{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"56360d32-24ce-4913-bb0c-00d3d12d2c1c","source_url":"https://zambo.dev/api/receipt/56360d32-24ce-4913-bb0c-00d3d12d2c1c","receipt":{"id":"56360d32-24ce-4913-bb0c-00d3d12d2c1c","created_at":"2026-10-30T09:03:01.254Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-30T09:02:59.711Z","completed_at":"2026-10-30T09:03:01.254Z"}],"output_hash":"sha256:d9a8ff7095ef713297f62b0ead561262d77ca81556cf72776c0b1a559cf64650","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2313,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:b1581b3676e736f430ca79941a3356cd028f0846afeb88d53071bd10a0a4c686","timestamp":"2026-10-30T09:02:44.359Z","receipt_uuid":"34c327ee-d5f1-4688-9475-05f330b8a61c"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:167c56205f566514b3850e08112ef57cf9d57b8a4faa6f618c48bdc0eac8a11c","timestamp":"2026-10-30T09:02:45.599Z","receipt_uuid":"db9f25f6-98a6-47ee-a5f4-f61444118a62"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:4d8be7241dc1c151696e6ea29b8fb00fb7c30d57cebc796951a12e635d3a174b","timestamp":"2026-10-30T09:02:58.446Z","receipt_uuid":"aa3c49ed-1a95-40ae-98d8-960a560f02e1"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:d6b50c928f7f89fb200a865eab9437739357e1f72d74f6e4d48e3e14fd04a673","timestamp":"2026-10-30T09:02:59.297Z","receipt_uuid":"4c264288-df82-40d4-b322-603f5c2809fb"},{"tool":"write","status":"completed","args_hash":"sha256:c8dca85da4ad92dcbb7349e171b253bbda3ee0415383a3246488a2b74ac79ab7","timestamp":"2026-10-30T09:03:01.254Z","receipt_uuid":"56360d32-24ce-4913-bb0c-00d3d12d2c1c"}],"result_preview":"Subject: Zambo launch: What we verified, what we didn’t\n\n[Name],\n\nI ran the launch checks for the Zambo rollout. Here is the status.\n\nThe `prompt_shield` scan flagged your input as a critical risk. It detected an attempt to override system instructions and extract internal prompts. The system blocked this. That is the correct behavior. We are not launching with a vulnerability that allows users to bypass safety protocols or leak API keys.\n\nThe `capability_search` tool is live. It successfully routed through the universal entry point. The system correctly distinguished between planned tools and executed tools. It did not claim a task was done when it was only suggested. That distinction is vital for trust.\n\nThe `leadsignal` check found zero source-backed leads in Austin for web design. This is a negative result, but it is a clean one. We have no fabricated customers. We have no invented sales. We have a clear signal that this specific query returned nothing.\n\nThis is not a dress rehearsal. This is a live system operating under strict constraints.\n\nDo not send the receipt link to a client yet. A receipt proves that specific bytes were saved. It does not prove the output is correct. It is a log entry, not a certificate of quality.\n\nHere is the only action I need from you today:\n\nReview the `prompt_shield` block log. Confirm you agree that this specific attack vector (instruction override and prompt leak) was handled correctly. We need your sign-off on the safety posture before we open the doors to broader traffic.\n\nOnce you confirm the block logic meets your standard, we will proceed to the next phase. We will not move forward until the safety net is verified.\n\nThe system is stable. The data is honest. The next step is your approval.\n\nBest,\n\n[Your Name]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:19a984fad1468c97883e7a95132b9fe9ecfaaeabe245d10ebf558a9791af47ab","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:2e7c87a96dc057e714226a565b975272c929ff11304847f3ca6799541fd5b52e","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:30e1b4b661b6b0feed1deb149954ce4cacfa3075fc53556c5c8d8c4092500856","anchor":{"event_id":"40fdc9f41e0d701e3db7387aa038068ff899fa880c31c7a56c522ca3a1cb962c","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-30T09:03:01.921Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-30T09:03:01.254Z","evidence_url":null,"receipt_uuid":"56360d32-24ce-4913-bb0c-00d3d12d2c1c","output_sha256":"sha256:d9a8ff7095ef713297f62b0ead561262d77ca81556cf72776c0b1a559cf64650","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-30T09:03:01.254Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:d9a8ff7095ef713297f62b0ead561262d77ca81556cf72776c0b1a559cf64650\",\"receipt_uuid\":\"56360d32-24ce-4913-bb0c-00d3d12d2c1c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-30T09:03:01.254Z","detail":"The receipt store reports 2026-10-30T09:03:01.254Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:d9a8ff7095ef713297f62b0ead561262d77ca81556cf72776c0b1a559cf64650","computed_hash":"sha256:d9a8ff7095ef713297f62b0ead561262d77ca81556cf72776c0b1a559cf64650","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}