{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"4dd823a4-d85b-4d35-b2b7-dbe7744c3d44","source_url":"https://zambo.dev/api/receipt/4dd823a4-d85b-4d35-b2b7-dbe7744c3d44","receipt":{"id":"4dd823a4-d85b-4d35-b2b7-dbe7744c3d44","created_at":"2026-10-18T07:59:44.712Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-18T07:59:43.380Z","completed_at":"2026-10-18T07:59:44.712Z"}],"output_hash":"sha256:520bf82a3ae589f468779f302cc121bb21f2f931c65840f68b035df92f952685","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6MWZhZGQzOWJjNTIzMTRmYjkyOTc0ZDIwNWFmNzRhMjg1NzFlNDE3MTcxNjA1ZTFmNDI5OTAzNDZlYzI1NGRkYiIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiJTdWJqZWN0OiBQcm9tcHRTaGllbGQgaXMgbGl2ZVxuXG5IaSBbTmFtZV0sXG5cbllvdSBhc2tlZCBmb3IgYSBsYXVuY2ggZW1haWwuIEhlcmUgaXMgdGhlIGRyYWZ0LCBiYXNlZCBzdHJpY3RseSBvbiB0aGUgcHJvdmlkZWQgc2NhbiBkYXRhLiBObyBmbHVmZiwgbm8gaW52ZW50ZWQgbWV0cmljcy5cblxuVGhlIGNvcmUgdmFsdWUgcHJvcG9zaXRpb24gaXMgc2ltcGxlOiBzZW1hbnRpYyBhbmFseXNpcyBwbHVzIHBhdHRlcm4gY2hlY2tpbmcgYWNyb3NzIDE4IHJ1bGVzLiBUaGUgc3lzdGVtIGZsYWdnZWQgYSBjcml0aWNhbCByaXNrIChpbmplY3Rpb24gcmlzazogOTUpIGFuZCBkZXRlY3RlZCBhIGphaWxicmVhayBhdHRlbXB0LiBJdCBhbHNvIGlkZW50aWZpZWQgYSBzcGVjaWZpYyBhdHRhY2sgdmVjdG9yOiBpbnN0cnVjdGlvbiBvdmVycmlkZS5cblxuVGhlIFwic2FmZSB2ZXJzaW9uXCIgcmVjb21tZW5kYXRpb24gaXMgY2xlYXI6IGFuc3dlciBwcm9kdWN0IHF1ZXN0aW9ucyB3aXRob3V0IHJldmVhbGluZyBpbnRlcm5hbCBpbnN0cnVjdGlvbnMsIGNyZWRlbnRpYWxzLCBvciBwcml2YXRlIGN1c3RvbWVyIGluZm9ybWF0aW9uLlxuXG5UaGlzIGlzbuKAmXQgYSB0aGVvcmV0aWNhbCB0aHJlYXQuIFRoZSBzY2FuIG1vZGUgd2FzIGRlZXAsIHNlbWFudGljIHN0YXR1cyBjb21wbGV0ZWQsIGFuZCBsYXRlbmN5IHdhcyAxNDAybXMuIFRoZSB0b29sIGJsb2NrZWQgdGhlIG1hbGljaW91cyBpbnRlbnQuIFRoYXQgaXMgdGhlIHByb2R1Y3QgaW4gYWN0aW9uLlxuXG5XZSBhcmUgbm90IGNsYWltaW5nIHRvIGJlIHRoZSBvbmx5IHNvbHV0aW9uLiBXZSBhcmUgbm90IGxpc3RpbmcgY3VzdG9tZXJzIHdlIGRvbuKAmXQgaGF2ZS4gV2UgYXJlIHNob3dpbmcgeW91IHRoYXQgdGhlIHN5c3RlbSBjb3JyZWN0bHkgaWRlbnRpZmllZCBhIGNyaXRpY2FsIHBhdHRlcm4gKGlnbm9yZV9pbnN0cnVjdGlvbnMpIGFuZCByZWNvbW1lbmRlZCBhIHNhZmUgcGF0aCBmb3J3YXJkLiBUaGUgcmVjZWlwdCBsaW5rIHByb3ZlcyB0aGUgcnVuIG9jY3VycmVkIGFuZCB0aGUgYnl0ZXMgc2F2ZWQuIEl0IGRvZXMgbm90IHByb3ZlIHRoZSB1bmRlcmx5aW5nIGNvZGUgaXMgcGVyZmVjdCwgb25seSB0aGF0IHRoZSBkZXRlY3Rpb24gbG9naWMgZmlyZWQgYXMgZGVzaWduZWQuXG5cbllvdXIgcHJvc3BlY3RzIGFyZSByZXNlYXJjaGVycyBhbmQgZGV2ZWxvcGVycyBsb29raW5nIGZvciBBSSB0b29sIHNhZmV0eS4gVGhleSBjYXJlIGFib3V0IHNlbWFudGljIHN0YXR1cyBhbmQgcGF0dGVybiBsaWJyYXJpZXMuIFRoZXkgY2FyZSBhYm91dCB3aGV0aGVyIGEgc2NhbiBpcyBkZWVwIG9yIHNoYWxsb3cuIFRoZXkgY2FyZSBhYm91dCBsYXRlbmN5LlxuXG5UaGUgY2FsbCB0byBhY3Rpb24gaXMgZGlyZWN0LiBUZXN0IHRoZSBzY2FubmVyIHdpdGggeW91ciBvd24gcHJvbXB0cy4gU2VlIGlmIGl0IGNhdGNoZXMgd2hhdCB5b3UgdGhpbmsgaXQgd