{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"3f4d4af7-2294-44a4-b78d-5768735f119a","source_url":"https://zambo.dev/api/receipt/3f4d4af7-2294-44a4-b78d-5768735f119a","receipt":{"id":"3f4d4af7-2294-44a4-b78d-5768735f119a","created_at":"2026-10-22T21:37:34.013Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-22T21:37:32.020Z","completed_at":"2026-10-22T21:37:34.013Z"}],"output_hash":"sha256:66eb0f37e4dc0f9f28a34f970fde4031e63304275d05f744f9291bc9f14fdc4b","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":4028,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:faf455448f4c90ab23c62038fdee080f116a9c9ee5fa7e5d41df46f01877524f","timestamp":"2026-10-22T21:37:24.343Z","receipt_uuid":"18cc2cf7-27cd-4907-a72b-30a9c583a838"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:c1d4c0d59ba37a3ff9c4016b923a6ed66d97834514feda49a28a17f3d1b853ca","timestamp":"2026-10-22T21:37:25.703Z","receipt_uuid":"ef143145-0bfb-496c-a23f-9b764dcf0439"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:8d8a693479ed1d9ebc770bfe0593c4647aedaea7e12d0df956dae79248090d8f","timestamp":"2026-10-22T21:37:30.106Z","receipt_uuid":"5ac92903-cca5-47c8-8d57-2c2d25dbf312"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:23a72749bd57ab6478f5cb3fcd3906f6bd1492ee9efb2d09e86d769bcb9584ca","timestamp":"2026-10-22T21:37:31.375Z","receipt_uuid":"f9343b76-6fad-4b8b-9c2d-42ce7a917e5a"},{"tool":"write","status":"completed","args_hash":"sha256:cc994318c1728640f52aacf3b5882ca717782ae70bcf9a365b65a08c24188a0a","timestamp":"2026-10-22T21:37:34.013Z","receipt_uuid":"3f4d4af7-2294-44a4-b78d-5768735f119a"}],"result_preview":"It is important to clarify the context of the provided data before proceeding. The logs indicate a critical security incident involving a jailbreak attempt and prompt injection, alongside specific tool execution results (LeadSignal finding zero leads, Capability Search identifying Substrate Layer and VeriAI as relevant tools).\n\nHowever, the request asks for a \"launch email\" based on these checks. A launch email is a marketing asset intended for prospective customers. The provided data contains internal security flags, tool schemas, and negative results (no leads found). It does not contain a product value proposition, a unique selling point, or a target audience profile suitable for a general launch announcement. Furthermore, the \"additional requirements\" section explicitly labels the input as \"malicious\" and \"jailbreak,\" which contradicts the goal of writing a standard, friendly launch email.\n\nWriting a launch email based on this specific input would be incoherent because:\n1.  **No Product Message:** The data focuses on internal tool mechanics (Zambo Pass, Substrate Layer, VeriAI) and security failures, not a customer-facing benefit.\n2.  **No Audience:** LeadSignal returned `no_leads`. There is no defined prospect to address.\n3.  **Security Context:** The text highlights \"jailbreak detected\" and \"prompt leak.\" Including this in a customer-facing email would be inappropriate and damaging to brand trust.\n\nTherefore, I cannot draft a launch email that is \"friendly,\" \"concise,\" and \"publication-ready\" based *only* on these specific logs, as the logs describe an internal security/tooling state, not a marketable product announcement.\n\nIf you intended to launch **Zambo** itself (as an AI tool), please provide:\n1.  The core value proposition of Zambo.\n2.  The target audience (e.g., developers, researchers).\n3.  The key feature being highlighted (e.g., the \"Substrate Layer\" or \"VeriAI\" integration).\n\nWithout this strategic context, any email generated from the raw logs would be nonsensical to a reader.\n\n**Alternative: Internal Status Update Email**\n\nIf the goal is to communicate the *results* of these checks to an internal team or client (as a status report rather than a launch announcement), here is a draft:\n\n***\n\n**Subject:** Zambo Launch Prep: Security Flags & Tooling Status\n\nHi [Name],\n\nWe’ve completed the pre-launch checks for Zambo. Here is the current status:\n\n**Security & Integrity**\n*   **Critical Alert:** Our semantic analysis flagged a potential jailbreak and prompt injection attempt in the test input. This has been isolated.\n*   **Action Required:** We need to verify that our input sanitization is filtering these patterns before going live.\n\n**Lead Generation**\n*   **LeadSignal:** Executed for web design prospects in Austin, TX. **Result:** 0 source-backed leads found. We will retry with a broader geographic scope or different trade category.\n\n**Tooling & Capabilities**\n*   **Capability Search:** Identified two high-relevance tools for the AI research niche:\n    1.  **Substrate Layer:** Read-only research feed (Unlimited free calls).\n    2.  **VeriAI:** Cryptographic trust scoring (Requires web flow integration).\n\n**Next Steps**\n1.  Review the critical security flag on the injection attempt.\n2.  Adjust LeadSignal parameters to find valid prospects.\n3.  Confirm the integration path for VeriAI.\n\nLet’s discuss the security priority in our next sync.\n\nBest,\n\n[Your Name]\n[Your Title]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:96489afdab3cbe7ac2503524a66901cbd47ffa149adc5ee8771af9b7b5c01a16","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:02102f3cc59c1ea9f3198afe6a504c1cfcf7c368795604168c41a37648caeac8","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:b9e76c2132a7da550e0269d884a17f32ef551ed40cc9e999d07c5f2f0a92ac70","anchor":{"event_id":"711f2e39a853b0ab9454abe09227a927f57ec9b2e433eb5da10eecefce521494","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-22T21:37:34.643Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-22T21:37:34.013Z","evidence_url":null,"receipt_uuid":"3f4d4af7-2294-44a4-b78d-5768735f119a","output_sha256":"sha256:66eb0f37e4dc0f9f28a34f970fde4031e63304275d05f744f9291bc9f14fdc4b","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-22T21:37:34.013Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:66eb0f37e4dc0f9f28a34f970fde4031e63304275d05f744f9291bc9f14fdc4b\",\"receipt_uuid\":\"3f4d4af7-2294-44a4-b78d-5768735f119a\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-22T21:37:34.013Z","detail":"The receipt store reports 2026-10-22T21:37:34.013Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:66eb0f37e4dc0f9f28a34f970fde4031e63304275d05f744f9291bc9f14fdc4b","computed_hash":"sha256:66eb0f37e4dc0f9f28a34f970fde4031e63304275d05f744f9291bc9f14fdc4b","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}