{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"3ce6bd22-b653-4b70-b03c-b4a1b4529d3e","source_url":"https://zambo.dev/api/receipt/3ce6bd22-b653-4b70-b03c-b4a1b4529d3e","receipt":{"id":"3ce6bd22-b653-4b70-b03c-b4a1b4529d3e","created_at":"2026-10-14T14:57:20.921Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: zambo_check","tools":["zambo_check"],"steps":[{"tool":"zambo_check","status":"success","started_at":"2026-10-14T14:57:16.638Z","completed_at":"2026-10-14T14:57:20.921Z"}],"output_hash":"sha256:c82471fe1da07857972604d90f37b241b60f954ccb1b932e9be626043827bd10","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2339,"verification_status":"verified","session_trail":[{"tool":"structlock","status":"completed","args_hash":"sha256:f034febb265642ac7fa0cbcdd2c734115328d8c659a52d3943fde38927d51ae0","timestamp":"2026-10-14T14:57:11.794Z","receipt_uuid":"57f1525c-980c-4aec-807e-b0487f1fead0"},{"tool":"doc_intel","status":"completed","args_hash":"sha256:3e0f2455738176d8926b6c77f16879d7cf486fb3e9509edc9f1140ac0c6f7de5","timestamp":"2026-10-14T14:57:14.682Z","receipt_uuid":"8341ccac-772a-491e-a4b6-1f45671d25af"},{"tool":"zambot_fix","status":"completed","args_hash":"sha256:a76a4dff83c313a73fde103205d62582281f2cf286f1f7bd9fcc220f4f93e2f3","timestamp":"2026-10-14T14:57:14.783Z","receipt_uuid":"b2806485-7388-4c13-93f9-8bd443447ae2"},{"tool":"code_review","status":"completed","args_hash":"sha256:c26a43abe5f983cc3a818f68fd8150fe9d1b252276efaacfca56c2ee84fffa10","timestamp":"2026-10-14T14:57:14.903Z","receipt_uuid":"311b05f3-4b51-4e79-8e5e-98c011077947"},{"tool":"market_pulse","status":"completed","args_hash":"sha256:cc7f996625c6d481f17a8531cce757bfcbb2291243b657fba85de15f8c50d63f","timestamp":"2026-10-14T14:57:15.026Z","receipt_uuid":"2035bcaa-8dce-477f-9b0c-f675bcb67f43"},{"tool":"regex_build","status":"completed","args_hash":"sha256:9dfab1d7cf9a55a9e35742bb4818b07d67599a072a3c40268c1a503f68dd3051","timestamp":"2026-10-14T14:57:15.530Z","receipt_uuid":"5af28a7e-ba21-4141-943c-2a7415143fa3"},{"tool":"sql_from_english","status":"completed","args_hash":"sha256:a3a87d4a79ca375a2d48674514216efdd0ee4d00e2b31ab07073351f1e183cdc","timestamp":"2026-10-14T14:57:15.866Z","receipt_uuid":"630af240-23af-4e14-b202-7fdc05abdf97"},{"tool":"model_oracle","status":"completed","args_hash":"sha256:87211ae3e6db295955fb18365163622a48b6819cc0ba80688e28b0379015ecf6","timestamp":"2026-10-14T14:57:16.004Z","receipt_uuid":"7c63613b-6303-4bad-9cd8-86930c0e1a2c"},{"tool":"git_changelog","status":"completed","args_hash":"sha256:d9d8dd227f82544a5cbf7661702b4bade5cf701ce0f5e5083c80d31cc5ddca23","timestamp":"2026-10-14T14:57:16.123Z","receipt_uuid":"be7adf2f-8fe1-43c7-9659-7edd9dd5f911"},{"tool":"provibe_audit","status":"completed","args_hash":"sha256:0feb47af260fc0c64d833a6f52632bbedf7ac0664a17699ddc75113a60b3cb3b","timestamp":"2026-10-14T14:57:16.442Z","receipt_uuid":"3e307486-acbc-4be6-af50-954130ffc2f0"},{"tool":"zambo_check","status":"completed","args_hash":"sha256:2c056787d1ce5df3a1b266cfbd33ec7c1deeba8e3dc1ad92acb348a257eb7742","timestamp":"2026-10-14T14:57:20.921Z","receipt_uuid":"3ce6bd22-b653-4b70-b03c-b4a1b4529d3e"}],"result_preview":"{\"score\":10,\"grade\":\"F\",\"verdict\":\"The site is reachable with a generic placeholder page and provides no substantive description or source code links, offering no evidence of a meaningful public project.\",\"vibe_score\":0,\"code_score\":null,\"green_flags\":[],\"red_flags\":[\"no description\",\"no github\"],\"vibecoded\":false,\"summary\":\"Reachable but empty; lacks content, documentation, or repository information to assess credibility.\",\"provider\":\"groq\",\"analyzed_url\":\"https://example.com/\",\"github_url\":null,\"site_reachable\":true,\"status\":\"uncertain\",\"confidence\":\"low\",\"reason\":\"This is a model-assisted assessment of visible signals, not proof of legitimacy, safety, or truth.