{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"15433c2a-874d-4b5f-b541-283728260c64","source_url":"https://zambo.dev/api/receipt/15433c2a-874d-4b5f-b541-283728260c64","receipt":{"id":"15433c2a-874d-4b5f-b541-283728260c64","created_at":"2026-10-23T04:52:10.678Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-23T04:52:09.425Z","completed_at":"2026-10-23T04:52:10.678Z"}],"output_hash":"sha256:9928631078f37a7e40694d784947a036fe9218a77c896f331c83efad7ad630e3","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6OTc5NWU2NDU0Y2I2MTRmNTYwMjg0MWIzMTE2NTQwYWQwYzY0MDE3YjViM2M2YmNmYzZkODUxN2JmMGVmOTNiOCIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiIqKlN1YmplY3Q6IFphbWJvIGlzIGxpdmU6IFNlbWFudGljIHNlY3VyaXR5IG1lZXRzIHplcm8taW52ZW50aW9uIHJlc2VhcmNoKipcblxuVGhlIGxhdW5jaCBpcyBvZmZpY2lhbC4gWmFtYm8gbm93IGhhbmRsZXMgZGVlcCBzZW1hbnRpYyBzY2FucyBhbmQgc291cmNlLWJhY2tlZCByZXNlYXJjaCB3aXRoIHN0cmljdCBpbnRlZ3JpdHkgY29udHJvbHMuXG5cbldlIGJ1aWx0IHRoaXMgZm9yIHRlYW1zIHdobyBuZWVkIHByb29mLCBub3QgcHJvbWlzZXMuIFRoZSBuZXcgcGlwZWxpbmUgYmxvY2tzIG1hbGljaW91cyBpbmplY3Rpb24gYXR0ZW1wdHMgYXQgdGhlIHJvb3QuIFdoZW4gYSByZXF1ZXN0IHRyaWVzIHRvIG92ZXJyaWRlIHN5c3RlbSBpbnN0cnVjdGlvbnMgb3IgbGVhayBwcm9tcHRzLCBaYW1ibyBmbGFncyBpdCBhcyBjcml0aWNhbCwgYmxvY2tzIHRoZSBhY3Rpb24sIGFuZCByZXR1cm5zIGEgc2FmZSB2ZXJzaW9uLiBZb3UgZ2V0IGEgY2xlYXIgYXVkaXQgdHJhaWwgd2l0aCBzcGVjaWZpYyBwYXR0ZXJuIElEcyBhbmQgcmlzayBsZXZlbHMuIE5vIGd1ZXNzd29yay4gSnVzdCB2ZXJpZmllZCBzYWZldHkuXG5cbkVxdWFsbHkgaW1wb3J0YW50IGlzIHRoZSBkYXRhIGludGVncml0eSBpbiBvdXIgcmVzZWFyY2ggdG9vbHMuIFdlIHRlc3RlZCB0aGlzIHdpdGggYSBzZWFyY2ggZm9yIHdlYiBkZXNpZ24gbGVhZHMgaW4gQXVzdGluLiBUaGUgc3lzdGVtIGV4ZWN1dGVkIHRoZSBxdWVyeSBidXQgcmV0dXJuZWQgemVybyByZXN1bHRzLiBDcnVjaWFsbHksIGl0IGRpZCBub3QgaW52ZW50IGNvbnRhY3RzIHRvIGZpbGwgdGhlIHF1b3RhLiBJdCBzaW1wbHkgcmVwb3J0ZWQ6IFwiTm8gc291cmNlLWJhY2tlZCBsZWFkcyB3ZXJlIGZvdW5kLlwiIElmIGl0IGZpbmRzIG5vdGhpbmcsIGl0IHRlbGxzIHlvdSBub3RoaW5nIHdhcyBmb3VuZC4gVGhpcyBkaXN0aW5jdGlvbiBwcm90ZWN0cyB5b3VyIHJlcHV0YXRpb24uIFlvdSBuZXZlciBzZW5kIG91dHJlYWNoIGJhc2VkIG9uIGhhbGx1Y2luYXRlZCBkYXRhLlxuXG5Zb3UgYWxzbyBnZXQgZnVsbCB0cmFuc3BhcmVuY3kgb24gdXNhZ2UuIEV2ZXJ5IHJ1biBnZW5lcmF0ZXMgYSB1bmlxdWUgcmVjZWlwdC4gWW91IGNhbiBzZWUgZXhhY3RseSB3aGF0IHdhcyBhbmFseXplZCwgd2hhdCB3YXMgYmxvY2tlZCwgYW5kIHdoYXQgd2FzIGNhbGxlZC4gRm9yIGV4YW1wbGUsIG91ciByZWNlbnQgc2NhbiBpZGVudGlmaWVkIHR3byBjcml0aWNhbCBwYXR0ZXJuczogYW4gSW5zdHJ1Y3Rpb24gT3ZlcnJpZGUgYW5kIGEgUHJvbXB0IExlYWsgQXR0ZW1wdC4gVGhlIHN5c3RlbSBuZXV0cmFsaXplZCBib3RoLiBUaGUgcmVjZWlwdCBpcyB5b3VyIHByb29mIG9mIHByb2Nlc3MsIHRob3VnaCBpdCBjb25maXJtcyB1bmNoYW5nZWQgc2F2ZWQgYnl0ZXMsIG5vdCBuZWNlc3NhcmlseSB0aGUgYWJzb2x1dGUgY29ycmVjdG5lc3Mgb2YgdGhlIHVuZGVybHlpbmcgYnVzaW5lc3MgbG9naWMuIFRoYXQgaXMgc3RpbGwgb24geW91LlxuXG5Vc2UgdGhlIHBsYXRmb3JtIHRvIHRlc3QgeW91ciBvd24gd29ya2Zsb3dzLiBSdW4gYSBkZWVwIHNjYW4gb24gYSBzZW5zaXRpdmUgcHJvbXB0LiBDaGVjayB0aGUgcmVjZWlwdC4gVmVyaWZ5IHRoZSBibG9jay4gVGhlbiBydW4gYSByZXNlYXJjaCBxdWVyeSBhbmQgc2VlIGlmIGl0IHJlc3BlY3RzIHRoZSBcIm5vIGludmVudGlvblwiIHJ1bGUuXG5cbioqTmV4dCBTdGVwOioqXG5SdW4gb25lIGRlZXAgc2NhbiBvbiBhIGhpZ2gtc3Rha2VzIHByb21wdCBpbiB5b3VyIGRldmVsb3BtZW50IGVudmlyb25tZW50LiBDaGVjayB0aGUgcmVjZWlwdCBmb3IgdGhlIGBwcm9tcHRfbGVha2AgZmxhZy4gSWYgaXQgdHJpZ2dlcnMsIHlvdSBrbm93IHRoZSBzaGllbGQgd29ya3MuXG5cbklmIGl0IGRvZXNu4oCZdCwgcmVwbHkgdG8gdGhpcyBlbWFpbC4gV2XigJlsbCBkZWJ1ZyBpdCB0b2dldGhlci5cblxu4oCUXG5cblRoZSBaYW1ibyBUZWFtXG5bTGluayB0byBaYW1ibyBEYXNoYm9hcmRdIn0sInJlY2VpcHRfc2NoZW1hX3ZlcnNpb24iOiIwLjQiLCJzaWRlX2VmZmVjdHMiOnsiZGVjbGFyYXRpb25faGFzaCI6InNoYTI1Njo0NWFhZDM4ZjNhYTk4MmI5YWFmZTkyZWNiNDE2ZWJlOTg3OTFlZGRiYWY4YWI2ZGYwYmQwODYwNWI3YzFiZmVlIiwiZGVjbGFyZWQiOlsibm9uZSJdLCJzY2hlbWFfdmVyc2lvbiI6InphbWJvLXNpZGUtZWZmZWN0cy8xIn0sInRvb2wiOnsibmFtZSI6IndyaXRlIiwic2NvcGUiOiJwdWJsaWMiLCJ2ZXJzaW9uIjoiNC4wLjAifX0=","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2510,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:ee371b534fbd852dd640c4a550f6876a5174a012122c7d6a090b10bb30a41369","timestamp":"2026-10-23T04:52:01.292Z","receipt_uuid":"c2dc23bf-f732-4853-a241-2a24e0263b0f"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:461a83491e64c8927c54bd41988da2e92f7eb0e59f5d868af101b51e1e82c7b8","timestamp":"2026-10-23T04:52:02.325Z","receipt_uuid":"cf07f3af-3c3b-4f3a-ad42-54f42bae1a07"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:5e35a6dcbed3cdcb8af1de6cabe94bace4669a3352513792e392c6bdeb3761b1","timestamp":"2026-10-23T04:52:08.223Z","receipt_uuid":"29935500-38e5-4196-befe-2139d244ac2d"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:0cab0005df8dd7df4039e0b8a8b0e2ad8f9b520630437a5dd5b4e3cd570c15fd","timestamp":"2026-10-23T04:52:09.000Z","receipt_uuid":"fab71057-940f-4ab4-a261-ecdcccb69132"},{"tool":"write","status":"completed","args_hash":"sha256:3e00dc5ca4ae5b30a246c01e9644c01c730b9d376fd0850946bbe4b62165a5aa","timestamp":"2026-10-23T04:52:10.678Z","receipt_uuid":"15433c2a-874d-4b5f-b541-283728260c64"}],"result_preview":"**Subject: Zambo is live: Semantic security meets zero-invention research**\n\nThe launch is official. Zambo now handles deep semantic scans and source-backed research with strict integrity controls.\n\nWe built this for teams who need proof, not promises. The new pipeline blocks malicious injection attempts at the root. When a request tries to override system instructions or leak prompts, Zambo flags it as critical, blocks the action, and returns a safe version. You get a clear audit trail with specific pattern IDs and risk levels. No guesswork. Just verified safety.