{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"1451fa36-6d5f-4bcf-87b1-4dad89ccc43c","source_url":"https://zambo.dev/api/receipt/1451fa36-6d5f-4bcf-87b1-4dad89ccc43c","receipt":{"id":"1451fa36-6d5f-4bcf-87b1-4dad89ccc43c","created_at":"2026-10-16T08:46:01.249Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T08:45:59.986Z","completed_at":"2026-10-16T08:46:01.249Z"}],"output_hash":"sha256:3605aaf7e33308a8a26db96a80ab68406cbf87fbb7064827beec14cfbf6faa7c","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2557,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:c6843b74afd9d2aaa7ca97e4897d55d2b6f3ae3e5f27ebde6a1e366d4fa4955d","timestamp":"2026-10-16T08:45:51.824Z","receipt_uuid":"ed6279fd-e8ab-4f08-bcae-33b1ca76e3a8"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:6d1d2823fd0f392a7fce60f8704c64c8db7c5a5fa5eceef8de30c9ff7b39ea18","timestamp":"2026-10-16T08:45:52.390Z","receipt_uuid":"d6fd51c1-7ecd-4deb-99a3-66c88b7bda2b"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:713d8092753658fbc0ff62c65d81fbe4b1a6b9f112b84297b9eee0e8e83bc2e2","timestamp":"2026-10-16T08:45:53.009Z","receipt_uuid":"b008874b-6bea-4fa5-99a7-7506a2aea492"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:cffa28db958a2f647ab685a9814064b59466af80e368e38bcae9e853330687af","timestamp":"2026-10-16T08:45:59.252Z","receipt_uuid":"b969ab02-272c-407c-a84e-3f6b064fcd50"},{"tool":"write","status":"completed","args_hash":"sha256:d9560e5fcf15d20d546076a3a6f78a1857ce9b9cd0ea7e1368e7cdaa55a22c59","timestamp":"2026-10-16T08:46:01.249Z","receipt_uuid":"1451fa36-6d5f-4bcf-87b1-4dad89ccc43c"}],"result_preview":"Subject: Zambo is live: PromptShield, Capability Search, and Ghost Audit\n\nHello,\n\nZambo has launched. We are shipping three core tools designed to secure, discover, and audit your AI infrastructure.\n\nFirst, **PromptShield** is now active. It detects malicious injection attempts, jailbreaks, and policy bypasses in real-time. The system operates in deep scan mode, identifying critical risks like instruction overrides while maintaining low latency. It provides a clear safety recommendation—block or pass—along with detailed analysis of intent and attack vectors. You get immediate visibility into whether your inputs are safe, backed by a receipt for every run.\n\nSecond, **Capability Search** helps you find source-backed prospective customers and research assets. It executes read-only research feeds, such as `substrate_breakthroughs`, to surface relevant AI tools and data. This is strictly for discovery. It identifies prospects, not customers. It does not send outreach or invent findings. If a tool requires human web action, like VeriAI, the system flags it explicitly rather than attempting an unverified call.\n\nThird, **Ghost Audit** is ready to scan your site. It runs a ten-stage process covering recon, infrastructure, SEO, page coverage, AI layers, conversion, brand presence, competition, creative gaps, and synthesis. You can stream live stage-by-stage output via SSE or download the full markdown report within 90 seconds. The audit generates a PDF and provides a direct link to the UI for deeper exploration.\n\nThese tools are built for precision. PromptShield protects your inputs. Capability Search expands your research without noise. Ghost Audit reveals hidden gaps in your digital footprint.\n\n**Next Step:** Visit [zambo.dev](https://zambo.dev) to access the API documentation and start your first scan. The free tier allows unlimited calls to PromptShield and read-only research tools.\n\nWe built this for teams who need clarity, not just code. Test the limits. See what’s hidden.\n\nBest,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:2b59a9208306df56d690380fdb60a2e26ebb6c8e7db09a09d75bf2953fd41f8c","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:7004adc65643be9fedea350ddc0288e9197b6453d0a062ba4718e70a1c2a2433","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:75b8505dbe417ca4004d002ec61c2d054c355c726d22b85040241e454557ecc9","anchor":{"event_id":"1215e8f0efde642fc26471235debb684d4f73bad5c881eed5246a168a55e9c77","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-16T08:46:02.004Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T08:46:01.249Z","evidence_url":null,"receipt_uuid":"1451fa36-6d5f-4bcf-87b1-4dad89ccc43c","output_sha256":"sha256:3605aaf7e33308a8a26db96a80ab68406cbf87fbb7064827beec14cfbf6faa7c","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T08:46:01.249Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:3605aaf7e33308a8a26db96a80ab68406cbf87fbb7064827beec14cfbf6faa7c\",\"receipt_uuid\":\"1451fa36-6d5f-4bcf-87b1-4dad89ccc43c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T08:46:01.249Z","detail":"The receipt store reports 2026-10-16T08:46:01.249Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:3605aaf7e33308a8a26db96a80ab68406cbf87fbb7064827beec14cfbf6faa7c","computed_hash":"sha256:3605aaf7e33308a8a26db96a80ab68406cbf87fbb7064827beec14cfbf6faa7c","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}