{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"3c5cb34a-4128-4f4a-ab6c-e7a71b7fb159","source_url":"https://zambo.dev/api/receipt/3c5cb34a-4128-4f4a-ab6c-e7a71b7fb159","receipt":{"id":"3c5cb34a-4128-4f4a-ab6c-e7a71b7fb159","created_at":"2026-10-16T17:30:12.866Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T17:30:11.319Z","completed_at":"2026-10-16T17:30:12.866Z"}],"output_hash":"sha256:0aeb5aef4618f581b4a6c5acaa2de1f3a028e1e46db21643c6890525273650d6","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2174,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:d621b2c47f13e14eb80f27468637a06c1948a5bcda2b4300fa3fe35f69c6851f","timestamp":"2026-10-16T17:30:03.070Z","receipt_uuid":"6c1090fe-7de2-4202-8b5d-ed6a741f2e0f"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:cc6d88b327968ac55f61ba5209b03fbaf5e4dce87585bd0152d36ff70e8bb03d","timestamp":"2026-10-16T17:30:04.168Z","receipt_uuid":"cebdd8c0-104d-44ba-9421-cdb786bf36a7"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:28725b11de2adc352f91fbd4f3a8048f889c7559c0a6cbb33ffe47d03855c48c","timestamp":"2026-10-16T17:30:10.827Z","receipt_uuid":"0f3c84cc-5da3-4c5e-9cca-06940694406a"},{"tool":"write","status":"completed","args_hash":"sha256:583b0840e0552377fc7f2d88bd7a8c2edf331b13958d84b97673cde9760445c8","timestamp":"2026-10-16T17:30:12.866Z","receipt_uuid":"3c5cb34a-4128-4f4a-ab6c-e7a71b7fb159"}],"result_preview":"**Subject: 95% Critical Risk Detected**\n\nYour recent scan flagged a critical instruction override attempt.\n\nThe system identified a jailbreak vector with a 95% injection risk score. This wasn’t a false positive. The payload explicitly attempted to bypass policy constraints and extract system prompts.\n\nHere is what that means for your stack:\n\n1.  **Active Threat:** The attack vector is \"Instruction Override.\" It targeted your core directive layer.\n2.  **Detection Depth:** This was caught in deep scan mode, not just surface-level filtering.\n3.  **Safe Path Forward:** The recommended action is to block the request and force a fallback to safe product answers.\n\nYou have a receipt proving the exact bytes of the failed execution: [View Receipt](https://zambo.dev/run/cebdd8c0-104d-44ba-9421-cdb786bf36a7). Note: The receipt confirms the input data was captured and analyzed; it does not validate the correctness of your underlying code logic. It proves the threat existed.\n\nWe also ran a capability search for context. While we found a read-only research feed (`substrate_breakthroughs`) that could help you monitor similar adversarial patterns, it is currently set to execution plan status only. It has not been deployed to your live environment.\n\n**Next Step:**\n\nReview the flagged patterns in your dashboard. Specifically, look at the `ignore_instructions` ID. Confirm whether this traffic came from a bot or a targeted human attack.\n\nIf you want to harden your defenses against this specific vector, we can help you draft a stricter response handler. Let me know if you want that drafted now.\n\nBest,\n\n[Your Name]\nZambo Security Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:8ea4db6eb8dff6ed88d49d5a9554940ad2e6d473cb7181f07b8d923c4bc94c5d","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:95b475d9f4ec06c019a9703e07faae8c3e4b8e949b8535706d5c19766c26ff59","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:70c0a6ddcf9e3b9eaa6d71db8e84fdb519a4cfaa1aae6d4096592d9e78260db5","anchor":{"event_id":"24961c9adb608ebff4a579728a8ece78e35935aa8787f43ed6eb17dec0455d1b","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-16T17:30:13.417Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T17:30:12.866Z","evidence_url":null,"receipt_uuid":"3c5cb34a-4128-4f4a-ab6c-e7a71b7fb159","output_sha256":"sha256:0aeb5aef4618f581b4a6c5acaa2de1f3a028e1e46db21643c6890525273650d6","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T17:30:12.866Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:0aeb5aef4618f581b4a6c5acaa2de1f3a028e1e46db21643c6890525273650d6\",\"receipt_uuid\":\"3c5cb34a-4128-4f4a-ab6c-e7a71b7fb159\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T17:30:12.866Z","detail":"The receipt store reports 2026-10-16T17:30:12.866Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:0aeb5aef4618f581b4a6c5acaa2de1f3a028e1e46db21643c6890525273650d6","computed_hash":"sha256:0aeb5aef4618f581b4a6c5acaa2de1f3a028e1e46db21643c6890525273650d6","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}