{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"1f239bbe-f13c-418b-a76d-4818f6833aa8","source_url":"https://zambo.dev/api/receipt/1f239bbe-f13c-418b-a76d-4818f6833aa8","receipt":{"id":"1f239bbe-f13c-418b-a76d-4818f6833aa8","created_at":"2026-11-09T11:58:22.553Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-09T11:58:21.180Z","completed_at":"2026-11-09T11:58:22.553Z"}],"output_hash":"sha256:dcb4b781c89fabedab9b0188fd84b782dc22ec1ba75878ad8b6edc93667cd367","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2529,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:792ce51cc867587b5ca8decbb523d30748c1ca689a67e9b0383a63b25993b719","timestamp":"2026-11-09T11:58:05.270Z","receipt_uuid":"df007d74-852c-4f4a-a94b-863ef962a2bd"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:f2d4ec93742d65c57509b71b8c9280c0f7b1a83a8b74f39563f09392fc3d4c20","timestamp":"2026-11-09T11:58:05.798Z","receipt_uuid":"d176ec55-dcb6-4bce-bf92-f1a34d9eafe3"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:a5eeea806ac9c741137442d5d6b697b202e8a88e02f5c60bc778106270dc0984","timestamp":"2026-11-09T11:58:19.282Z","receipt_uuid":"344fbbbc-3bfc-4ae2-8eee-21a74101be44"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:8d92b434a691c13d6ae5bb18aa7e66fcf2dcc75bfbc6ca2e3bdf2e9d28c07e9f","timestamp":"2026-11-09T11:58:20.587Z","receipt_uuid":"eec47450-fa38-44e0-a877-41b707a7210e"},{"tool":"write","status":"completed","args_hash":"sha256:741d5d9f3d0844dcf18d2615169deb892bd7f7467a6a86849e600ac3c4438a6e","timestamp":"2026-11-09T11:58:22.553Z","receipt_uuid":"1f239bbe-f13c-418b-a76d-4818f6833aa8"}],"result_preview":"Subject: Zambo is live: Fast, source-backed lead research\n\nHi [Name],\n\nZambo’s Prompt Shield and LeadSignal are now active.\n\nThe launch checks confirm two key capabilities are running as expected. First, the semantic analysis engine successfully identified and blocked a critical injection attempt. The system flagged instruction overrides and prompt leak attempts with 100% risk confidence, demonstrating that your security layer actively protects against malicious inputs without manual intervention.\n\nSecond, LeadSignal executed a live search for web design prospects in Austin, TX. While this specific query returned zero results, the tool confirmed its ability to execute searches, manage daily quotas (3 free searches per IP), and provide transparent receipts. This proves the infrastructure works: it queries public sources, returns data or a clear \"no results\" status, and logs the action for verification.\n\nThese are not hypothetical features. The attached receipts prove the backend is processing requests, analyzing security risks, and managing tool usage in real-time. You now have a reliable way to generate qualified leads for contractors and local businesses while keeping your AI interactions secure.\n\n**Next Step**\n\nReview the execution receipts below to verify the system’s responsiveness and security logic. If you are ready to test lead generation for a specific trade and city, reply with your preferred parameters (e.g., \"Plumbers in Denver\"). I will run the query and share the results.\n\n**Proof of Execution**\n\n1.  **Security Scan Receipt:** [Link to Run d176ec55]\n    *   Confirmed detection of malicious intent.\n    *   Verified blocking of policy bypasses.\n2.  **LeadSignal Search Receipt:** [Link to Run 344fbbbc]\n    *   Confirmed execution of search for \"Web Design\" in \"Austin, TX\".\n    *   Verified quota tracking and status reporting.\n\nZambo is ready to help you find your next prospect without the guesswork.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:24c85b74af50e1cfdc83148648ec50f0d6db8854b9207b09daf1fc14bfe26426","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:ca9babead94d15f0ffe2a824ca934f1a6ca4c29872723f35ae9677b90aff003c","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:14f30fe8a6d4a624cad61c6d797a50c2cc52523e460ce2c55efb5aadbf2e6a8e","anchor":{"event_id":"540c47ed8d29861d4f149331770571fedc764b637c380eedaa860cbcee95f7de","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-09T11:59:24.614Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-09T11:58:22.553Z","evidence_url":null,"receipt_uuid":"1f239bbe-f13c-418b-a76d-4818f6833aa8","output_sha256":"sha256:dcb4b781c89fabedab9b0188fd84b782dc22ec1ba75878ad8b6edc93667cd367","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-09T11:58:22.553Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:dcb4b781c89fabedab9b0188fd84b782dc22ec1ba75878ad8b6edc93667cd367\",\"receipt_uuid\":\"1f239bbe-f13c-418b-a76d-4818f6833aa8\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-09T11:58:22.553Z","detail":"The receipt store reports 2026-11-09T11:58:22.553Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:9eb1dbcbfd0e2337b417e3894a70ebc38daae5f254a19c8f5f0b4d9820c556fd"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:dcb4b781c89fabedab9b0188fd84b782dc22ec1ba75878ad8b6edc93667cd367","computed_hash":"sha256:dcb4b781c89fabedab9b0188fd84b782dc22ec1ba75878ad8b6edc93667cd367","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}