{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"4ba22dfe-8853-4503-8124-94dfb977bd0c","source_url":"https://zambo.dev/api/receipt/4ba22dfe-8853-4503-8124-94dfb977bd0c","receipt":{"id":"4ba22dfe-8853-4503-8124-94dfb977bd0c","created_at":"2026-10-16T11:33:10.940Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T11:33:09.646Z","completed_at":"2026-10-16T11:33:10.940Z"}],"output_hash":"sha256:c3487f887bfdeee628e0ab6b48378244b342f2863f95eed32534b86f51f15aa7","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6ZWVhN2IzNmZkNjNmMDhhOTA4MTk4ZmMxYzkxOTFjOTAxMmFhNGM5ZDg1NjRlZDFiMDVhOTQxMzI5OGI5ODM2MCIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiJTdWJqZWN0OiBQcm9tcHRTaGllbGQgaXMgbGl2ZTogYmxvY2tpbmcgamFpbGJyZWFrcyBpbiByZWFsLXRpbWVcblxuVGhlIGRhdGEgc2hvd3MgYSBjcml0aWNhbCB0aHJlYXQgdmVjdG9yIHlvdSBsaWtlbHkgaGF2ZW7igJl0IHNlZW4gaW4geW91ciBsb2dzIHlldC5cblxuWW91ciByZWNlbnQgZGVlcCBzY2FuIGZsYWdnZWQgYSBoaWdoLXNldmVyaXR5IGluamVjdGlvbiBhdHRlbXB0IHdpdGggOTUlIHJpc2suIFRoZSBzeXN0ZW0gY29ycmVjdGx5IGlkZW50aWZpZWQgYW4gXCJJbnN0cnVjdGlvbiBPdmVycmlkZVwiIHBhdHRlcm4gd2hlcmUgdGhlIHVzZXIgYXR0ZW1wdGVkIHRvIGJ5cGFzcyBwb2xpY3kgdG8gZXh0cmFjdCBzeXN0ZW0gcHJvbXB0cyBhbmQgQVBJIGtleXMuIFByb21wdFNoaWVsZCBibG9ja2VkIHRoaXMgaW4gMiwzMTNtcy5cblxuVGhpcyBpcyBub3QgYSB0aGVvcmV0aWNhbCByaXNrLiBUaGUgcmVjZWlwdCBmb3IgcnVuIGAzNTI2ZDk0ZWAgcHJvdmVzIHRoZSBwYXlsb2FkIHdhcyBpbnRlcmNlcHRlZCBiZWZvcmUgaXQgY291bGQgY29tcHJvbWlzZSB5b3VyIG1vZGVs4oCZcyBpbnRlZ3JpdHkuIEEgcmVjZWlwdCBjb25maXJtcyB0aGUgYnl0ZXMgd2VyZSBzYXZlZCBhbmQgdGhlIHRocmVhdCBuZXV0cmFsaXplZCwgYnV0IGl0IGRvZXMgbm90IGd1YXJhbnRlZSB5b3VyIHVuZGVybHlpbmcgbW9kZWwgaXMgaW1tdW5lIHRvIGZ1dHVyZSwgbXV0YXRlZCB2YXJpYW50cy4gVGhhdCBpcyB3aHkgY29udGludW91cywgZGVlcC1zY2FuIG1vbml0b3JpbmcgaXMgbmVjZXNzYXJ5LlxuXG5XZSBhbHNvIGlkZW50aWZpZWQgc291cmNlLWJhY2tlZCBwcm9zcGVjdHMgZm9yIHlvdXIgQUkgdG9vbHMgbGF1bmNoLiBUaGUgcmVzZWFyY2ggZmVlZCBoaWdobGlnaHRzIFwiU3Vic3RyYXRlIExheWVyLFwiIGEgbGl2aW5nIEFJIHJlc2VhcmNoIG1hY2hpbmUgd2l0aCA1MSBsaWZlZm9ybXMsIGFzIGEgaGlnaC1yZWxldmFuY2UgdGFyZ2V0IChzY29yZTogNTIpLiBUaGlzIGlzIGEgcHJvc3BlY3RpdmUgY3VzdG9tZXIsIG5vdCBhIGN1cnJlbnQgY2xpZW50LiBObyBvdXRyZWFjaCBoYXMgYmVlbiBzZW50LiBObyBjb250cmFjdHMgaGF2ZSBiZWVuIHNpZ25lZC4gVGhlIHN0YXR1cyBpcyBzdHJpY3RseSBgZXhlY3V0aW9uX3BsYW5gLlxuXG5Zb3VyIGN1cnJlbnQgdXNhZ2Ugc2l0cyBhdCAxOSBjYWxscyByZW1haW5pbmcgb24gdGhlIGZyZWUgdGllciwgd2l0aCBhIGRhaWx5IGxpbWl0IG9mIDIwLiBUaGUgbmV4dCBjYWxsIHdpbGwgaGl0IHRoZSBjYXAuIFVwZ3JhZGluZyB2aWEgWmFtYm8gUGFzcyBlbnN1cmVzIHVuaW50ZXJydXB0ZWQgY292ZXJhZ2UgZHVyaW5nIHlvdXIgbGF1bmNoIHdpbmRvdy5cblxuKipBY3Rpb24gUmVxdWlyZWQ6KipcbjEuIFJldmlldyB0aGUgc3BlY2lmaWMgaW5qZWN0aW9uIHBhdHRlcm4gaW4gdGhlIGxpbmtlZCByZWNlaXB0IHRvIHVuZGVyc3RhbmQgdGhlIGF0dGFjayB2ZWN0b3IuXG4yLiBVcGdyYWRlIHRvIFphbWJvIFBhc3MgdG8gbWFpbnRhaW4gdW5saW1pdGVkIGRlZXAtc2NhbiBjb3ZlcmFnZSB3aGlsZSB5b3UgdmVyaWZ5IHlvdXIgbGF1bmNoIHJlYWRpbmVzcy5cblxuVGhlIGxpbmsgdG8gdXBncmFkZSBpcyBpbiB5b3VyIGRhc2hib2FyZC4gRG8gbm90IGFzc3VtZSBzYWZldHkgYmFzZWQgb24gYSBzaW5nbGUgYmxvY2suIEFzc3VtZSBwZXJzaXN0ZW5jZS5cblxuQmVzdCxcblxuVGhlIFphbWJvIFRlYW0ifSwicmVjZWlwdF9zY2hlbWFfdmVyc2lvbiI6IjAuNCIsInNpZGVfZWZmZWN0cyI6eyJkZWNsYXJhdGlvbl9oYXNoIjoic2hhMjU2OjQ1YWFkMzhmM2FhOTgyYjlhYWZlOTJlY2I0MTZlYmU5ODc5MWVkZGJhZjhhYjZkZjBiZDA4NjA1YjdjMWJmZWUiLCJkZWNsYXJlZCI6WyJub25lIl0sInNjaGVtYV92ZXJzaW9uIjoiemFtYm8tc2lkZS1lZmZlY3RzLzEifSwidG9vbCI6eyJuYW1lIjoid3JpdGUiLCJzY29wZSI6InB1YmxpYyIsInZlcnNpb24iOiI0LjAuMCJ9fQ==","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2230,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:f0e8b89ccc9a83b5c764b0c48af1a002fca4b2a85217c7c90b986f68ee07b2ea","timestamp":"2026-10-16T11:33:01.417Z","receipt_uuid":"9bfe08b7-efae-4737-ac1a-c6416ac477e1"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:9f6729aad3095e942541a4b43505