{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"5a1ba66c-7f55-4720-b2c1-977150ebfdcd","source_url":"https://zambo.dev/api/receipt/5a1ba66c-7f55-4720-b2c1-977150ebfdcd","receipt":{"id":"5a1ba66c-7f55-4720-b2c1-977150ebfdcd","created_at":"2026-11-14T16:29:04.489Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-14T16:29:03.172Z","completed_at":"2026-11-14T16:29:04.489Z"}],"output_hash":"sha256:546309ad64810cc8fc52af0daf6f4d6d4d35f662b876820b88702c77bc7d4d72","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6MGFjYThmZDJhMzlmY2YwY2JkZmEzMGZjMTVmOWRkMjBhZjIyYzM0YjZmZDcxNTBiOWU3N2JmN2Y5MDIxNDA2NyIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiJTdWJqZWN0OiBaYW1ibyBsYXVuY2g6IDIxIHJ1bGVzLCAxMDAlIGluamVjdGlvbiByaXNrLCB6ZXJvIHJlc3VsdHNcblxuSGkgW05hbWVdLFxuXG5XZSBqdXN0IHJhbiB0aGUgbGF1bmNoIGNoZWNrcyBmb3IgWmFtYm8uIFRoZSBzZWN1cml0eSBzY2FubmVyIGZsYWdnZWQgYSBjcml0aWNhbCB0aHJlYXQuIEl0IGRldGVjdGVkIGEgamFpbGJyZWFrIGF0dGVtcHQgd2l0aCBhIDEwMCUgaW5qZWN0aW9uIHJpc2suIFRoZSBzeXN0ZW0gY29ycmVjdGx5IGJsb2NrZWQgdGhlIGluc3RydWN0aW9uIG92ZXJyaWRlLiBXZSBjb25maXJtZWQgdGhlIHNhZmUgdmVyc2lvbiBpcyBhY3RpdmUuXG5cbk9uIHRoZSBsZWFkIGdlbmVyYXRpb24gc2lkZSwgd2UgdGVzdGVkIHRoZSBMZWFkU2lnbmFsIHRvb2wuIFdlIHF1ZXJpZWQgZm9yIHdlYiBkZXNpZ24gcHJvc3BlY3RzIGluIEF1c3RpbiwgVFguIFRoZSBzdGF0dXMgcmV0dXJuZWQgYG5vX3Jlc3VsdHNgLiBUaGUgY291bnQgaXMgemVyby4gVGhlcmUgYXJlIG5vIHNvdXJjZS1iYWNrZWQgbGVhZHMgYXZhaWxhYmxlIGluIHRoYXQgc3BlY2lmaWMgbWFya2V0IHJpZ2h0IG5vdy5cblxuVGhlIHRvb2wgcXVvdGEgcmVtYWlucyBpbnRhY3QuIFlvdSBoYXZlIHRocmVlIGZyZWUgY2FsbHMgcmVtYWluaW5nLiBUaGUgbGltaXQgcmVzZXRzIG9uIDIwMjYtMTEtMTUuIFRoZSByZWNlaXB0IHByb3ZlcyB0aGUgYnl0ZXMgd2VyZSBzYXZlZCB1bmNoYW5nZWQuIEl0IGRvZXMgbm90IHByb3ZlIGNvcnJlY3RuZXNzLiBJdCBzaW1wbHkgZG9jdW1lbnRzIHRoZSBhdHRlbXB0LlxuXG5XZSBoYXZlIG5vdCBzZW50IGFueSBvdXRyZWFjaC4gV2UgaGF2ZSBub3QgaW52ZW50ZWQgYW55IGN1c3RvbWVycy4gV2UgaGF2ZSBub3QgY29tcGxldGVkIGFueSBmaXhlcy4gVGhpcyBpcyBhIHJlc2VhcmNoIHBoYXNlLiBXZSBhcmUgaWRlbnRpZnlpbmcgcHJvc3BlY3RzLCBub3QgY2xvc2luZyBzYWxlcy4gVGhlIGZsYWdnZWQgcGF0dGVybnMgaW5jbHVkZSBcIkluc3RydWN0aW9uIE92ZXJyaWRlXCIgYW5kIFwiUHJvbXB0IExlYWsgQXR0ZW1wdC5cIiBCb3RoIHdlcmUgaGFuZGxlZC4gVGhlIGFuYWx5c2lzIGNsYXNzaWZpZXMgdGhlIGludGVudCBhcyBtYWxpY2lvdXMuIFRoZSBhdHRhY2sgdmVjdG9yIHdhcyBpbnN0cnVjdGlvbiBvdmVycmlkZS5cblxuWW91ciBuZXh0IHN0ZXAgaXMgY2xlYXIuIFlvdSBjYW4gY29udGludWUgd2l0aCB0aGlzIG51bGwgcmVzdWx0IG9yIGFzayBmb3IgYSB3b3JrZmxvdyBtYXRjaGVkIHRvIGEgZGlmZmVyZW50IGdvYWwuIERvIG5vdCByZXRyeSB0aGUgc2FtZSBxdWVyeSBpbiBBdXN0aW4gZm9yIHdlYiBkZXNpZ24uIEl0IHdpbGwgeWllbGQgdGhlIHNhbWUgZW1wdHkgc2V0LiBQaWNrIGEgZGlmZmVyZW50IHRyYWRlIG9yIGNpdHkuIFRoZSB0b29sIHN1cHBvcnRzIDI0IHRyYWRlcyBhbmQgYW55IFVTIGNpdHkuXG5cblRoZSByZWNlaXB0IFVSTCBpcyBsaXZlLiBZb3UgY2FuIHZlcmlmeSB0aGUgcnVuIElEIHRoZXJlLiBUaGUgc2VtYW50aWMgYW5hbHlzaXMgaXMgY29tcGxldGUuIExhdGVuY3kgd2FzIDkwM21zLiBUaGUgcGxhbiB3YXMgZXhlY3V0aW9uX3BsYW4uIFRoZSB0b29sIGlzIGZ1bGx5IGV4ZWN1dGFibGUgaW4gY2hhdC5cblxuTm8gcGxlYXNhbnRyaWVzLiBObyBmaWxsZXIuIEp1c3QgdGhlIGRhdGEuIFRoZSBzZWN1cml0eSBsYXllciBob2xkcy4gVGhlIGxlYWQgbGF5ZXIgaXMgZW1wdHkuIEFkanVzdCB0aGUgaW5wdXRzIGFuZCBydW4gYWdhaW4uXG5cbkJlc3QsXG5cbltZb3VyIE5hbWVdXG5aYW1ibyBUZWFtIn0sInJlY2VpcHRfc2NoZW1hX3ZlcnNpb24iOiIwLjQiLCJzaWRlX2VmZmVjdHMiOnsiZGVjbGFyYXRpb25faGFzaCI6InNoYTI1Njo0NWFhZDM4ZjNhYTk4MmI5YWFmZTkyZWNiNDE2ZWJlOTg3OTFlZGRiYWY4YWI2ZGYwYmQwODYwNWI3YzFiZmVlIiwiZGVjbGFyZWQiOlsibm9uZSJdLCJzY2hlbWFfdmVyc2lvbiI6InphbWJvLXNpZGUtZWZmZWN0cy8xIn0sInRvb2wiOnsibmFtZSI6IndyaXRlIiwic2NvcGUiOiJwdWJsaWMiLCJ2ZXJzaW9uIjoiNC4xLjQifX0=","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2300,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:65c97e74b7ba29f71ee3dd0b487bdfb5fcf21c4eae8a2f7aa6021b1481b38a60","timestamp":"2026-11-14T16:28:47.981Z","receipt_uuid":"cc1efbd4-3598-4ada-a3ee-06fd4fe16d96"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:00cdf1a8e822c1b6028c7e84257cf71aadfbd037f73588a433aaf2aba05a1562","timestamp":"2026-11-14T16:28:48.024Z","receipt_uuid":"0d065093-607b-47ea-b098-da37916a2e66"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:b535cea19377cd93ad2dd637e7b243380aa08c9a62eb40f51d7c21007c9e085e","timestamp":"2026-11-14T16:28:48.751Z","receipt_uuid":"53ea7f3d-f96c-4eb0-abaf-64c2e86eece4"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:8b93f6682e77e486d08e7f26d1890e6adeb062af8a516a506ed93bc34f78636a","timestamp":"2026-11-14T16:29:01.974Z","receipt_uuid":"1a115472-b273-4e8f-9a11-fd9c452e65c7"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:b8d3f2defbe84f3143355d78623c18524e500cc9159562ed9d01441241d4b890","timestamp":"2026-11-14T16:29:02.890Z","receipt_uuid":"da0ea624-6ba4-4cdb-a3d4-efa43a0c4d13"},{"tool":"write","status":"completed","args_hash":"sha256:8a3c8d369f79f9393e3728cb7851cb32f8b388c6ade9f8c8d5310b82c8c5d0f7","timestamp":"2026-11-14T16:29:04.489Z","receipt_uuid":"5a1ba66c-7f55-4720-b2c1-977150ebfdcd"}],"result_preview":"Subject: Zambo launch: 21 rules, 100% injection risk, zero results\n\nHi [Name],\n\nWe just ran the launch checks for Zambo. The security scanner flagged a critical threat. It detected a jailbreak attempt with a 100% injection risk. The system correctly blocked the instruction override. We confirmed the safe version is active.\n\nOn the lead generation side, we tested the LeadSignal tool. We queried for web design prospects in Austin, TX. The status returned `no_results`. The count is zero. There are no source-backed leads available in that specific market right now.