{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"2039945e-f514-4317-b794-01d75b0304dd","source_url":"https://zambo.dev/api/receipt/2039945e-f514-4317-b794-01d75b0304dd","receipt":{"id":"2039945e-f514-4317-b794-01d75b0304dd","created_at":"2026-11-12T07:23:40.689Z","receipt_schema_version":"0.4","job_summary":"goal: Deep Auditor watch round-trip","tools":["handover"],"steps":[{"tool":"handover","status":"success","started_at":"2026-11-12T07:23:38.166Z","completed_at":"2026-11-12T07:23:40.689Z"}],"output_hash":"sha256:34d87a51b0b3dcb95f08ded164127404950923653f36662a4af29d966cd95c1c","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2104,"verification_status":"verified","session_trail":[{"tool":"handover","status":"completed","args_hash":"sha256:dbd40bc7c64ac9306356bbe3cdc6a80815ed8f6bd893def316af69e2ec72b7e3","timestamp":"2026-11-12T07:23:40.689Z","receipt_uuid":"2039945e-f514-4317-b794-01d75b0304dd"}],"result_preview":"{\"handover_id\":\"77318189-b86a-469b-a32d-e51f28eb6132\",\"url\":\"https://zambo.dev/handover/77318189-b86a-469b-a32d-e51f28eb6132\",\"reused\":false,\"agent_id\":\"agent-fc82e0a4f02bf621122c7939\",\"workflow_id\":\"48e6121e-8f2d-4f22-b100-13043c640da3\",\"agent_url\":\"https://zambo.dev/agent/agent-fc82e0a4f02bf621122c7939\",\"badge_url\":\"https://zambo.dev/badge/agent-fc82e0a4f02bf621122c7939.svg\",\"share_text\":\"Here's the handover for test-deep-auditor-2026-11-12: Deep Auditor watch round-trip. https://zambo.dev/handover/77318189-b86a-469b-a32d-e51f28eb6132 Each listed step has a verifiable receipt you can check in your browser.\",\"workflow_receipt_url\":\"https://zambo.dev/run/0c55e1fb-d7fd-4afb-80dc-63361ad268d2\",\"verify_url\":\"https://zambo.dev/api/v2/receipt/0c55e1fb-d7fd-4afb-80dc-63361ad268d2/verify\",\"steps\":2,\"ai_use_statement\":\"AI use: test-deep-auditor-2026-11-12 helped with 2 of 2 steps. See the listed receipts.\",\"sources\":{\"resolved\":0,\"not_resolved\":0,\"not_checked\":0},\"warnings\":[],\"acceptance_url\":\"https://zambo.dev/handover/77318189-b86a-469b-a32d-e51f28eb6132/acceptance.json\",\"release_hint\":\"hold\",\"ais\":[\"test-deep-auditor-2026-11-12\"],\"not_checked\":[\"The supplied work was saved, not independently executed or checked.\"],\"shield\":\"pass\",\"visibility\":\"public\",\"redactions\":0,\"owner_url\":\"https://zambo.dev/handover/77318189-b86a-469b-a32d-e51f28eb6132\",\"seal_next\":\"Keep workflow_manage_token private. With an active pass, call workflow_seal with workflow_id, workflow_manage_token and the same _session_id used for this handover. Sealing, including the dispute pack, requires a pass.\"}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:a7d7cb3d9778ae41921411ad0159df58d26658a1a0416ea000dcbeaf3bb7be32","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":3,"free_remaining":17,"free_limit":20,"signal_handle":null,"tool":{"name":"handover","version":"4.1.0","scope":"public"},"caller":{"type":"session","id":"sha256:f9af1de359a56f03ce40ed60f5fb639c20b670b6aff86dfe0669fb683d7abd1f","label":"test-deep-auditor-2026-11-12","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":"sha256:ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","evidence_url":"/api/evidence/ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","evidence_byte_length":752,"evidence_content_type":"application/json","evidence_source_url":null,"evidence_status":"ok","result_source":null,"evidence_source":"localhost","external_evidence":[],"provenance":{"result_source":null,"evidence_source":"localhost","evidence_status":"ok","evidence_captures":[{"sha256":"sha256:ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","source":"localhost","capture_role":"primary","evidence_status":"ok"}]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:06e1e0d48db3b5e02f64c2f0ed1cc28d0caadc9a3506a2ac17905cc20d5825ee","anchor":{"event_id":"518650f1c8efb6a870cbe5fd68a24dd67773eca9eff99bdb60897cbd9b0fc616","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-12T07:23:41.229Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-12T07:23:40.689Z","evidence_url":"https://zambo.dev/api/evidence/ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","receipt_uuid":"2039945e-f514-4317-b794-01d75b0304dd","output_sha256":"sha256:34d87a51b0b3dcb95f08ded164127404950923653f36662a4af29d966cd95c1c","schema_version":"zambo-receipt-anchor/1","evidence_sha256":"sha256:ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","evidence_byte_length":752},"envelope_bytes":"{\"anchored_at\":\"2026-11-12T07:23:40.689Z\",\"evidence_byte_length\":752,\"evidence_sha256\":\"sha256:ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0\",\"evidence_url\":\"https://zambo.dev/api/evidence/ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0\",\"output_sha256\":\"sha256:34d87a51b0b3dcb95f08ded164127404950923653f36662a4af29d966cd95c1c\",\"receipt_uuid\":\"2039945e-f514-4317-b794-01d75b0304dd\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-12T07:23:40.689Z","detail":"The receipt store reports 2026-11-12T07:23:40.689Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:e1b44743a6f1a1103bdcfcf3cceb97b223435ec8d9832b0e6ae3f873d13e44e3"}}},"evidence_status":"ok","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:34d87a51b0b3dcb95f08ded164127404950923653f36662a4af29d966cd95c1c","computed_hash":"sha256:34d87a51b0b3dcb95f08ded164127404950923653f36662a4af29d966cd95c1c","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}