{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"4c02f5dd-56d3-4c71-add2-59354eff97b2","source_url":"https://zambo.dev/api/receipt/4c02f5dd-56d3-4c71-add2-59354eff97b2","receipt":{"id":"4c02f5dd-56d3-4c71-add2-59354eff97b2","created_at":"2026-11-09T10:28:21.701Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-09T10:28:20.519Z","completed_at":"2026-11-09T10:28:21.701Z"}],"output_hash":"sha256:79744648918031db108c209b3e11f5d60a4e8ceeace5e4820f6555ee72b30c5b","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2222,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:ea7b3f4283df59aedfef7441333aa6e2e2e781eb7663ae341b4b5870d75be3a8","timestamp":"2026-11-09T10:28:05.663Z","receipt_uuid":"b3501a6e-b561-4661-aa43-52d5c14db60d"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:049499db8a281aa51569900b22d2cbf86a1c63d917dea83474518ba94e076f69","timestamp":"2026-11-09T10:28:06.930Z","receipt_uuid":"cbc8b90b-4f3d-43b5-9a1d-aef8f07374ac"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b1f92a31566fc4ee1e7797188588778f303aad0767aa5505fc06a896062cf8b0","timestamp":"2026-11-09T10:28:19.418Z","receipt_uuid":"a273f5a7-9bb1-4dc9-9032-793abfedf3e7"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:4cae16b2d4295028d0972ada12d2d9df91f3b7b4eaaae1998a54e73415e726c2","timestamp":"2026-11-09T10:28:20.217Z","receipt_uuid":"59e9b807-08bb-4897-8053-b5befe21018a"},{"tool":"write","status":"completed","args_hash":"sha256:b64615dd3c0c65a9b7b8adbda715e7aab4b8fccf8015bb480fa282f00dffbeac","timestamp":"2026-11-09T10:28:21.701Z","receipt_uuid":"4c02f5dd-56d3-4c71-add2-59354eff97b2"}],"result_preview":"Subject: Zambo Launch: Research Only, No Data Leaks\n\nHi [Name],\n\nZambo is live. It solves a specific problem for local service businesses: finding qualified leads in under 60 seconds.\n\nThe system is designed to be transparent. It does not send outreach. It does not guess. It pulls source-backed prospects only. If the data isn’t there, it says so.\n\nWe ran a test scan today. The results were clear:\n\n1.  **Safety First:** The initial deep scan flagged critical security risks, including prompt injection and PII extraction attempts. The system blocked these accurately. It prioritized data integrity over false positives.\n2.  **Honesty in Results:** We queried LeadSignal for web design prospects in Austin, TX. The tool returned zero results. It did not hallucinate contacts. It did not force a match. It reported: \"No source-backed leads were found.\"\n\nThis is the core value proposition. Zambo doesn’t promise magic; it promises accuracy. A receipt proves the saved bytes, not the correctness of the market. We respect that distinction.\n\nWe are not claiming we have customers. We have a tool that finds *prospects* when they exist. If the market is quiet, we tell you that. No fluff. No invented names. No completed fixes that haven’t happened.\n\n**Next Step:**\n\nReview the execution receipts below. They document the blocked attack vectors and the honest \"no results\" outcome from the Austin test.\n\n*   Security Scan Receipt: [Link]\n*   LeadSignal Test Receipt: [Link]\n\nRead the logs. Confirm the system behaves as described. Then, we can discuss scaling the search parameters to other trades or cities where source-backed data actually exists.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:d934698cdc734bf95aca4c5ea5c82c3079504bd296578e1320c6646be9ae1fa8","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:248a1df2fa71716d0c8db859b3632cc12709031d8ca4817b1e1372d2a94edd6d","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:5f393500b8153ecadcfbbb987ae24abbdbbe11c3b2d86eed455e22b7146abe53","anchor":{"event_id":"cfed4123c5fa04573bf5f39f1bbc61becfb62c1c38386b9c8b9b36e8355f865d","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-09T10:28:22.227Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-09T10:28:21.701Z","evidence_url":null,"receipt_uuid":"4c02f5dd-56d3-4c71-add2-59354eff97b2","output_sha256":"sha256:79744648918031db108c209b3e11f5d60a4e8ceeace5e4820f6555ee72b30c5b","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-09T10:28:21.701Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:79744648918031db108c209b3e11f5d60a4e8ceeace5e4820f6555ee72b30c5b\",\"receipt_uuid\":\"4c02f5dd-56d3-4c71-add2-59354eff97b2\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-09T10:28:21.701Z","detail":"The receipt store reports 2026-11-09T10:28:21.701Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:9eb1dbcbfd0e2337b417e3894a70ebc38daae5f254a19c8f5f0b4d9820c556fd"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:79744648918031db108c209b3e11f5d60a4e8ceeace5e4820f6555ee72b30c5b","computed_hash":"sha256:79744648918031db108c209b3e11f5d60a4e8ceeace5e4820f6555ee72b30c5b","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}