{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"5da7e254-c63e-4690-a95c-8c053883a039","source_url":"https://zambo.dev/api/receipt/5da7e254-c63e-4690-a95c-8c053883a039","receipt":{"id":"5da7e254-c63e-4690-a95c-8c053883a039","created_at":"2026-10-17T07:08:23.720Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-17T07:08:21.763Z","completed_at":"2026-10-17T07:08:23.720Z"}],"output_hash":"sha256:71fa41cca4434579ab53e9ebde026444260ce175dd086f8fd5d69ffc0951dfd8","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2197,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:6f91b4e0d1d98e8792f1c0a1ef772705484f53258559011da34c477014c54810","timestamp":"2026-10-17T07:08:18.817Z","receipt_uuid":"8ea0eab4-e4f0-4ebe-8d17-7cc77171199d"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:60475a3f2b0ecfd93e7680a2d524138b5bf5c92487c092b27a34756993f9fb17","timestamp":"2026-10-17T07:08:19.527Z","receipt_uuid":"06c20e20-4b5d-4c07-b111-0b5fed6e5bd2"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:4df51fc318813c8f1dd3f52653cabc7df571a75294b2baf2cb438c21cc3a6dc8","timestamp":"2026-10-17T07:08:21.361Z","receipt_uuid":"eea8ef30-3065-497d-8b8f-d1a79b6a3566"},{"tool":"write","status":"completed","args_hash":"sha256:920294a41f6e981f08e9c781973566e530baf77e58038a3606c5123bad0af057","timestamp":"2026-10-17T07:08:23.720Z","receipt_uuid":"5da7e254-c63e-4690-a95c-8c053883a039"}],"result_preview":"Subject: Zambo is live: Detecting prompt injections before they hit your API\n\nHi [Name],\n\nI’m reaching out because your team is likely dealing with the same problem: AI agents are powerful, but they are also vulnerable to manipulation. Attackers are now using sophisticated prompt injection techniques to bypass safety filters, extracting sensitive data or hijacking agent behavior in real-time. Standard firewall rules don’t catch this. They need to understand intent, not just syntax.\n\nThat is why we built Zambo.\n\nZambo is a deep-scan API that intercepts prompts before they reach your model. It uses a dedicated pattern library to identify malicious intent, such as instruction overrides and jailbreak attempts, with high precision. It does not just flag keywords; it analyzes semantic status to distinguish between a curious user asking an edge-case question and a bad actor trying to force a policy bypass.\n\nThe integration is straightforward. You send the prompt to Zambo first. If the risk score is below your threshold, it passes through to your LLM. If it’s critical, you block it or route it to a human review queue. The entire process adds minimal latency, keeping your user experience snappy while protecting your backend from data exfiltration and unauthorized actions.\n\nWe are currently onboarding a limited number of early adopters to help refine our detection models against real-world traffic. I’d love to show you a live demo of how Zambo catches a complex multi-turn injection attempt in under a second.\n\nLet’s set up a 15-minute call this week. Are you available Tuesday afternoon or Wednesday morning?\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:33a8a07835e0e6253ad27694443c1e5569aa8d6e252498b8e47dd645f6ac2d2a","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:041334c834d63b630348fc0108b139c40fc360fb7c26faa2cd8e3c4df32dba6f","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:496d5b656d727a2c3602f21a8eafa27ebcf396a580e96c28e6bc83f75fbcb33d","anchor":{"event_id":"828f0e61216f8ad3488324a091c82b0da63b1856cd5e73fd8646a8836bd9b2e2","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-17T07:08:24.238Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-17T07:08:23.720Z","evidence_url":null,"receipt_uuid":"5da7e254-c63e-4690-a95c-8c053883a039","output_sha256":"sha256:71fa41cca4434579ab53e9ebde026444260ce175dd086f8fd5d69ffc0951dfd8","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-17T07:08:23.720Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:71fa41cca4434579ab53e9ebde026444260ce175dd086f8fd5d69ffc0951dfd8\",\"receipt_uuid\":\"5da7e254-c63e-4690-a95c-8c053883a039\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-17T07:08:23.720Z","detail":"The receipt store reports 2026-10-17T07:08:23.720Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:71fa41cca4434579ab53e9ebde026444260ce175dd086f8fd5d69ffc0951dfd8","computed_hash":"sha256:71fa41cca4434579ab53e9ebde026444260ce175dd086f8fd5d69ffc0951dfd8","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}