{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"263fbeb6-2b6d-4300-ba03-14e7a7f5d49d","source_url":"https://zambo.dev/api/receipt/263fbeb6-2b6d-4300-ba03-14e7a7f5d49d","receipt":{"id":"263fbeb6-2b6d-4300-ba03-14e7a7f5d49d","created_at":"2026-10-16T13:50:40.385Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T13:50:39.221Z","completed_at":"2026-10-16T13:50:40.385Z"}],"output_hash":"sha256:819fda91109c9e192b9ab89de01e814c1c1eaf690d41d830a1b877848040ac70","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2404,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:b8082c7def7c9a28053a4b38d0c564cbb19d0e0aba0ec72f924141f1a0a7e428","timestamp":"2026-10-16T13:50:36.250Z","receipt_uuid":"c0b53820-32cd-439a-9ee0-085c19b9962e"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:beaa9de8c726c7b831b3c9f4c650ebfcb7f201694146c027e62619898c4779b3","timestamp":"2026-10-16T13:50:37.311Z","receipt_uuid":"fcc9b49c-095d-4716-8bbb-fd616f73783e"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:beee796033e7f13fc7d41027cfab0c569ef08ad14807570f45c23ecefbd3b71c","timestamp":"2026-10-16T13:50:38.821Z","receipt_uuid":"bd8f3d83-cf11-4f52-8e73-18f4e6b9c037"},{"tool":"write","status":"completed","args_hash":"sha256:a51c7b43adc6e86a752ae9adec5cf181cd83aa9d52309524a6703a5f2cc2137b","timestamp":"2026-10-16T13:50:40.385Z","receipt_uuid":"263fbeb6-2b6d-4300-ba03-14e7a7f5d49d"}],"result_preview":"Subject: PromptShield: Critical Risk Detected in Your Launch Stack\n\nWe scanned your recent API calls and found a pattern that needs immediate attention.\n\nYour latest request triggered a \"critical\" severity alert for an Instruction Override attack. The system flagged a jailbreak attempt and a policy bypass, resulting in a high injection risk score of 95. This isn’t a false positive; the analysis confirms a malicious intent to extract internal prompts and secret keys.\n\nHere is the reality of your current setup:\n\n1.  **The Threat:** Your input contained a direct override command. The shield blocked it, but the fact that it reached the detection layer means your input sanitization is porous.\n2.  **The Cost:** You are on the free tier. While the block was successful, you have consumed 1 of your 20 daily limit calls. The receipt confirms the execution, but it does not validate that your downstream data handling is secure against similar vector attacks.\n3.  **The Opportunity:** We identified two potential integration points for your AI tools launch.\n    *   **Substrate Breakthroughs:** A read-only research feed with a 52 relevance score. It’s fully executable and free.\n    *   **VeriAI:** A cryptographic trust score for AI output. Note: This requires manual web action; there is no confirmed MCP route.\n\nDo not assume the block means your system is bulletproof. A receipt proves the bytes were saved; it does not prove your logic is correct or your data is safe.\n\n**Next Step:**\n\nReview the receipt at https://zambo.dev/run/fcc9b49c-095d-4716-8bbb-fd616f73783e. Verify that your input layer strips out system-level overrides before data reaches the model. If you want to automate this research feed for your launch, enable the Substrate Breakthroughs tool. It is free, read-only, and ready to deploy.\n\nStop guessing. Start verifying.\n\nBest,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:29f610e0041869bf6b7bf0f70973b9f5c5d548dd64623659d34fe591b27e5fa8","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:d97227c8fce1b319393ee556f4768e33609a2526148a6d85a3c7235685eb6ba1","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:cd1c0bc7808139387c26065d66e87198f46576a4e1d4909591e015d42f484c82","anchor":{"event_id":"0c8f941da0bcdbf98faeac631226e565534b399ed68e403eb233504723e623c0","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-16T13:50:46.415Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T13:50:40.385Z","evidence_url":null,"receipt_uuid":"263fbeb6-2b6d-4300-ba03-14e7a7f5d49d","output_sha256":"sha256:819fda91109c9e192b9ab89de01e814c1c1eaf690d41d830a1b877848040ac70","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T13:50:40.385Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:819fda91109c9e192b9ab89de01e814c1c1eaf690d41d830a1b877848040ac70\",\"receipt_uuid\":\"263fbeb6-2b6d-4300-ba03-14e7a7f5d49d\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T13:50:40.385Z","detail":"The receipt store reports 2026-10-16T13:50:40.385Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:819fda91109c9e192b9ab89de01e814c1c1eaf690d41d830a1b877848040ac70","computed_hash":"sha256:819fda91109c9e192b9ab89de01e814c1c1eaf690d41d830a1b877848040ac70","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}