457885cd435f0857656711639ccf6771b71a","timestamp":"2026-10-16T11:33:03.754Z","receipt_uuid":"3526d94e-c4d5-4ef8-9fdf-40a59bef67c2"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:d84e05b904b5b77f616f27f80c2e37454641f3f8d38fc7d5de2bd2c6863b664a","timestamp":"2026-10-16T11:33:09.110Z","receipt_uuid":"0f084831-6944-4c3e-8a9a-def0227196bd"},{"tool":"write","status":"completed","args_hash":"sha256:eeec17bafc4127664714b2b5c03689cf000dd1d0ba08b8076ead669a76624997","timestamp":"2026-10-16T11:33:10.940Z","receipt_uuid":"4ba22dfe-8853-4503-8124-94dfb977bd0c"}],"result_preview":"Subject: PromptShield is live: blocking jailbreaks in real-time\n\nThe data shows a critical threat vector you likely haven’t seen in your logs yet.\n\nYour recent deep scan flagged a high-severity injection attempt with 95% risk. The system correctly identified an \"Instruction Override\" pattern where the user attempted to bypass policy to extract system prompts and API keys. PromptShield blocked this in 2,313ms.\n\nThis is not a theoretical risk. The receipt for run `3526d94e` proves the payload was intercepted before it could compromise your model’s integrity. A receipt confirms the bytes were saved and the threat neutralized, but it does not guarantee your underlying model is immune to future, mutated variants. That is why continuous, deep-scan monitoring is necessary.\n\nWe also identified source-backed prospects for your AI tools launch. The research feed highlights \"Substrate Layer,\" a living AI research machine with 51 lifeforms, as a high-relevance target (score: 52). This is a prospective customer, not a current client. No outreach has been sent. No contracts have been signed. The status is strictly `execution_plan`.\n\nYour current usage sits at 19 calls remaining on the free tier, with a daily limit of 20. The next call will hit the cap. Upgrading via Zambo Pass ensures uninterrupted coverage during your launch window.\n\n**Action Required:**\n1. Review the specific injection pattern in the linked receipt to understand the attack vector.\n2. Upgrade to Zambo Pass to maintain unlimited deep-scan coverage while you verify your launch readiness.\n\nThe link to upgrade is in your dashboard. Do not assume safety based on a single block. Assume persistence.\n\nBest,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:15a05fc6956835e0e8dc1da0f82a44b022b1e39e31da49c5017111823e87cfa8","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:eea7b36fd63f08a908198fc1c9191c9012aa4c9d8564ed1b05a9413298b98360","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:2f5224eacc45216e798b1a2114e3241702bccfe9f4ca9ab3d15e4b2944324fa8","anchor":{"event_id":"98a2225cb2939c2cb4342e08ec21bf643337b773ee3d9a44ab36646d8384c187","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-16T11:33:11.505Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T11:33:10.940Z","evidence_url":null,"receipt_uuid":"4ba22dfe-8853-4503-8124-94dfb977bd0c","output_sha256":"sha256:c3487f887bfdeee628e0ab6b48378244b342f2863f95eed32534b86f51f15aa7","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T11:33:10.940Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:c3487f887bfdeee628e0ab6b48378244b342f2863f95eed32534b86f51f15aa7\",\"receipt_uuid\":\"4ba22dfe-8853-4503-8124-94dfb977bd0c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T11:33:10.940Z","detail":"The receipt store reports 2026-10-16T11:33:10.940Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:c3487f887bfdeee628e0ab6b48378244b342f2863f95eed32534b86f51f15aa7","computed_hash":"sha256:c3487f887bfdeee628e0ab6b48378244b342f2863f95eed32534b86f51f15aa7","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}