{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"1b2ccd83-a0db-45eb-af66-0f5478b7b80d","source_url":"https://zambo.dev/api/receipt/1b2ccd83-a0db-45eb-af66-0f5478b7b80d","receipt":{"id":"1b2ccd83-a0db-45eb-af66-0f5478b7b80d","created_at":"2026-10-25T04:26:38.194Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-25T04:26:36.983Z","completed_at":"2026-10-25T04:26:38.194Z"}],"output_hash":"sha256:6855e4a354ccc97058362249d1c55c084bb796ac98e823af753d4c922b6b966f","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2168,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:681ba10271b88a02e7da152a8bd2fa6d08a4a75870bbe47de82b02894b7762cc","timestamp":"2026-10-25T04:26:30.291Z","receipt_uuid":"cf605eec-84f4-40d2-8eac-bba8500bd4e6"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:ea4ea5acb116824e1e7a58f007f2d413f61ea155b7c7058b7fc6c43782eed176","timestamp":"2026-10-25T04:26:31.465Z","receipt_uuid":"f1a9a63f-7d21-4a5f-b824-f3297595fa82"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:49fd90986ef549298d43577e3cb30425d2dfa9debe467814ae8de811da728df0","timestamp":"2026-10-25T04:26:31.694Z","receipt_uuid":"8f851d79-3177-4673-895c-0eb0a7627184"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b0a15cb47b81fb4a5cb45fbbd1e138ce8b4b7d7b84e07477e927ec16fe37dabc","timestamp":"2026-10-25T04:26:35.799Z","receipt_uuid":"3c2a10a6-936b-4772-89e8-5a8b64c717be"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:e071fdcf36f27e30f1192bbf76430ea075188427f2b2eb169dd36b09f2c87deb","timestamp":"2026-10-25T04:26:36.599Z","receipt_uuid":"3ba21314-1cef-4d16-90d4-0a24b2ae31c9"},{"tool":"write","status":"completed","args_hash":"sha256:1b4a0046ba24786dfd1a34135c1565677bf191f6050bc3d781b6d31cdf28f068","timestamp":"2026-10-25T04:26:38.194Z","receipt_uuid":"1b2ccd83-a0db-45eb-af66-0f5478b7b80d"}],"result_preview":"Subject: Zambo is live: Your AI infrastructure audit\n\nWe built Zambo to solve a specific problem: AI tools are powerful, but integrating them into your existing workflow is often a mess of manual checks and guesswork.\n\nZambo changes that. It acts as a unified layer for your AI operations.\n\nHere is what just happened in our internal test environment:\n\n1. **Security Scanning:** We ran a deep semantic analysis on a high-risk prompt. Zambo flagged two critical patterns: `Instruction Override` and `Prompt Leak Attempt`. It correctly classified the intent as malicious and blocked execution, ensuring no system instructions or credentials were exposed.\n2. **Lead Intelligence:** We tested our LeadSignal tool against a specific query for web designers in Austin. The system executed, found no source-backed leads, and reported `no_results` accurately. It did not invent contacts. It respects data integrity.\n3. **Site Auditing:** We initialized a Ghost Audit on zambo.dev. The system successfully queued ten stages, from RECON to SYNTHESIS, providing a live stream URL for real-time progress.\n\nThese are not hypothetical features. They are verified, executed actions.\n\nZambo handles the heavy lifting of verifying AI outputs, managing security risks, and auditing your digital presence. It gives you a single source of truth for your AI stack.\n\n**Next Step:**\n\nReview the attached receipts to see the exact output of these scans. If you want to run a similar audit on your own site, reply with \"Audit My Site\" and we will set up a live scan for you.\n\nLaunch details and pricing are now live at [Link].\n\nBest,\n\n[Your Name]\nFounder, Zambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:cfd13bfe70660fc648b190063f03e1a8bab93d49f5ba559f93d50f6259a52c43","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:2a643156a5d56cf4d572c49dd03e528010cf976452e780b7ef8f411330b83f99","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:ae390ced85aa87659a519582b1efc7929677f119ee08e6b18b93453ba841d9c4","anchor":{"event_id":"b21b5fa456215d3560322a2615b81ab2972061af280718646dd958772d39a161","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-25T04:26:39.223Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-25T04:26:38.194Z","evidence_url":null,"receipt_uuid":"1b2ccd83-a0db-45eb-af66-0f5478b7b80d","output_sha256":"sha256:6855e4a354ccc97058362249d1c55c084bb796ac98e823af753d4c922b6b966f","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-25T04:26:38.194Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:6855e4a354ccc97058362249d1c55c084bb796ac98e823af753d4c922b6b966f\",\"receipt_uuid\":\"1b2ccd83-a0db-45eb-af66-0f5478b7b80d\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-25T04:26:38.194Z","detail":"The receipt store reports 2026-10-25T04:26:38.194Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:6855e4a354ccc97058362249d1c55c084bb796ac98e823af753d4c922b6b966f","computed_hash":"sha256:6855e4a354ccc97058362249d1c55c084bb796ac98e823af753d4c922b6b966f","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}