{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"60eb9386-1684-49ba-af0e-76369d555598","source_url":"https://zambo.dev/api/receipt/60eb9386-1684-49ba-af0e-76369d555598","receipt":{"id":"60eb9386-1684-49ba-af0e-76369d555598","created_at":"2026-10-21T13:26:25.971Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-21T13:26:23.973Z","completed_at":"2026-10-21T13:26:25.971Z"}],"output_hash":"sha256:60571b68ff80dcac7d18de8eeb1e91fad8f4cdcbbe391cf534695d4f5df7c4b1","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2671,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:8ce7d6429728816d541f5d4c5e84b7a54388555af740753c742ee677d4fa64d1","timestamp":"2026-10-21T13:26:17.105Z","receipt_uuid":"cb834858-1e94-4c82-bb9c-8372d8177a62"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:bd584b68cc8d1259376f18c6369f96abe73969c591d509c508e39e214c09364e","timestamp":"2026-10-21T13:26:18.455Z","receipt_uuid":"bbd20b58-1fcb-4a39-a0a4-bd08202aaf75"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:320af706e4cbefb9b2708f2e56ac0123ae859f28a696bd679e3c4b7923386dac","timestamp":"2026-10-21T13:26:22.786Z","receipt_uuid":"5c6d982d-0164-49f0-a009-a2d6ed9af816"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:fe906d6807afa46e4920552e5010acc0ae8a67c5b5fd955fea483da6a9a211c5","timestamp":"2026-10-21T13:26:23.597Z","receipt_uuid":"35b59b3d-1400-4e3b-a3b8-5ce61a6ad018"},{"tool":"write","status":"completed","args_hash":"sha256:73ae816191516ef11bccdadcafbc525776d8e68c1e1189730ed86b4f8c0e0095","timestamp":"2026-10-21T13:26:25.971Z","receipt_uuid":"60eb9386-1684-49ba-af0e-76369d555598"}],"result_preview":"Subject: Zambo launch: Honest limits, real receipts\n\nHi [Name],\n\nI’m skipping the fluff. I ran a diagnostic on Zambo’s current launch capabilities to see what actually works versus what’s just marketing copy. The results are mixed, and I want to be transparent about them.\n\nFirst, the security layer. A deep semantic scan flagged the current prompt structure as a critical risk. It detected instruction override and jailbreak patterns. This isn’t a theoretical possibility; the system marked the injection risk at 100%. Until this is patched, the platform is vulnerable to malicious input. I’m not shipping with that kind of exposure.\n\nSecond, the lead generation engine. I tested the LeadSignal tool for web design prospects in Austin. The execution completed, but the result was zero leads. The system explicitly stated it found no source-backed prospects and refused to invent contacts. That’s a good sign for data integrity. It means the tool won’t hallucinate fake customers to make me look busy. However, it also means the current database or search parameters are too narrow to yield immediate results for this specific trade and location.\n\nThird, the research tool. The `substrate_breakthroughs` function is operational. It provides a read-only feed of AI research breakthroughs. It’s free to access and works as intended. This is a solid feature for early adopters who want real-time insights without paying for a pass.\n\nThe bottom line: Zambo is not ready for a broad public launch. The security vulnerabilities are critical, and the lead data is currently empty. I am holding off on outreach to potential customers. I will not send automated emails until the risk level drops below critical and we have verified, source-backed leads to show for our work.\n\nI need a fix for the prompt injection issue before we proceed. I also need to adjust the LeadSignal parameters or wait for the quota reset to see if broader searches yield better results.\n\nPlease review the attached receipts for the failed lead scan and the security flags. Once those are addressed, we can talk about next steps.\n\nBest,\n\n[Your Name]\n[Your Title]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:f75d3bb8b385693472283a2ec027546ba78c7bee8ad097f154d8a2c4ca958092","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:32fd24fd3266f70238092829ee3e0d8bb5b7412deadc020c47210f35ad3a7529","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:ae42d133b57d2aff24e593ac55b3659a3c8414d7b0ecbf468e2440f4cec7328e","anchor":{"event_id":"116468bc2d3b20c83b7e4666994c9d506a6857153aefd3ff87627a9dbbb9683e","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-21T13:26:26.523Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-21T13:26:25.971Z","evidence_url":null,"receipt_uuid":"60eb9386-1684-49ba-af0e-76369d555598","output_sha256":"sha256:60571b68ff80dcac7d18de8eeb1e91fad8f4cdcbbe391cf534695d4f5df7c4b1","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-21T13:26:25.971Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:60571b68ff80dcac7d18de8eeb1e91fad8f4cdcbbe391cf534695d4f5df7c4b1\",\"receipt_uuid\":\"60eb9386-1684-49ba-af0e-76369d555598\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-21T13:26:25.971Z","detail":"The receipt store reports 2026-10-21T13:26:25.971Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:60571b68ff80dcac7d18de8eeb1e91fad8f4cdcbbe391cf534695d4f5df7c4b1","computed_hash":"sha256:60571b68ff80dcac7d18de8eeb1e91fad8f4cdcbbe391cf534695d4f5df7c4b1","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}