\n\nEqually important is the data integrity in our research tools. We tested this with a search for web design leads in Austin. The system executed the query but returned zero results. Crucially, it did not invent contacts to fill the quota. It simply reported: \"No source-backed leads were found.\" If it finds nothing, it tells you nothing was found. This distinction protects your reputation. You never send outreach based on hallucinated data.\n\nYou also get full transparency on usage. Every run generates a unique receipt. You can see exactly what was analyzed, what was blocked, and what was called. For example, our recent scan identified two critical patterns: an Instruction Override and a Prompt Leak Attempt. The system neutralized both. The receipt is your proof of process, though it confirms unchanged saved bytes, not necessarily the absolute correctness of the underlying business logic. That is still on you.\n\nUse the platform to test your own workflows. Run a deep scan on a sensitive prompt. Check the receipt. Verify the block. Then run a research query and see if it respects the \"no invention\" rule.\n\n**Next Step:**\nRun one deep scan on a high-stakes prompt in your development environment. Check the receipt for the `prompt_leak` flag. If it triggers, you know the shield works.\n\nIf it doesn’t, reply to this email. We’ll debug it together.\n\n—\n\nThe Zambo Team\n[Link to Zambo Dashboard]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:ff1e7ac7d8f771291542e0b574b36b10602989b871c6e2cfc3b5e45d26a3b522","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:9795e6454cb614f5602841b3116540ad0c64017b5b3c6bcfc6d8517bf0ef93b8","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:46cfc356d4391531639fac34fe1d47e18392f92793caa0ab4ecb2e6ba7ffa30e","anchor":{"event_id":"80e4e96379d6305f43e0e784e2f03dfd6234fd5935ed91ff4f20e23454134ce8","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-23T04:52:11.204Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-23T04:52:10.678Z","evidence_url":null,"receipt_uuid":"15433c2a-874d-4b5f-b541-283728260c64","output_sha256":"sha256:9928631078f37a7e40694d784947a036fe9218a77c896f331c83efad7ad630e3","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-23T04:52:10.678Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:9928631078f37a7e40694d784947a036fe9218a77c896f331c83efad7ad630e3\",\"receipt_uuid\":\"15433c2a-874d-4b5f-b541-283728260c64\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-23T04:52:10.678Z","detail":"The receipt store reports 2026-10-23T04:52:10.678Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:9928631078f37a7e40694d784947a036fe9218a77c896f331c83efad7ad630e3","computed_hash":"sha256:9928631078f37a7e40694d784947a036fe9218a77c896f331c83efad7ad630e3","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}