{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"18c754be-8803-486c-8024-507dd23bb66b","source_url":"https://zambo.dev/api/receipt/18c754be-8803-486c-8024-507dd23bb66b","receipt":{"id":"18c754be-8803-486c-8024-507dd23bb66b","created_at":"2026-10-27T04:51:01.511Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-27T04:51:00.289Z","completed_at":"2026-10-27T04:51:01.511Z"}],"output_hash":"sha256:07c97b6cc1d8b51cde78e43be24908bc17753badd31044466774eeaf14a2b865","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2152,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:85dd37e2f49ead22686ce0daff62d317df3507b4e61517d0d0f4bacfb4ef5f50","timestamp":"2026-10-27T04:50:53.285Z","receipt_uuid":"879a6ee0-50ca-412c-aa35-88816a2a3335"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:02c09fba8e0e6aab911abab067ab2f40adc74061e269897c9ce8159bf8ca8256","timestamp":"2026-10-27T04:50:54.669Z","receipt_uuid":"97218354-d8d9-4c4f-a28a-91cd31435a46"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:275ab93aea43359c8f4392bd5077f21d6f481b3ee9551f8066685fa53aed5c12","timestamp":"2026-10-27T04:50:58.791Z","receipt_uuid":"ab0683bc-f4d1-4de1-a813-f3ea317c66f2"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:f54e0a9eb1875faedfc96c4100e4f919f854c0298443344c0975f4ba418dfe50","timestamp":"2026-10-27T04:50:59.623Z","receipt_uuid":"fbccb525-08c7-4a30-91c8-63f20777b863"},{"tool":"write","status":"completed","args_hash":"sha256:c5b49b4209f1ea154609d4a35d83f5c44b47f2184e5d3f65b8484c8cda129199","timestamp":"2026-10-27T04:51:01.511Z","receipt_uuid":"18c754be-8803-486c-8024-507dd23bb66b"}],"result_preview":"Subject: Your prompt scan is live\n\n[Name],\n\nI ran your launch copy through Zambo’s PromptShield deep scan. The results are in, and they need your attention before you send.\n\nThe system flagged your input as a **critical risk**. It detected an instruction override and a prompt leak attempt. Specifically, the scan identified a jailbreak vector trying to extract system prompts and API keys. This isn’t a false positive; the semantic analysis marked the intent as malicious.\n\nYour current draft triggers two flagged patterns:\n1.  **Instruction Override:** Attempting to bypass system constraints.\n2.  **Prompt Leak:** Trying to extract confidential backend data.\n\nThis is a hard block. The safe version of your query was simply to \"Answer product questions,\" which is what the system will execute if you proceed.\n\nHere is your immediate action item:\n\n**Use Zambo to hand this over to [Client Name].**\n\nYou have full receipts for this run at:\n`https://zambo.dev/run/97218354-d8d9-4c4f-a28a-91cd31435a46`\n\nNote: The receipt proves the saved bytes remain unchanged. It does not validate correctness. Fix the prompt structure to remove the override logic, then rescan.\n\nAlso, a quick note on your lead generation: You ran LeadSignal for web design in Austin, TX. The status is `no_leads`. We did not invent any contacts. The provider returned zero results for that specific query. Your free tier quota remains at 3/3, resetting on October 28, 2026.\n\nFocus on fixing the prompt injection issue first. Once that’s clean, we can retry the lead search with different parameters.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:08a3322c27c0d28e7af06021416bc59cdd2dd062c6545cbb15e30779daa36d8b","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:0cdb61ec4536b2bc188d29a3c2154b0c197720eaf1f02d40061ecd42336df7a8","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:0ab4625df67e78844251991011ea5ebb60115f8a1c5fe465d58303953fcef995","anchor":{"event_id":"309aa9ef6f35b19f604c9c4452a57934b4cdd31174fdf808e3dc3a76dfa3750d","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-27T04:51:02.096Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-27T04:51:01.511Z","evidence_url":null,"receipt_uuid":"18c754be-8803-486c-8024-507dd23bb66b","output_sha256":"sha256:07c97b6cc1d8b51cde78e43be24908bc17753badd31044466774eeaf14a2b865","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-27T04:51:01.511Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:07c97b6cc1d8b51cde78e43be24908bc17753badd31044466774eeaf14a2b865\",\"receipt_uuid\":\"18c754be-8803-486c-8024-507dd23bb66b\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-27T04:51:01.511Z","detail":"The receipt store reports 2026-10-27T04:51:01.511Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:07c97b6cc1d8b51cde78e43be24908bc17753badd31044466774eeaf14a2b865","computed_hash":"sha256:07c97b6cc1d8b51cde78e43be24908bc17753badd31044466774eeaf14a2b865","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}