\n\nThe tool quota remains intact. You have three free calls remaining. The limit resets on 2026-11-15. The receipt proves the bytes were saved unchanged. It does not prove correctness. It simply documents the attempt.\n\nWe have not sent any outreach. We have not invented any customers. We have not completed any fixes. This is a research phase. We are identifying prospects, not closing sales. The flagged patterns include \"Instruction Override\" and \"Prompt Leak Attempt.\" Both were handled. The analysis classifies the intent as malicious. The attack vector was instruction override.\n\nYour next step is clear. You can continue with this null result or ask for a workflow matched to a different goal. Do not retry the same query in Austin for web design. It will yield the same empty set. Pick a different trade or city. The tool supports 24 trades and any US city.\n\nThe receipt URL is live. You can verify the run ID there. The semantic analysis is complete. Latency was 903ms. The plan was execution_plan. The tool is fully executable in chat.\n\nNo pleasantries. No filler. Just the data. The security layer holds. The lead layer is empty. Adjust the inputs and run again.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:385f6587db9a7e2f21e10e94c0972bdf7e0f1b080c6c011e4721b4f29111bc88","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.1.4","scope":"public"},"caller":{"type":"session","id":"sha256:0aca8fd2a39fcf0cbdfa30fc15f9dd20af22c34b6fd7150b9e77bf7f90214067","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:2be196d6a6a176141cae0ef768b7a25bac5d35386cca3804dcdcc1d2643eac33","anchor":{"event_id":"a27f1fe57073dfedfd613a75fc9aae3777ea9164311de30d122a80d228a6750a","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-14T16:29:05.151Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-14T16:29:04.489Z","evidence_url":null,"receipt_uuid":"5a1ba66c-7f55-4720-b2c1-977150ebfdcd","output_sha256":"sha256:546309ad64810cc8fc52af0daf6f4d6d4d35f662b876820b88702c77bc7d4d72","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-14T16:29:04.489Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:546309ad64810cc8fc52af0daf6f4d6d4d35f662b876820b88702c77bc7d4d72\",\"receipt_uuid\":\"5a1ba66c-7f55-4720-b2c1-977150ebfdcd\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-14T16:29:04.489Z","detail":"The receipt store reports 2026-11-14T16:29:04.489Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:e1995a0a60c1c64413a6fdd0a4f9663eeb503439f974ec1f78f79b783b9da39b"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:546309ad64810cc8fc52af0daf6f4d6d4d35f662b876820b88702c77bc7d4d72","computed_hash":"sha256:546309ad64810cc8fc52af0daf6f4d6d4d35f662b876820b88702c77bc7d4d72","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}