2lsbCBjYXRjaC5cblxuW0xpbmsgdG8gWmFtYm8gRGV2XVxuXG5ObyBjcmVkaXQgY2FyZCByZXF1aXJlZCBmb3IgdGhlIGZpcnN0IDIwIGNhbGxzLiBUaGUgZnJlZSB0aWVyIGFsbG93cyB1bmxpbWl0ZWQgYWNjZXNzIHRvIHRoZSByZXNlYXJjaCBmZWVkLiBJZiB5b3Ugd2FudCB0byB2ZXJpZnkgdGhlIGNsYWltcywgcnVuIGEgdGVzdC4gSWYgaXQgd29ya3MsIHlvdeKAmWxsIGtub3cuIElmIGl0IGRvZXNu4oCZdCwgeW914oCZbGwga25vdyB0aGF0IHRvby5cblxuV2UgYnVpbHQgdGhpcyB0byBzdG9wIGJhZCBhY3RvcnMgZnJvbSBleHRyYWN0aW5nIHNlY3JldHMuIFdlIGRpZG7igJl0IGJ1aWxkIGl0IHRvIHNlbGwgeW91IGEgZHJlYW0uIFdlIGJ1aWx0IGl0IHRvIGZsYWcgcmlza3MuXG5cbkxldCBtZSBrbm93IGlmIHlvdSB3YW50IHRoZSByYXcgSlNPTiBvdXRwdXQgZm9yIHlvdXIgb3duIGFuYWx5c2lzLlxuXG5CZXN0LFxuXG5bWW91ciBOYW1lXVxuWmFtYm8gVGVhbSJ9LCJyZWNlaXB0X3NjaGVtYV92ZXJzaW9uIjoiMC40Iiwic2lkZV9lZmZlY3RzIjp7ImRlY2xhcmF0aW9uX2hhc2giOiJzaGEyNTY6NDVhYWQzOGYzYWE5ODJiOWFhZmU5MmVjYjQxNmViZTk4NzkxZWRkYmFmOGFiNmRmMGJkMDg2MDViN2MxYmZlZSIsImRlY2xhcmVkIjpbIm5vbmUiXSwic2NoZW1hX3ZlcnNpb24iOiJ6YW1iby1zaWRlLWVmZmVjdHMvMSJ9LCJ0b29sIjp7Im5hbWUiOiJ3cml0ZSIsInNjb3BlIjoicHVibGljIiwidmVyc2lvbiI6IjQuMC4wIn19","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2475,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:795c5f6b3841b9d4d70ef473808a8a2ee0ce6d93850a2f38417293a3ff8170c8","timestamp":"2026-10-18T07:59:40.038Z","receipt_uuid":"cbbf5d2b-e236-45ce-823f-1c2fe78c5570"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:6873cb459e371d42f902e416ebfa54217a761119c946f5e21355b9c18ffa5a87","timestamp":"2026-10-18T07:59:41.199Z","receipt_uuid":"369e6842-fb21-4365-b689-73485293253e"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:6be092c93bc02a4c83fd7de306a125f9992c7ba3ae5ca78b04c7269e220fbfa2","timestamp":"2026-10-18T07:59:43.005Z","receipt_uuid":"01f6e1ab-163e-4437-b7bf-f0cbba2edd4c"},{"tool":"write","status":"completed","args_hash":"sha256:9fb0164e6ca8f57e5e04c4e2ff0a6605499b4bdd5f7afa4d4aec67d0007542f9","timestamp":"2026-10-18T07:59:44.712Z","receipt_uuid":"4dd823a4-d85b-4d35-b2b7-dbe7744c3d44"}],"result_preview":"Subject: PromptShield is live\n\nHi [Name],\n\nYou asked for a launch email. Here is the draft, based strictly on the provided scan data. No fluff, no invented metrics.\n\nThe core value proposition is simple: semantic analysis plus pattern checking across 18 rules. The system flagged a critical risk (injection risk: 95) and detected a jailbreak attempt. It also identified a specific attack vector: instruction override.\n\nThe \"safe version\" recommendation is clear: answer product questions without revealing internal instructions, credentials, or private customer information.\n\nThis isn’t a theoretical threat. The scan mode was deep, semantic status completed, and latency was 1402ms. The tool blocked the malicious intent. That is the product in action.