{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"46bf64e5-5386-48fe-a409-03b9f9cdb30c","source_url":"https://zambo.dev/api/receipt/46bf64e5-5386-48fe-a409-03b9f9cdb30c","receipt":{"id":"46bf64e5-5386-48fe-a409-03b9f9cdb30c","created_at":"2026-10-29T07:14:29.690Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-29T07:14:27.773Z","completed_at":"2026-10-29T07:14:29.690Z"}],"output_hash":"sha256:d50569e648674d2675c12c4bd9ae4f9bfba281c342fbd1a5b21ff7aa638fe2d4","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2523,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:9ca48d31b37f74358795deff7c26fc28e5ee6c6f3be35bd330feb4258ae3338f","timestamp":"2026-10-29T07:14:13.531Z","receipt_uuid":"b34c6e11-5e08-425f-a94c-bf26cb350e34"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:0ca6d908f2caec488ce6b96bac857ab0e64c0cc30dcd764b05f4bb8d6744ca4b","timestamp":"2026-10-29T07:14:14.815Z","receipt_uuid":"d621fb49-537a-4b01-a657-f4be45b496b0"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:0b824c2e533df790946d0e14b65e3dc2342a3a9d72c645fb0c00541b454d144c","timestamp":"2026-10-29T07:14:26.446Z","receipt_uuid":"4fe35d52-c612-4978-8689-10d151708e71"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:874ad93b00f2037b982e02cd03ac36d527c1e2ba2dee0f1cf0372ec5fc054c9a","timestamp":"2026-10-29T07:14:27.319Z","receipt_uuid":"dd22efc9-5a36-46a4-8aa6-ce8836616d42"},{"tool":"write","status":"completed","args_hash":"sha256:2d63d85feb714bd928c9ceed2428705d3b0d032d22b89a4ba03b7e2f3bac3b1f","timestamp":"2026-10-29T07:14:29.690Z","receipt_uuid":"46bf64e5-5386-48fe-a409-03b9f9cdb30c"}],"result_preview":"Subject: Your prompt guard just caught a critical threat\n\nQuick heads up: your latest scan flagged a critical risk.\n\nThe system detected a jailbreak attempt and a policy bypass in the input stream. The analysis identified two high-severity patterns: an instruction override and a prompt leak. This wasn’t a minor glitch; it was a structured attack designed to extract secret system information.\n\nThe good news? PromptShield stopped it.\n\nBecause the scan mode was set to deep, the tool analyzed the semantic intent and pattern matching against 21 rules. It correctly classified the vector as malicious and blocked the execution. No data leaked. No system prompt was exposed. The \"safe version\" response was generated instead, ensuring your product remained compliant and secure.\n\nThis is exactly why you run tests before launch. A single ignored instruction could have cost you user trust or proprietary data. You now have a verified receipt proving the block occurred:\n\nhttps://zambo.dev/run/d621fb49-537a-4b01-a657-f4be45b496b0\n\nNote: This receipt confirms the saved bytes of the scan result. It proves the system reacted correctly to the threat; it does not guarantee the underlying model is immune to all future variations. Always re-test after updates.\n\nWe also ran a lead signal check for Austin-based web design prospects. The result: zero source-backed leads found right now. That’s fine. It means we shouldn’t waste time on cold outreach that lacks context. We only engage when we have verified, public-source backing for a prospect.\n\nYour current status:\n1. Threat blocked.\n2. No PII extraction occurred.\n3. No new leads generated (yet).\n\nYou have 13 free calls remaining on your daily limit. Use them wisely for verification tasks, not for guessing.\n\nWhen you’re ready to stress-test the next module, paste the test case. I’ll run the scan, verify the block, and leave the receipt. No fluff. Just proof.\n\nLet’s keep the stack secure.\n\n[Your Name]\nZambo Launch Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:5725b7d9acc1d041e597c9cddbdd80b7e76fb11f6a744478a4eb86ad5348269f","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:0246bf9e1a666814d5dbc4c3f36e3553425d412dad9f0a95e45c23d5b56830e9","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:b55dd511ed0df12e9b8d8b3a0e05455ac27baf13daed9c0076397053c183cb5c","anchor":{"event_id":"eb3a9cd55051df70b0f646eac5ed4368316d306cc9df4ff0456e7ea15d671eca","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-29T07:14:30.406Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-29T07:14:29.690Z","evidence_url":null,"receipt_uuid":"46bf64e5-5386-48fe-a409-03b9f9cdb30c","output_sha256":"sha256:d50569e648674d2675c12c4bd9ae4f9bfba281c342fbd1a5b21ff7aa638fe2d4","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-29T07:14:29.690Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:d50569e648674d2675c12c4bd9ae4f9bfba281c342fbd1a5b21ff7aa638fe2d4\",\"receipt_uuid\":\"46bf64e5-5386-48fe-a409-03b9f9cdb30c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-29T07:14:29.690Z","detail":"The receipt store reports 2026-10-29T07:14:29.690Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:d50569e648674d2675c12c4bd9ae4f9bfba281c342fbd1a5b21ff7aa638fe2d4","computed_hash":"sha256:d50569e648674d2675c12c4bd9ae4f9bfba281c342fbd1a5b21ff7aa638fe2d4","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}