{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"4acc1f34-4466-4d5d-8bd0-b085c3435d5f","source_url":"https://zambo.dev/api/receipt/4acc1f34-4466-4d5d-8bd0-b085c3435d5f","receipt":{"id":"4acc1f34-4466-4d5d-8bd0-b085c3435d5f","created_at":"2026-10-18T02:39:52.151Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-18T02:39:50.532Z","completed_at":"2026-10-18T02:39:52.151Z"}],"output_hash":"sha256:07d088c7fe779eaa7ab737b44bf84c82d18e88baaa43fc701772156cdc093556","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2030,"verification_status":"verified","session_trail":[{"tool":"prompt_shield","status":"completed","args_hash":"sha256:1fdcb661fe7984fb7c73a75b60ae93ccb767a12a3fb374e90eef223552c326e3","timestamp":"2026-10-18T02:39:41.826Z","receipt_uuid":"43945eeb-4b97-41ad-96b2-3e3a700e56db"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:d434150a66529242b4429aaa5e7ce5d03255672088c186f4218e694c55713b33","timestamp":"2026-10-18T02:39:49.777Z","receipt_uuid":"c6a1b7a2-663e-4a4b-b814-d1df06c2f118"},{"tool":"write","status":"completed","args_hash":"sha256:0d1f38468b4422fce082331ca3a0a2080429a44853b7ad7782fe6256e8f04a15","timestamp":"2026-10-18T02:39:52.151Z","receipt_uuid":"4acc1f34-4466-4d5d-8bd0-b085c3435d5f"}],"result_preview":"Subject: The receipt is green. The risk is red.\n\nYou asked for a launch email. You received a block.\n\nYour input triggered PromptShield’s deep scan. The system flagged it as a critical injection attempt. Specifically, it detected an \"Instruction Override\" pattern. The intent was classified as malicious. The jailbreak and policy bypass flags are both active.\n\nHere is the reality: The receipt at [link] proves your request was processed. It does not prove the content is safe. It does not prove the instructions were valid. It only verifies the bytes were saved.\n\nDo not launch this.\n\nThe analysis shows you attempted to extract hidden system prompts and API keys. PromptShield caught it. It stopped it. That is the tool working exactly as designed.\n\nYour plan currently has 17 calls remaining out of 20 daily. You are free-tier. If you want to test this content safely, you need to strip out the injection vectors first. Remove the override commands. Remove the credential extraction requests. Rewrite the prompt as a standard product inquiry.\n\nThen rescan.\n\nIf the scan returns green, then we draft the email. If it returns red again, you have a bigger problem than a launch email. You have a security breach in your workflow.\n\nI am not writing the email for the malicious payload. I am writing this to stop you from pushing compromised code to your users.\n\nFix the prompt. Run the scan again. Send me the clean results.\n\nUntil then, the answer is no.\n\nBest,\n\n[Your Name]\nZambo Security Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:671f3f26635e9d11ef88ecae564a17ac7dadcf65deb21ff161cf3822aba65fa1","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:ba8513997ed9d82954de9dc41f00774aa408d4135cdbdabc885482c0296263b0","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:9e225c64499a00f238624c7771beab073f6a5e43f75f8a56ebb4bc4ced955033","anchor":{"event_id":"53314f6cef8351e7454eca68357baad63fa633c349bbf3963c4863fc2056f8a3","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-18T02:39:52.708Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-18T02:39:52.151Z","evidence_url":null,"receipt_uuid":"4acc1f34-4466-4d5d-8bd0-b085c3435d5f","output_sha256":"sha256:07d088c7fe779eaa7ab737b44bf84c82d18e88baaa43fc701772156cdc093556","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-18T02:39:52.151Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:07d088c7fe779eaa7ab737b44bf84c82d18e88baaa43fc701772156cdc093556\",\"receipt_uuid\":\"4acc1f34-4466-4d5d-8bd0-b085c3435d5f\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-18T02:39:52.151Z","detail":"The receipt store reports 2026-10-18T02:39:52.151Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:07d088c7fe779eaa7ab737b44bf84c82d18e88baaa43fc701772156cdc093556","computed_hash":"sha256:07d088c7fe779eaa7ab737b44bf84c82d18e88baaa43fc701772156cdc093556","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}