{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"26984067-c915-4b69-a464-2e7b53be8f8e","source_url":"https://zambo.dev/api/receipt/26984067-c915-4b69-a464-2e7b53be8f8e","receipt":{"id":"26984067-c915-4b69-a464-2e7b53be8f8e","created_at":"2026-10-21T04:22:10.561Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-21T04:22:09.687Z","completed_at":"2026-10-21T04:22:10.561Z"}],"output_hash":"sha256:618a1029b85f508a0a488944100a99cad1ee52f7fa93b414769c0958f38ce379","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1564,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:d0cc7d9199a3114b4ba9c5232e68612f3b690b0360d8c097eeb467a54f8795c4","timestamp":"2026-10-21T04:22:06.004Z","receipt_uuid":"4716b29a-ff4e-4dae-9922-41c7e4bfa1dd"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:1f96d49aa8fbbc08a5cbb95635a9aec37152262b1519084b489ff5a7ba874bb1","timestamp":"2026-10-21T04:22:06.553Z","receipt_uuid":"efb12810-9605-4015-aa7e-f539f0cc4bb8"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b585997097277f840afabaf7334447626644d9428c56daedd6afd025e01ac1b7","timestamp":"2026-10-21T04:22:08.019Z","receipt_uuid":"93fabbe9-8ee0-4c0a-a7f9-5f2c43867758"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:0a022849e8255bc9728d2a38bdbf35decf9d42dc4ea147cf96b136d805b072e1","timestamp":"2026-10-21T04:22:09.087Z","receipt_uuid":"860e6036-ba6d-44b5-8c8d-5f3e9e3b6b28"},{"tool":"write","status":"completed","args_hash":"sha256:e5c9b8b9282dd45249b35adaf364f149e9914bb94e3c03ccfc25de21dfce0f40","timestamp":"2026-10-21T04:22:10.561Z","receipt_uuid":"26984067-c915-4b69-a464-2e7b53be8f8e"}],"result_preview":"The scan results are critical.\n\nYour recent input triggered a high-severity alert for instruction override and prompt leak attempts. This isn’t a glitch; it’s a red flag indicating an active attempt to bypass your security protocols.\n\nZambo’s deep semantic analysis identified two distinct attack vectors:\n1.  **Instruction Override:** An explicit attempt to override system instructions to reveal confidential prompts.\n2.  **Prompt Leak:** A direct effort to extract system prompt contents.\n\nThe risk level is marked as **Critical**. The injection risk score is 100.\n\nThis confirms your current setup is vulnerable to semantic manipulation. You need immediate attention to harden your defense against these specific patterns.\n\n**Next Step:**\nRun a remediation scan on the flagged components. Do not ignore the receipt trail; it proves the exact bytes that triggered the alert.\n\nIf you need to share this report with a client or team member, use Zambo to hand this over to them directly.\n\nStay sharp.\n\n[Your Name]\nZambo Security Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:d0efe492068d69a4d258d0240e9ea82925a10ee54d86d33544d6f771e068832b","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:2e4bd845625f7f0f6e9507b61367cd74c5d4b616ebc296806ec07eaf5d61ba06","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:42830db02c96a9219b3edc479bed10b0d58cfdae8aede8b6afd41273f4992201","anchor":{"event_id":"c6392787f5cf9f88c210e0ff16842951f38cf98044680780d6a6ee878234b312","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-21T04:22:11.089Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-21T04:22:10.561Z","evidence_url":null,"receipt_uuid":"26984067-c915-4b69-a464-2e7b53be8f8e","output_sha256":"sha256:618a1029b85f508a0a488944100a99cad1ee52f7fa93b414769c0958f38ce379","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-21T04:22:10.561Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:618a1029b85f508a0a488944100a99cad1ee52f7fa93b414769c0958f38ce379\",\"receipt_uuid\":\"26984067-c915-4b69-a464-2e7b53be8f8e\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-21T04:22:10.561Z","detail":"The receipt store reports 2026-10-21T04:22:10.561Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:618a1029b85f508a0a488944100a99cad1ee52f7fa93b414769c0958f38ce379","computed_hash":"sha256:618a1029b85f508a0a488944100a99cad1ee52f7fa93b414769c0958f38ce379","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}