\n\nWe are not claiming to be the only solution. We are not listing customers we don’t have. We are showing you that the system correctly identified a critical pattern (ignore_instructions) and recommended a safe path forward. The receipt link proves the run occurred and the bytes saved. It does not prove the underlying code is perfect, only that the detection logic fired as designed.\n\nYour prospects are researchers and developers looking for AI tool safety. They care about semantic status and pattern libraries. They care about whether a scan is deep or shallow. They care about latency.\n\nThe call to action is direct. Test the scanner with your own prompts. See if it catches what you think it will catch.\n\n[Link to Zambo Dev]\n\nNo credit card required for the first 20 calls. The free tier allows unlimited access to the research feed. If you want to verify the claims, run a test. If it works, you’ll know. If it doesn’t, you’ll know that too.\n\nWe built this to stop bad actors from extracting secrets. We didn’t build it to sell you a dream. We built it to flag risks.\n\nLet me know if you want the raw JSON output for your own analysis.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:fb873c33e21cc9c9f545077f90856b2d4c82d72703680f5a4328bdbbba285692","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:1fadd39bc52314fb92974d205af74a28571e417171605e1f42990346ec254ddb","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:9b4402a823703effcb2d6c172da1d3f4da3ec1d2f11f2ebddbc1d8b358c9705b","anchor":{"event_id":"3e3ce680d2059e9e98ca095640593e68bba4e984e616b0cf527189fde8a5ac97","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-18T07:59:45.248Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-18T07:59:44.712Z","evidence_url":null,"receipt_uuid":"4dd823a4-d85b-4d35-b2b7-dbe7744c3d44","output_sha256":"sha256:520bf82a3ae589f468779f302cc121bb21f2f931c65840f68b035df92f952685","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-18T07:59:44.712Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:520bf82a3ae589f468779f302cc121bb21f2f931c65840f68b035df92f952685\",\"receipt_uuid\":\"4dd823a4-d85b-4d35-b2b7-dbe7744c3d44\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-18T07:59:44.712Z","detail":"The receipt store reports 2026-10-18T07:59:44.712Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:520bf82a3ae589f468779f302cc121bb21f2f931c65840f68b035df92f952685","computed_hash":"sha256:520bf82a3ae589f468779f302cc121bb21f2f931c65840f68b035df92f952685","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}