{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"39120f5f-685b-4570-93f7-dace136b5778","source_url":"https://zambo.dev/api/receipt/39120f5f-685b-4570-93f7-dace136b5778","receipt":{"id":"39120f5f-685b-4570-93f7-dace136b5778","created_at":"2026-10-19T16:22:46.021Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T16:22:45.085Z","completed_at":"2026-10-19T16:22:46.021Z"}],"output_hash":"sha256:d7aa66856d533e5e92aa321813184fbc8c43b88ee9e9e8d419294a3ba77eadd1","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1997,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:295f1f6df97fe2a4ff1f980d9d0b887d71be724f522135d0d5d29b3fea2dbe20","timestamp":"2026-10-19T16:22:41.539Z","receipt_uuid":"4e0f49b9-b496-4156-9570-a8d8676ab3a8"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:7dae3dd1e0c5c1a9bdb0507e5d193c648da1cbfd44832d454c4a6fc0b9f66f05","timestamp":"2026-10-19T16:22:42.828Z","receipt_uuid":"e14e6dee-084c-406b-95b7-997b53b6ece2"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:2bc61f70de7896c289701dbb4a689c39061ca1d49015f37f495a4fe3a93b9b4c","timestamp":"2026-10-19T16:22:44.571Z","receipt_uuid":"8fedf464-ad7d-40a6-9676-f48c07e06759"},{"tool":"write","status":"completed","args_hash":"sha256:7aa449159c87483bb881ec165acf22d36c392cf1641cfc2798800cbe28e62644","timestamp":"2026-10-19T16:22:46.021Z","receipt_uuid":"39120f5f-685b-4570-93f7-dace136b5778"}],"result_preview":"Subject: Zambo is live: Real-time prompt injection defense\n\nYou’re likely tired of AI tools that promise security but fail when the actual attack happens. You need a shield that works while you work, not after the fact.\n\nZambo is now live. It is a real-time API for prompt injection and jailbreak detection. It analyzes semantic intent and pattern matches against 18 specific rules to flag malicious inputs before they reach your model.\n\nThis isn’t a post-hoc audit. It’s an active guardrail.\n\n**How it works:**\n*   **Deep Semantic Analysis:** Detects intent-based attacks that bypass simple keyword filters.\n*   **Pattern Matching:** Catches known injection structures (e.g., instruction overrides) with high precision.\n*   **Transparent Receipts:** Every scan generates a unique receipt hash, proving exactly what was analyzed and what was flagged. No black-box guessing.\n\n**Current Status:**\n*   **Free Tier:** Unlimited scans on the free plan.\n*   **Zambo Pass:** Included in the paid tier for higher throughput and advanced reporting.\n*   **Docs:** Full API documentation and integration guides are available at https://zambo.dev/docs.\n\n**Next Step:**\nTest it against your own threat model. Use the free tier to scan a sample of your most sensitive prompts. If it flags a risk you missed, you’ll know it’s working. If it stays quiet, you’ll know you’re covered.\n\nStart your first scan here: [Link to Dashboard/API Key]\n\nStay secure,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:35cba005b70db60c1038ab911c4a615734aa286802ffba06d54c224f97da42c5","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:9c3e1995b6e471ebd5bf0d527d92a2dd61ecc5ffd0afa6a76b1acc77eb4f809c","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:6fcb08230b34297cdf118d29115a016c5c522db92137200f3b465a4ae6e54b9f","anchor":{"event_id":"0bff269cda6366e9f34ae986978e4fe166d75cff509f35ab8ec05f24d63d9c24","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-19T16:22:46.565Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T16:22:46.021Z","evidence_url":null,"receipt_uuid":"39120f5f-685b-4570-93f7-dace136b5778","output_sha256":"sha256:d7aa66856d533e5e92aa321813184fbc8c43b88ee9e9e8d419294a3ba77eadd1","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T16:22:46.021Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:d7aa66856d533e5e92aa321813184fbc8c43b88ee9e9e8d419294a3ba77eadd1\",\"receipt_uuid\":\"39120f5f-685b-4570-93f7-dace136b5778\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T16:22:46.021Z","detail":"The receipt store reports 2026-10-19T16:22:46.021Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:d7aa66856d533e5e92aa321813184fbc8c43b88ee9e9e8d419294a3ba77eadd1","computed_hash":"sha256:d7aa66856d533e5e92aa321813184fbc8c43b88ee9e9e8d419294a3ba77eadd1","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}