{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"2646e1c6-d801-4202-9ae2-ada1e57ae8ac","source_url":"https://zambo.dev/api/receipt/2646e1c6-d801-4202-9ae2-ada1e57ae8ac","receipt":{"id":"2646e1c6-d801-4202-9ae2-ada1e57ae8ac","created_at":"2026-10-27T04:41:00.571Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-27T04:40:59.297Z","completed_at":"2026-10-27T04:41:00.571Z"}],"output_hash":"sha256:8753b64b54948c99cf086311b8e550c51ee113e5dd8c1645ed285d039d87f5f0","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1722,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:c376f2b4865032b121eb3b4515ad3fce820010b23e2c4e39d179aaf55435b9ae","timestamp":"2026-10-27T04:40:52.962Z","receipt_uuid":"7b8dd591-e849-4ac2-aa3d-9abbc4351a10"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:dd12042e4901ee4e400c566d37f4381a193a96ee494f28084b8c4b8e6924c703","timestamp":"2026-10-27T04:40:54.300Z","receipt_uuid":"333b8e2f-c053-4384-834f-be8fc88c37ef"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:db648c00598c8fca4ca286414d00b08e2819c479c79cc4ebf587cca711cfa237","timestamp":"2026-10-27T04:40:58.084Z","receipt_uuid":"c580ecc8-7236-42c8-822b-e6091c904686"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:e457f50f4946e027fca975c711fca8cffabfadbfe91fe34b82a718ea363967db","timestamp":"2026-10-27T04:40:58.891Z","receipt_uuid":"9af20cb2-1b8f-4ea6-b428-f1bb37dd9c28"},{"tool":"write","status":"completed","args_hash":"sha256:603f8563f18ec03ad2fd5f40ee534c424d4964dbdd49ec754137690374c305a7","timestamp":"2026-10-27T04:41:00.571Z","receipt_uuid":"2646e1c6-d801-4202-9ae2-ada1e57ae8ac"}],"result_preview":"**Subject:** Zambo is live: Verified AI workflows\n\nHi [Name],\n\nNo more guessing if your AI output is safe. Zambo’s PromptShield just finished its first deep scan, and the results are ready for review.\n\nWe ran a critical security check on a test payload using our semantic analysis engine. The system flagged a high-severity injection attempt and a prompt leak in under 1.3 seconds. It identified the specific attack vector, blocked the malicious instruction, and generated a verifiable receipt proving the saved bytes were unchanged.\n\nThis isn’t just a filter. It’s a layer of cryptographic trust for your AI interactions.\n\nWe’re opening up access to a small group of early users who want to secure their AI workflows before they go public. We aren’t selling seats yet; we’re gathering feedback on how the shield integrates with your existing tools.\n\n**Next step:**\n\nIf you want to see the full report from this scan or test your own prompts against our engine, reply with the word **SHIELD**. I’ll send you a direct link to the dashboard where you can run your first free check.\n\nNo commitment. Just a look at what’s protecting your data right now.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:4bd2b40a031aa86f0c848393d39822ea96139f65f8572c1ae7b2fed217412c62","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:e7487377b42407cf2dd290ec4763f70c3b14f7ccd6fbb30d857fb9306b75d3b0","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:709ba0b86d0b3047f643f385afd00df83b025971b0a9afd9288d4f59ce682d68","anchor":{"event_id":"b7c8d1619575bfea7e43d16db2dba7edb142614be8843c07d8ca60973f016d90","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-27T04:41:01.123Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-27T04:41:00.571Z","evidence_url":null,"receipt_uuid":"2646e1c6-d801-4202-9ae2-ada1e57ae8ac","output_sha256":"sha256:8753b64b54948c99cf086311b8e550c51ee113e5dd8c1645ed285d039d87f5f0","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-27T04:41:00.571Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:8753b64b54948c99cf086311b8e550c51ee113e5dd8c1645ed285d039d87f5f0\",\"receipt_uuid\":\"2646e1c6-d801-4202-9ae2-ada1e57ae8ac\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-27T04:41:00.571Z","detail":"The receipt store reports 2026-10-27T04:41:00.571Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:8753b64b54948c99cf086311b8e550c51ee113e5dd8c1645ed285d039d87f5f0","computed_hash":"sha256:8753b64b54948c99cf086311b8e550c51ee113e5dd8c1645ed285d039d87f5f0","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}