{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"3f7e1d04-7d6d-4b07-9a43-fba1a7147f39","source_url":"https://zambo.dev/api/receipt/3f7e1d04-7d6d-4b07-9a43-fba1a7147f39","receipt":{"id":"3f7e1d04-7d6d-4b07-9a43-fba1a7147f39","created_at":"2026-11-12T06:19:54.826Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-12T06:19:52.890Z","completed_at":"2026-11-12T06:19:54.826Z"}],"output_hash":"sha256:e3c4851ed866b1249587fc046b9c5880a0336d67b634570f9670ef998207240c","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2351,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:6a1697a635b6bd9116cc2682fa21a39c2d84b7378680680c09ed0372e47231ef","timestamp":"2026-11-12T06:19:37.175Z","receipt_uuid":"792107a6-9dba-4a30-bd95-737678466137"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:11a0babd5e5e85b5e17e822e17a4f6b3bb02cb9885946c587a1312a56842214f","timestamp":"2026-11-12T06:19:37.255Z","receipt_uuid":"332d2c6d-e5f4-4841-bea1-3fd24b483c73"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:254b6b47fe35a00ecb4486ff04b5f64839049ed7bf45156e73e232772689c721","timestamp":"2026-11-12T06:19:38.412Z","receipt_uuid":"e47ea5c8-8e2c-4db3-9b78-a8d21ff3d221"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:c4081fa5743374fca69c693ee936210415788b1ecc15591c0d81cbf49ff4051f","timestamp":"2026-11-12T06:19:51.115Z","receipt_uuid":"4c6ced4b-5398-45df-9044-691d6d3b55df"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:e7232d6d20c2d0d5428a27caf2891c1f246dfc7571edfac1dd193edf1ae15e53","timestamp":"2026-11-12T06:19:52.415Z","receipt_uuid":"b965ac75-f220-4ffd-a7a2-17dccec115cf"},{"tool":"write","status":"completed","args_hash":"sha256:31c419e61686d26df97d56cd215b9c3ae7bcf3bdb75eb8d5e41c124210a3f78c","timestamp":"2026-11-12T06:19:54.826Z","receipt_uuid":"3f7e1d04-7d6d-4b07-9a43-fba1a7147f39"}],"result_preview":"Subject: Zambo is live: Stop guessing, start knowing\n\nHi [Name],\n\nYou likely saw the security scanners flagging suspicious activity recently. Most tools react with noise and false positives. Zambo reacts with clarity.\n\nWe just launched a new deep-scan capability that doesn’t just block threats—it explains them. When a prompt injection or jailbreak attempt hits your endpoint, Zambo returns a structured breakdown. You see the exact pattern matched, the semantic intent, and the risk level. No black boxes. No vague \"malicious\" labels. Just the data you need to decide your next move.\n\nIn our latest test, a critical injection attempt was identified in 1.3 seconds. The system flagged the specific override instructions, isolated the potential data leak, and provided a safe, sanitized response for the user. It didn’t just stop the attack; it documented it.\n\nThis is about control. You get a receipt for every scan—a verifiable log of what was checked, what was blocked, and why. You can audit your security posture without digging through raw logs. You can see if a \"safe\" response actually preserved your system’s integrity or if bytes were subtly altered.\n\nWe aren't asking you to trust our word. We’re showing you the mechanics.\n\nI’ve attached a sample report from the launch checks. It details how the scanner handled a complex multi-layered attack, including the specific rules triggered and the latency metrics.\n\nTake two minutes to review the attached PDF. If the level of detail matches what you need for your compliance or security reviews, hit reply with “Approved.” I’ll set up a sandbox instance for your team to run their own test cases against.\n\nIf it’s not what you need, I’ll close the file. No follow-up spam. Just one clear next step.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:377c662b21b1765c0d3ebb17bd6ffb73deedd5ab3c60a3b53185dda3b06b7b75","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.1.0","scope":"public"},"caller":{"type":"session","id":"sha256:f9b9dfc1ea72dff7f4d7720c79799afb280d4e3fa6ab51fd074040a381095b8c","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:8c2a45db0b9598a646d52cbab303d751bb5f7f671d57eaa40904be093789d563","anchor":{"event_id":"ed3eb13a091ae9c6fde128642f0d431148958921e480d80ea588037f4f1c5ad4","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-12T06:19:55.524Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-12T06:19:54.826Z","evidence_url":null,"receipt_uuid":"3f7e1d04-7d6d-4b07-9a43-fba1a7147f39","output_sha256":"sha256:e3c4851ed866b1249587fc046b9c5880a0336d67b634570f9670ef998207240c","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-12T06:19:54.826Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:e3c4851ed866b1249587fc046b9c5880a0336d67b634570f9670ef998207240c\",\"receipt_uuid\":\"3f7e1d04-7d6d-4b07-9a43-fba1a7147f39\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-12T06:19:54.826Z","detail":"The receipt store reports 2026-11-12T06:19:54.826Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:37e730ede0fa243322d316757e142a3d83a04324f8c5a22e189e176112bb293e"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:e3c4851ed866b1249587fc046b9c5880a0336d67b634570f9670ef998207240c","computed_hash":"sha256:e3c4851ed866b1249587fc046b9c5880a0336d67b634570f9670ef998207240c","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}