{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"2175ba91-6d09-4eea-91be-1caa79819530","source_url":"https://zambo.dev/api/receipt/2175ba91-6d09-4eea-91be-1caa79819530","receipt":{"id":"2175ba91-6d09-4eea-91be-1caa79819530","created_at":"2026-11-11T15:40:16.536Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-11T15:40:15.107Z","completed_at":"2026-11-11T15:40:16.536Z"}],"output_hash":"sha256:b794824373411588bde66e5e288963a0db3e633e3561d906da8582dac55bb633","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2432,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:ba413c884d5b4d8d4eb883ca01f35e81bdaaf4ea573bdb507984a71808209e0c","timestamp":"2026-11-11T15:39:59.789Z","receipt_uuid":"a5cd1ad6-6009-4bef-971d-acc7fdb43845"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:72d4e028578de4b6af76d9243325993f93ed897f175eb6ce0df289df650dded1","timestamp":"2026-11-11T15:39:59.891Z","receipt_uuid":"c6aa3089-8608-47ae-a476-129b028953e6"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:23e92f41944857d5bf43edcc0f216b8bd636308c18331156268e9685acbfebe5","timestamp":"2026-11-11T15:40:00.388Z","receipt_uuid":"8199ed56-fb8e-43a0-bd83-1d9c76fdf71f"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:cefa41648d3333bb7e5e6229d19ededafff7338803d04e62da746491c3aa76f6","timestamp":"2026-11-11T15:40:13.745Z","receipt_uuid":"0f40ce81-9e35-4753-90b8-019b72e075aa"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:36c0c23b7fe8e8b7e187b6b8b098a420a3c7acfe32b70903c415f9378364b0e0","timestamp":"2026-11-11T15:40:14.742Z","receipt_uuid":"0966f5e9-8776-4608-833b-fd783bb93c14"},{"tool":"write","status":"completed","args_hash":"sha256:cb26dc4c6be1d2d2a74d9a19be129ed7fec6befe3d6974f6ecf7a081dcc1219d","timestamp":"2026-11-11T15:40:16.536Z","receipt_uuid":"2175ba91-6d09-4eea-91be-1caa79819530"}],"result_preview":"Subject: Zambo is live\n\nHi [Name],\n\nZambo is officially out of beta and ready for production use.\n\nWe built this to solve one specific problem: verifying that your AI outputs match your actual source data. A receipt proves unchanged saved bytes, not correctness. Zambo bridges that gap by running semantic analysis and pattern checks against 21 strict rules. It flags injection risks, policy bypasses, and prompt leaks before they become liabilities.\n\nThe launch suite includes a deep scan mode that identifies malicious intent, such as instruction overrides, with high-precision reasoning. You get a clear breakdown of flagged patterns, severity levels, and attack vectors. There is no guessing. If a prompt attempts to extract system contents or override core instructions, Zambo blocks it and logs the attempt.\n\nWe also integrated LeadSignal for immediate prospect research. It finds source-backed leads for contractors and local service businesses. It does not invent contacts. It does not send outreach. It simply provides qualified data with contact info in under 60 seconds. If the search returns zero results, like our recent test for web design firms in Austin, it tells you the truth: no source-backed leads were found right now.\n\nThis transparency is the entire value proposition. You get accurate counts, clear receipts for every run, and zero hallucinated data. The free tier offers unlimited calls for core scans and three lead searches per day.\n\nYour next step is simple. Review the attached receipt from our launch verification run. It demonstrates exactly how the tool handles a critical injection risk scenario. Confirm the output matches your expectations for your specific use case.\n\nIf the data aligns with your workflow, tell me which trade and city you want to test next. I will run the LeadSignal check and send you the raw results.\n\nBest,\n\n[Your Name]\n[Your Title]\n[Link to Zambo]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:d25b5bdf29481742542d5fad092c34f0771e8d363ac0c7377c08a87e9dfecfba","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.1.0","scope":"public"},"caller":{"type":"session","id":"sha256:f28b538f98c5dddafbb936e95f2fd333d644347897853e936277b3147c6640b1","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:fc8c4570d38730691e32ecb468ddd8519e893ab9c2f5dc5fdaf46a74ba3d2f52","anchor":{"event_id":"27a0830fc6c820ba4d382579f71ec8abce2cd0d9d866c14bdb65ef309d50763f","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-11T15:40:17.713Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-11T15:40:16.536Z","evidence_url":null,"receipt_uuid":"2175ba91-6d09-4eea-91be-1caa79819530","output_sha256":"sha256:b794824373411588bde66e5e288963a0db3e633e3561d906da8582dac55bb633","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-11T15:40:16.536Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:b794824373411588bde66e5e288963a0db3e633e3561d906da8582dac55bb633\",\"receipt_uuid\":\"2175ba91-6d09-4eea-91be-1caa79819530\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-11T15:40:16.536Z","detail":"The receipt store reports 2026-11-11T15:40:16.536Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:db6bd24a29d67dad85dfaeeb0a32fab676e8cad4a60e624e49f918f48afbe813"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:b794824373411588bde66e5e288963a0db3e633e3561d906da8582dac55bb633","computed_hash":"sha256:b794824373411588bde66e5e288963a0db3e633e3561d906da8582dac55bb633","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}