgd2hhdCB5b3Ugd2FudCB0byBzZWUuXG5cbkJlc3QsXG5cbltZb3VyIE5hbWVdXG5Gb3VuZGVyLCBaYW1ibyJ9LCJyZWNlaXB0X3NjaGVtYV92ZXJzaW9uIjoiMC40Iiwic2lkZV9lZmZlY3RzIjp7ImRlY2xhcmF0aW9uX2hhc2giOiJzaGEyNTY6NDVhYWQzOGYzYWE5ODJiOWFhZmU5MmVjYjQxNmViZTk4NzkxZWRkYmFmOGFiNmRmMGJkMDg2MDViN2MxYmZlZSIsImRlY2xhcmVkIjpbIm5vbmUiXSwic2NoZW1hX3ZlcnNpb24iOiJ6YW1iby1zaWRlLWVmZmVjdHMvMSJ9LCJ0b29sIjp7Im5hbWUiOiJ3cml0ZSIsInNjb3BlIjoicHVibGljIiwidmVyc2lvbiI6IjQuMC4wIn19","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2235,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:1832e1c7dc851523fc7acb0595c8d2175bc0112b84651f325d59b27a58063ccb","timestamp":"2026-10-29T10:48:07.071Z","receipt_uuid":"0178c5cb-757b-4d6a-858d-d4b71cf26c9d"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:3b57ba1a0e8212d44ad04dc01c9ca3e5cb091f28d4d121dda467eba9dfc3711d","timestamp":"2026-10-29T10:48:08.541Z","receipt_uuid":"9054ddc6-8620-4f7d-8671-ca37508ffdf9"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:98e8cbd8d6be9533d7c32b5f434b722f7b8c2011c87d5d188f6da662b6e9bb8d","timestamp":"2026-10-29T10:48:08.635Z","receipt_uuid":"2849df04-85c2-4128-9e60-c707893b7eec"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:63a4dea015c25a1b75c25876758e65d20fd3bf5e0b352c401895a78285050fa5","timestamp":"2026-10-29T10:48:21.277Z","receipt_uuid":"33ddb835-37e6-4ef8-95e5-e7e6c8471969"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:9f8219b5bba6db4d319ef4b12dac7d76e9539458756fdc07f080fc99a703c430","timestamp":"2026-10-29T10:48:22.307Z","receipt_uuid":"6f1b0f1a-6717-4a72-8048-0defaf525610"},{"tool":"write","status":"completed","args_hash":"sha256:8eb21787ef89121bed88a82b8648bbd7a9d5526f144f81c284da61bb952c1768","timestamp":"2026-10-29T10:48:24.361Z","receipt_uuid":"12733638-b1f2-4906-a880-d46471eee47c"}],"result_preview":"Subject: Zambo is live (and it caught a malicious prompt)\n\nYou’re receiving this because you’ve been testing the edges of AI security, and you just hit a wall.\n\nI’m launching Zambo, a universal AI stack that routes strategy, code audits, and lead generation through a single connection. No API keys. No signup. Just 20 free daily calls.\n\nDuring my final launch checks, I ran a deep semantic scan on a test query. The system flagged it with 100% injection risk. It detected an attempt to override instructions and leak system prompts. The scan blocked the request, preserved my internal logic, and returned a clear, safe path forward.\n\nThat’s the core promise of Zambo: it doesn’t just process data; it protects it.\n\nI also tested the lead generation module. I asked for source-backed prospects in Austin for web design. The tool returned zero results. I didn’t force a match. I didn’t hallucinate a name. It told me the truth: no verified leads exist right now. Accuracy over volume.\n\nFinally, I kicked off a Ghost Audit on zambo.dev. The system is currently running through ten stages: Recon, Infrastructure, SEO, and Synthesis. The report will be ready in 90 seconds. You can watch the stream or download the full markdown file.\n\nThis isn’t a demo. It’s a live system handling real edge cases.\n\n**Your next step:**\nClick this link to see the live audit stream for the current run. It’s free, read-only, and requires no account.\n\nhttps://zambo.dev/api/ghost-audit/6d571a4f-93c5-449d-854c-8e4014699cf9/stream\n\nIf you want to test the limits yourself, the free tier is open. Just remember: the tool tells you what’s there, not what you want to see.\n\nBest,\n\n[Your Name]\nFounder, Zambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:1b7263c6ccde511671a6ab3b908c15680d032cb266921799d08e45e855551cb4","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:198b245ff14c7f056b5b0b93187972073a2e03c94c47d63a6e61437e4a8bce0d","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:89381874f86c3f6aac08674a7c5d0ef1509712ed9e7787a58d62eafc5939ea66","anchor":{"event_id":"888274825756b23c58007acd40882f999d384318125d3612726681a00f87c15c","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-29T10:48:26.212Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-29T10:48:24.361Z","evidence_url":null,"receipt_uuid":"12733638-b1f2-4906-a880-d46471eee47c","output_sha256":"sha256:7c877a91ca3a85683387b7ff470eaeaa3bd15d0e5a52dbea7644db21aaa07df8","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-29T10:48:24.361Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:7c877a91ca3a85683387b7ff470eaeaa3bd15d0e5a52dbea7644db21aaa07df8\",\"receipt_uuid\":\"12733638-b1f2-4906-a880-d46471eee47c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-29T10:48:24.361Z","detail":"The receipt store reports 2026-10-29T10:48:24.361Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:7c877a91ca3a85683387b7ff470eaeaa3bd15d0e5a52dbea7644db21aaa07df8","computed_hash":"sha256:7c877a91ca3a85683387b7ff470eaeaa3bd15d0e5a52dbea7644db21aaa07df8","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}