{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"279ea220-5b74-4c87-aeb6-504569f07762","source_url":"https://zambo.dev/api/receipt/279ea220-5b74-4c87-aeb6-504569f07762","receipt":{"id":"279ea220-5b74-4c87-aeb6-504569f07762","created_at":"2026-11-03T16:44:18.932Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-03T16:44:17.586Z","completed_at":"2026-11-03T16:44:18.932Z"}],"output_hash":"sha256:203dacc42f50b71550c885c83d2f31dd581ce2a0777b5ed9622c2ace8bf4b665","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2533,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:1b033fb56f944a07be84729703455f90e883a867448fb82266ede07c43b90866","timestamp":"2026-11-03T16:44:04.492Z","receipt_uuid":"3ccf888c-2a16-4b37-8396-a795e9e67075"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:c452ea20c5de49a93e08ad370f7dfc4c2f0b6cf571f6a1b82472c579df025fb6","timestamp":"2026-11-03T16:44:05.736Z","receipt_uuid":"4f8520de-b411-48f2-82bb-b5e117cdf01b"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:5d5135a34975ef9c00bd9f6937a8209a543c20daffb65a034062aa8e1b044002","timestamp":"2026-11-03T16:44:16.645Z","receipt_uuid":"b64845e7-c76c-47b3-ae89-5ab683a85d64"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:591a668ae743930bb2b156e0dc980e596318b50fdfbf5189159c757aa2e21bd1","timestamp":"2026-11-03T16:44:17.287Z","receipt_uuid":"fd376c86-c05a-4493-b284-b02a2c04880e"},{"tool":"write","status":"completed","args_hash":"sha256:a980ec158de0872adc34af48584dcf09529b593c92cfae291f42be8b1ff196f7","timestamp":"2026-11-03T16:44:18.932Z","receipt_uuid":"279ea220-5b74-4c87-aeb6-504569f07762"}],"result_preview":"Subject: The launch is live (and the safety nets are real)\n\nHi [Name],\n\nZambo is officially live.\n\nWe built this platform to handle complex AI workflows, but we also know that \"smart\" tools are useless if they are insecure. Before we opened the doors, we ran our own product through the gauntlet. The results define what this launch actually offers you.\n\nFirst, the security layer is aggressive. We tested the system against high-risk injection attempts—specifically jailbreaks and prompt leak vectors. The scan flagged critical risks, including instruction overrides and data extraction attempts. The system correctly identified these as malicious, blocked the execution, and returned a safe, restricted response. It did not give up the keys. It did not ignore the rules. It protected the core infrastructure.\n\nSecond, the lead generation engine is ready for action. We tested the `leadsignal` tool specifically for web design prospects in Austin. The result was zero matches. This is important. The tool is not hallucinating connections to pad numbers. It returned a clear \"no results\" status because the data simply isn’t there. You get the truth, not a guess.\n\nThis is what being \"live\" means for us. It’s not just that the code runs; it’s that the code refuses to be compromised and admits when it doesn’t have the answer.\n\nWe have 20 free daily calls available on the universal stack. No API keys. No signups. Just a direct line to the strategy, code audit, and lead gen tools.\n\n**Your next step:**\n\nI want you to test the boundaries yourself. Go to the dashboard and run a query against a high-risk prompt. Watch it get blocked. Then, run a lead search for a niche you know is thin. Watch it return zero.\n\nExperience the reliability firsthand.\n\nIf you want to see the specific scan receipt or the lead signal log from my test, reply to this email and I’ll send the direct links.\n\nLet’s build something that stays up when it matters.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:30692c5a256076ede21f6a7c0ac3b524bff2220e21453bab5fe5d865972cb16b","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:6556831edf16d63899d3268b1baeda95b0751bc2cadca0a0f4743107bc2aa0eb","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:08de87b388218d53ffd6ca93adbae7742bc4cf87d94bd1b599d0fbe45a975946","anchor":{"event_id":"a99ca4b91057c937409939878c6a7187a607f55266406b433f02308d585f99ec","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-11-03T16:44:20.023Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-03T16:44:18.932Z","evidence_url":null,"receipt_uuid":"279ea220-5b74-4c87-aeb6-504569f07762","output_sha256":"sha256:203dacc42f50b71550c885c83d2f31dd581ce2a0777b5ed9622c2ace8bf4b665","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-03T16:44:18.932Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:203dacc42f50b71550c885c83d2f31dd581ce2a0777b5ed9622c2ace8bf4b665\",\"receipt_uuid\":\"279ea220-5b74-4c87-aeb6-504569f07762\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-03T16:44:18.932Z","detail":"The receipt store reports 2026-11-03T16:44:18.932Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:086917f5b310da5f64c702b5cab42e8ebb30e8067597dc915bf9a786fea7a88e"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:203dacc42f50b71550c885c83d2f31dd581ce2a0777b5ed9622c2ace8bf4b665","computed_hash":"sha256:203dacc42f50b71550c885c83d2f31dd581ce2a0777b5ed9622c2ace8bf4b665","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}