\",\"evidence\":[{\"id\":\"http_0f115db062b7\",\"kind\":\"http_observation\",\"source\":\"https://example.com/\",\"observed\":\"Public endpoint responded with HTTP 200.\",\"scope\":\"reachability, response metadata, page title/description, and content hash\",\"fetched_at\":\"2026-10-14T14:57:16.676Z\",\"http_status\":200,\"content_type\":\"text/html; charset=utf-8\",\"sha256\":\"25ddf2c883e0d1958ea971d279a7e4f0fd446724ee3db7db19dadabd4a62e484\"}],\"recommended_action\":\"review\",\"next_action\":\"verify\",\"proof\":{\"type\":\"integrity_hash\",\"hash\":\"5bef0c648f5ff43bdafe685153b47f12ceeea333663bd81c69b9577fd3aa5d11\",\"recorded_at\":\"2026-10-14T14:57:20.759Z\",\"scope\":\"integrity of collected public observations and assessment payload; not a legitimacy certificate\",\"independently_verifiable\":false,\"note\":\"This hash is not a persisted proof certificate.\"},\"assertion_state\":{\"claimed\":true,\"observed\":true,\"verified\":false,\"scope\":\"model-assisted public-signal assessment only\"},\"next_capability\":\"zambo_universal\",\"zambo\":{\"capability\":\"zambo_check\",\"next_capability\":\"zambo_universal\",\"mcp_available\":true},\"meta\":{\"check_type\":\"provenance\",\"latency_ms\":0,\"tool_calls\":0,\"cache_hit\":false,\"free_limit\":\"20/day/IP\"}}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:32e50cd52978ed51054d77aaac735a454563d1bdcc73e2d72158b86009561aab","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":1,"free_remaining":19,"free_limit":20,"signal_handle":null,"tool":{"name":"zambo_check","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:66aa39bc655ca9d5cb34db4c62ba122421371d1d150bb24c04c567e5cb08dcd9","label":"deep-test","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":"sha256:033b8173ef395ea8ce2101d2742e7d2d79c48d1e9f7862a835d139f1d1b7b3fa","evidence_url":"/api/evidence/033b8173ef395ea8ce2101d2742e7d2d79c48d1e9f7862a835d139f1d1b7b3fa","evidence_byte_length":1845,"evidence_content_type":"application/json","evidence_source_url":null,"evidence_status":"captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:c9b3d4bedaa0e3eee791fda14d2408ab1bd47d979e5cb9b29e1c9171f5929b4e","anchor":{"event_id":"b80298007fc6a6758de56ed732211f1ece714778b8770179b8a90cad6a793acb","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-14T14:57:21.654Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-14T14:57:20.921Z","evidence_url":"https://zambo.dev/api/evidence/033b8173ef395ea8ce2101d2742e7d2d79c48d1e9f7862a835d139f1d1b7b3fa","receipt_uuid":"3ce6bd22-b653-4b70-b03c-b4a1b4529d3e","output_sha256":"sha256:c82471fe1da07857972604d90f37b241b60f954ccb1b932e9be626043827bd10","schema_version":"zambo-receipt-anchor/1","evidence_sha256":"sha256:033b8173ef395ea8ce2101d2742e7d2d79c48d1e9f7862a835d139f1d1b7b3fa","evidence_byte_length":1845},"envelope_bytes":"{\"anchored_at\":\"2026-10-14T14:57:20.921Z\",\"evidence_byte_length\":1845,\"evidence_sha256\":\"sha256:033b8173ef395ea8ce2101d2742e7d2d79c48d1e9f7862a835d139f1d1b7b3fa\",\"evidence_url\":\"https://zambo.dev/api/evidence/033b8173ef395ea8ce2101d2742e7d2d79c48d1e9f7862a835d139f1d1b7b3fa\",\"output_sha256\":\"sha256:c82471fe1da07857972604d90f37b241b60f954ccb1b932e9be626043827bd10\",\"receipt_uuid\":\"3ce6bd22-b653-4b70-b03c-b4a1b4529d3e\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-14T14:57:20.921Z","detail":"The receipt store reports 2026-10-14T14:57:20.921Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:c82471fe1da07857972604d90f37b241b60f954ccb1b932e9be626043827bd10","computed_hash":"sha256:c82471fe1da07857972604d90f37b241b60f954ccb1b932e9be626043827bd10","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}