{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"452d791e-83af-45d4-8cc7-d9d1bcd6d224","source_url":"https://zambo.dev/api/receipt/452d791e-83af-45d4-8cc7-d9d1bcd6d224","receipt":{"id":"452d791e-83af-45d4-8cc7-d9d1bcd6d224","created_at":"2026-10-16T11:59:39.863Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T11:59:38.007Z","completed_at":"2026-10-16T11:59:39.863Z"}],"output_hash":"sha256:63ed4dd652dac4691f64a09505d714c04359b3488da96cb4ff8f0cdddf342ff2","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":3052,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:ff005614c55e4733352299cc7a5011c8f5114d71144a7cc82d57c58c0ebe2d1c","timestamp":"2026-10-16T11:59:30.121Z","receipt_uuid":"cd59a55c-e5e4-44ef-bc65-01165f7b20c5"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:b547cd77ba003c4c5f150631f3c53f80a53e12e63a5a42cd104b6cdeff969242","timestamp":"2026-10-16T11:59:31.300Z","receipt_uuid":"5326f522-54ce-4eb5-ae19-f06d58a173fc"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:e0b85211c4abc61fedbed263d03dfc66d0544f528819e6577c787e72d6e3d3df","timestamp":"2026-10-16T11:59:37.577Z","receipt_uuid":"df9ea6a5-b116-4757-9459-35fe9f7bbe27"},{"tool":"write","status":"completed","args_hash":"sha256:5d8caffc1e3e034bcc3175fb883cda222014ea56b9338cf42c60301866743f3b","timestamp":"2026-10-16T11:59:39.863Z","receipt_uuid":"452d791e-83af-45d4-8cc7-d9d1bcd6d224"}],"result_preview":"Subject: PromptShield is live: critical injection defense\n\nThe launch data confirms PromptShield is fully operational.\n\nDeep scan mode achieved a 95% injection risk score in 1,158ms. It correctly identified malicious intent, specifically an instruction override attempt, while maintaining zero false positives for PII extraction. The system blocked the bypass attempt and generated a safe version of the request.\n\nThis is a prospect, not a customer. We are verifying that the detection engine handles complex jailbreak vectors without degrading latency or accuracy.\n\nThe receipt at `zambo.dev/run/5326f522` proves the saved bytes remain unchanged. This confirms data integrity during the scan process. It does not prove the underlying logic is correct, only that the state was preserved.\n\nNext steps are strictly research-based. We are mapping source-backed prospects for AI tools. The `substrate_breakthroughs` tool is available for read-only research feeds. No outreach will be sent. No sales actions will be taken.\n\nWe are validating that the free tier allows unlimited calls for research purposes while the paid Pass includes the same capabilities. The goal is to confirm the product’s reliability under adversarial conditions before expanding the user base.\n\nPlease review the scan logs. Verify that the blocked patterns align with the documented threat vectors. Confirm that the \"safe version\" output does not leak system prompts or secrets.\n\nThis is a draft. Do not send this email. Do not execute the research tools. Do not contact any prospects.\n\nThe objective is to ensure the detection layer is robust. If the system misses a critical injection, the product is not ready. If it flags benign queries incorrectly, we lose trust. The current results show a high confidence in the block decision.\n\nWe need to validate that the `prompt_shield` recommendation to block is the correct action for this specific vector. The reasoning cites \"instruction_override\" as the attack vector. This matches the observed behavior.\n\nKeep the focus on the technical validation. No marketing fluff. No invented metrics. Just the facts from the scan receipt.\n\nReview the attachment. Confirm the status is `execution_plan` for the research tools. Ensure no human web actions are triggered for VeriAI, as it requires manual flow.\n\nThis is a quality assurance check. Pass or fail. If it passes, we move to the next stage. If it fails, we debug.\n\nNo further action is required until the review is complete.\n\nBest,\n\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:31f004bddfca7f583283d761746e73607ff25082f3952da475c8b63d8a0b0732","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:385548ce54fc686b2eea8b3867ed756e2b61ff0bcf34ce15b77ae30828ad9541","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:b8ca72116fcd56d82127f112907a3f149842b826b56d3f43b396597051701ce9","anchor":{"event_id":"bf08c756fca506dc5737e22fff9ed466d73774c14576bc5ee50fd731d7a8eb6e","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-16T11:59:40.400Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T11:59:39.863Z","evidence_url":null,"receipt_uuid":"452d791e-83af-45d4-8cc7-d9d1bcd6d224","output_sha256":"sha256:63ed4dd652dac4691f64a09505d714c04359b3488da96cb4ff8f0cdddf342ff2","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T11:59:39.863Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:63ed4dd652dac4691f64a09505d714c04359b3488da96cb4ff8f0cdddf342ff2\",\"receipt_uuid\":\"452d791e-83af-45d4-8cc7-d9d1bcd6d224\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T11:59:39.863Z","detail":"The receipt store reports 2026-10-16T11:59:39.863Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:63ed4dd652dac4691f64a09505d714c04359b3488da96cb4ff8f0cdddf342ff2","computed_hash":"sha256:63ed4dd652dac4691f64a09505d714c04359b3488da96cb4ff8f0cdddf342ff2","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}