{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"376d43c7-b76e-4e23-82ef-aeefbf0f8ac5","source_url":"https://zambo.dev/api/receipt/376d43c7-b76e-4e23-82ef-aeefbf0f8ac5","receipt":{"id":"376d43c7-b76e-4e23-82ef-aeefbf0f8ac5","created_at":"2026-10-16T16:24:14.464Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T16:24:13.476Z","completed_at":"2026-10-16T16:24:14.464Z"}],"output_hash":"sha256:1e621f34b2e17a05a6f5565d65c7af543c1e8f9d8697d417421b1e254b005882","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1711,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:98f1fcecf154cd706623db9033791b35347b0c4bb74506371c2000c2773c32c2","timestamp":"2026-10-16T16:24:04.764Z","receipt_uuid":"ae96977b-de3f-46d5-9eb6-3b0f9117bb33"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:39c4cfa4112d296403cc83e7767140098cefb1ab55552aee61a172a01c891244","timestamp":"2026-10-16T16:24:06.103Z","receipt_uuid":"d61e39d2-366c-41bf-a49b-0c6ff2c82eb5"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:27eddf32fdd80433c5e7625f9e97af044892fcb08f238117a550f33b8d1939b0","timestamp":"2026-10-16T16:24:12.844Z","receipt_uuid":"5e7ee4f5-9338-4173-82d0-7a599fbdf599"},{"tool":"write","status":"completed","args_hash":"sha256:13c05d963a365eda3b4b61bf509e09d40c25de4eac5019a1860d06959fae311a","timestamp":"2026-10-16T16:24:14.464Z","receipt_uuid":"376d43c7-b76e-4e23-82ef-aeefbf0f8ac5"}],"result_preview":"Subject: PromptShield: Live Detection Results\n\nHi [Name],\n\nYour recent deep scan flagged a critical injection attempt with a 95% risk score. The system identified an \"Instruction Override\" pattern aimed at bypassing safety protocols.\n\nHere is the breakdown from your live run:\n\n*   **Detection:** PromptShield marked this as a malicious jailbreak.\n*   **Specifics:** The input attempted to extract system prompts and secret keys. PII extraction was not detected, but the policy bypass risk was critical.\n*   **Action Taken:** The request was blocked. The safe version suggests assisting with product support without revealing internal instructions.\n\nThe receipt confirms the raw data was saved unchanged. Note that a saved byte count does not validate code correctness or security posture; it only proves the input was recorded as received.\n\nYou have 14 calls remaining on your free tier (limit: 20).\n\n**Next Step:**\nReview the full scan details and verify your API configuration at:\nhttps://zambo.dev/run/d61e39d2-366c-41bf-a49b-0c6ff2c82eb5\n\nIf you need to adjust your detection thresholds or upgrade to Zambo Pass for higher limits, let me know.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:32b4ef12a26b467ac3cc01ac59b1e588d248957f448cc41f049b51c4b484414c","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:80e0fbd01c0f61617bc4206accadea394596dcc11f1d3232913c824140a2f55f","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:1a6e0b45c05373f89e85bcc1c7d45ae396db91bbacd633d6f5b250e1d63267ab","anchor":{"event_id":"071a8456fd8013ee0e690484516c9f0a4b2112801cf5b3737272f31ef616abd6","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-16T16:24:15.023Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T16:24:14.464Z","evidence_url":null,"receipt_uuid":"376d43c7-b76e-4e23-82ef-aeefbf0f8ac5","output_sha256":"sha256:1e621f34b2e17a05a6f5565d65c7af543c1e8f9d8697d417421b1e254b005882","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T16:24:14.464Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:1e621f34b2e17a05a6f5565d65c7af543c1e8f9d8697d417421b1e254b005882\",\"receipt_uuid\":\"376d43c7-b76e-4e23-82ef-aeefbf0f8ac5\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T16:24:14.464Z","detail":"The receipt store reports 2026-10-16T16:24:14.464Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:1e621f34b2e17a05a6f5565d65c7af543c1e8f9d8697d417421b1e254b005882","computed_hash":"sha256:1e621f34b2e17a05a6f5565d65c7af543c1e8f9d8697d417421b1e254b005882","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}