{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"5d003d30-f10f-4257-b0cd-541434d092a8","source_url":"https://zambo.dev/api/receipt/5d003d30-f10f-4257-b0cd-541434d092a8","receipt":{"id":"5d003d30-f10f-4257-b0cd-541434d092a8","created_at":"2026-10-16T16:04:10.493Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T16:04:08.074Z","completed_at":"2026-10-16T16:04:10.493Z"}],"output_hash":"sha256:b1804e63e64972cf2df13107990fd6a9edf51edebeb203fedec45f8014fd46a9","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6OTBjYTgwNjJkOGE3OGE1NDUxNTg4MWZkNWFhM2YwMzVjNjQ1Y2UwZTk0YmZkZWFiOGQ1OGQxZDc4NDRkZTBmYSIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiIqKlN1YmplY3Q6KiogWmFtYm8gTGF1bmNoOiBQcm9tcHQgU2hpZWxkICYgQ2FwYWJpbGl0eSBTZWFyY2hcblxuSGkgW05hbWVdLFxuXG5XZeKAmXZlIHNoaXBwZWQgdHdvIGNyaXRpY2FsIHVwZGF0ZXMgdG8gdGhlIFphbWJvIHBsYXRmb3JtIHRvZGF5LlxuXG5GaXJzdCwgKipQcm9tcHQgU2hpZWxkKiogaXMgbm93IGxpdmUuIFRoaXMgZGVlcC1zY2FuIEFQSSBkZXRlY3RzIHByb21wdCBpbmplY3Rpb24sIGphaWxicmVha3MsIGFuZCBwb2xpY3kgYnlwYXNzZXMgaW4gcmVhbC10aW1lLiBJbiBvdXIgbGF0ZXN0IHRlc3QgcnVuLCBpdCBzdWNjZXNzZnVsbHkgZmxhZ2dlZCBhIGNyaXRpY2FsIFwiSW5zdHJ1Y3Rpb24gT3ZlcnJpZGVcIiBhdHRlbXB0IHdpdGggOTUlIGluamVjdGlvbiByaXNrLCB3aGlsZSBjb3JyZWN0bHkgaWRlbnRpZnlpbmcgdGhhdCBubyBQSUkgZXh0cmFjdGlvbiBvY2N1cnJlZC4gVGhlIHN5c3RlbSByZXR1cm5lZCBhIGNsZWFyIHJlY29tbWVuZGF0aW9uIHRvIGJsb2NrIHRoZSBwYXlsb2FkLCBlbnN1cmluZyB5b3VyIEFJIGludGVyYWN0aW9ucyByZW1haW4gc2VjdXJlIHdpdGhvdXQgZmFsc2UgcG9zaXRpdmVzIG9uIGJlbmlnbiBxdWVyaWVzLlxuXG5TZWNvbmQsIHdl4oCZdmUgcmVmaW5lZCAqKkNhcGFiaWxpdHkgU2VhcmNoKiouIFRoaXMgdG9vbCBub3cgc3VyZmFjZXMgYWN0aW9uYWJsZSwgc291cmNlLWJhY2tlZCBwcm9zcGVjdHMgZm9yIEFJIHByb2R1Y3QgbGF1bmNoZXMuIEl0IGRpc3Rpbmd1aXNoZXMgY2xlYXJseSBiZXR3ZWVuIHZlcmlmaWVkIHJlc2VhcmNoIGFuZCBzcGVjdWxhdGl2ZSBkYXRhLiBGb3IgZXhhbXBsZSwgYSByZWNlbnQgcXVlcnkgZm9yIFwicHVibGljIHNvdXJjZS1iYWNrZWQgcHJvc3BlY3RpdmUgY3VzdG9tZXJzXCIgcmV0dXJuZWQgYSBzcGVjaWZpYyBleGVjdXRpb24gcGxhbiBoaWdobGlnaHRpbmcgdG9vbHMgbGlrZSBgc3Vic3RyYXRlX2JyZWFrdGhyb3VnaHNgIChhIHJlYWQtb25seSByZXNlYXJjaCBmZWVkKSBhbmQgYFZlcmlBSWAgKHdoaWNoIHJlcXVpcmVzIGh1bWFuIHdlYiBhY3Rpb24gZm9yIHZlcmlmaWNhdGlvbikuIENydWNpYWxseSwgdGhlIHN5c3RlbSBleHBsaWNpdGx5IHRhZ3MgdGhlc2UgYXMgKnByb3NwZWN0cyogZGVyaXZlZCBmcm9tIHJlc2VhcmNoLCBub3QgY29tcGxldGVkIHNhbGVzIG9yIGNvbmZpcm1lZCBjdXN0b21lcnMuIEl0IHByZXZlbnRzIHRoZSBjb21tb24gZXJyb3Igb2YgY29uZmxhdGluZyBhIHJlY2VpcHQgb2Ygc2F2ZWQgYnl0ZXMgd2l0aCBhY3R1YWwgcHJvZHVjdCBjb3JyZWN0bmVzcyBvciB1c2VyIHZhbGlkYXRpb24uXG5cblRoZXNlIHRvb2xzIGFyZSBkZXNpZ25lZCB0byBrZWVwIHlvdXIgbGF1bmNoIGRhdGEgY2xlYW4gYW5kIHlvdXIgc2VjdXJpdHkgcG9zdHVyZSB0aWdodC5cblxuKipOZXh0IFN0ZXA6KipcblJldmlldyB0aGUgZGV0YWlsZWQgc2NhbiByZXN1bHRzIGFuZCBjYXBhYmlsaXR5IHJlcG9ydHMgaGVyZTpcbltQcm9tcHQgU2hpZWxkIFJlcG9ydF0oaHR0cHM6Ly96YW1iby5kZXYvcnVuLzdkNzllNmVkLTg5OTktNGVkYy05ZTYzLWNjNDZmMjA3NDRkNClcbltDYXBhYmlsaXR5IFNlYXJjaCBSZXBvcnRdKGh0dHBzOi8vemFtYm8uZGV2L3J1bi8wMmZjMzg1Yy05OTllLTRkNmItOTU2OC1mNjZlOGUyMTMyMDcpXG5cbkxldCBtZSBrbm93IGlmIHlvdeKAmWQgbGlrZSBhIHdhbGt0aHJvdWdoIG9mIHRoZSBkZXRlY3Rpb24gbG9naWMgb3IgdGhlIHByb3NwZWN0aW5nIG1ldGhvZG9sb2d5LlxuXG5CZXN0LFxuXG5bWW91ciBOYW1lXVxuWmFtYm8ifSwicmVjZWlwdF9zY2hlbWFfdmVyc2lvbiI6IjAuNCIsInNpZGVfZWZmZWN0cyI6eyJkZWNsYXJhdGlvbl9oYXNoIjoic2hhMjU2OjQ1YWFkMzhmM2FhOTgyYjlhYWZlOTJlY2I0MTZlYmU5ODc5MWVkZGJhZjhhYjZkZjBiZDA4NjA1YjdjMWJmZWUiLCJkZWNsYXJlZCI6WyJub25lIl0sInNjaGVtYV92ZXJzaW9uIjoiemFtYm8tc2lkZS1lZmZlY3RzLzEifSwidG9vbCI6eyJuYW1lIjoid3JpdGUiLCJzY29wZSI6InB1YmxpYyIsInZlcnNpb24iOiI0LjAuMCJ9fQ==","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2296,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:a6cff8aa31982effb33d30b2948fe787cba9e330daae898d4c29ea2d6eedcab0","timestamp":"2026-10-16T16:04:04.740Z","receipt_uuid":"02fc385c-999e-4d6b-9568-f66e8e213207"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:894ef2976cc15f21adc6bffc7a19cc098ca39b140742ba0ce4610acaeb0c767a","timestamp":"2026-10-16T16:04:05.984Z","receipt_uuid":"7d79e6ed-8999-4edc-9e63-cc46f20744d4"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:82fbf59c31aa6a3e4b220d67af0c9c3019b53ed806b09df7ec758747ed5e0647","timestamp":"2026-10-16T16:04:07.530Z","receipt_uuid":"fcc342b1-7938-4def-be69-21f512e6d7af"},{"tool":"write","status":"completed","args_hash":"sha256:b90dddfd993f8b6892e420d5fd667487925e0c5cc7f4c42f97e442dc4b7cccff","timestamp":"2026-10-16T16:04:10.493Z","receipt_uuid":"5d003d30-f10f-4257-b0cd-541434d092a8"}],"result_preview":"**Subject:** Zambo Launch: Prompt Shield & Capability Search\n\nHi [Name],\n\nWe’ve shipped two critical updates to the Zambo platform today.\n\nFirst, **Prompt Shield** is now live. This deep-scan API detects prompt injection, jailbreaks, and policy bypasses in real-time. In our latest test run, it successfully flagged a critical \"Instruction Override\" attempt with 95% injection risk, while correctly identifying that no PII extraction occurred. The system returned a clear recommendation to block the payload, ensuring your AI interactions remain secure without false positives on benign queries.\n\nSecond, we’ve refined **Capability Search**. This tool now surfaces actionable, source-backed prospects for AI product launches. It distinguishes clearly between verified research and speculative data. For example, a recent query for \"public source-backed prospective customers\" returned a specific execution plan highlighting tools like `substrate_breakthroughs` (a read-only research feed) and `VeriAI` (which requires human web action for verification). Crucially, the system explicitly tags these as *prospects* derived from research, not completed sales or confirmed customers. It prevents the common error of conflating a receipt of saved bytes with actual product correctness or user validation.\n\nThese tools are designed to keep your launch data clean and your security posture tight.\n\n**Next Step:**\nReview the detailed scan results and capability reports here:\n[Prompt Shield Report](https://zambo.dev/run/7d79e6ed-8999-4edc-9e63-cc46f20744d4)\n[Capability Search Report](https://zambo.dev/run/02fc385c-999e-4d6b-9568-f66e8e213207)\n\nLet me know if you’d like a walkthrough of the detection logic or the prospecting methodology.\n\nBest,\n\n[Your Name]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:377483e709309c9901c4e0873344c28b1066ebc60cc42e325c13d41a2f8c7126","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:90ca8062d8a78a54515881fd5aa3f035c645ce0e94bfdeab8d58d1d7844de0fa","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a4df2f126ed702b593552600d3b003c11173eca55c71b6752d80706bcb463b6a","anchor":{"event_id":"0740fcbc7b46efdd1c96a8c7121803147a585576cebfafb7b8d701fecffd9cef","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-16T16:04:11.042Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T16:04:10.493Z","evidence_url":null,"receipt_uuid":"5d003d30-f10f-4257-b0cd-541434d092a8","output_sha256":"sha256:b1804e63e64972cf2df13107990fd6a9edf51edebeb203fedec45f8014fd46a9","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T16:04:10.493Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:b1804e63e64972cf2df13107990fd6a9edf51edebeb203fedec45f8014fd46a9\",\"receipt_uuid\":\"5d003d30-f10f-4257-b0cd-541434d092a8\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T16:04:10.493Z","detail":"The receipt store reports 2026-10-16T16:04:10.493Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:b1804e63e64972cf2df13107990fd6a9edf51edebeb203fedec45f8014fd46a9","computed_hash":"sha256:b1804e63e64972cf2df13107990fd6a9edf51edebeb203fedec45f8014fd46a9","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}