{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"636bca86-c9dd-4314-9755-cd09c597ec6f","source_url":"https://zambo.dev/api/receipt/636bca86-c9dd-4314-9755-cd09c597ec6f","receipt":{"id":"636bca86-c9dd-4314-9755-cd09c597ec6f","created_at":"2026-11-15T07:43:01.086Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: spend_limit_set","tools":["spend_limit_set"],"steps":[{"tool":"spend_limit_set","status":"success","started_at":"2026-11-15T07:43:00.997Z","completed_at":"2026-11-15T07:43:01.086Z"}],"output_hash":"sha256:51096b6c758e3ae604ca4479367dd6b2e6e8ed3f6bb42de1479fb58c530bc066","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":529,"verification_status":"verified","session_trail":[{"tool":"handover_list","status":"completed","args_hash":"sha256:e20d492c05e01d915e29d93b14e79634ec6ab19584157f3a4d1758d4db3b40d3","timestamp":"2026-11-13T07:35:03.049Z","receipt_uuid":"2baf307c-72c6-4444-b1a4-608e2a52efc8"},{"tool":"spend_limit_status","status":"completed","args_hash":"sha256:e20d492c05e01d915e29d93b14e79634ec6ab19584157f3a4d1758d4db3b40d3","timestamp":"2026-11-14T12:03:14.814Z","receipt_uuid":"e36bca67-bfe8-400d-8c01-597cdf73ff81"},{"tool":"memory_remember","status":"completed","args_hash":"sha256:5e1b28febf45c9332e9e8b73dcb3e7ab517501adf71a64c20b59aeedd2e68949","timestamp":"2026-11-15T07:42:47.976Z","receipt_uuid":"a31fc6ec-00bc-4825-bce9-f8714b36afb7"},{"tool":"memory_remember","status":"completed","args_hash":"sha256:5e1b28febf45c9332e9e8b73dcb3e7ab517501adf71a64c20b59aeedd2e68949","timestamp":"2026-11-15T07:42:51.601Z","receipt_uuid":"15044e59-3df1-47e6-ac43-71c9df820332"},{"tool":"workflow_close","status":"completed","args_hash":"sha256:e20d492c05e01d915e29d93b14e79634ec6ab19584157f3a4d1758d4db3b40d3","timestamp":"2026-11-15T07:42:53.310Z","receipt_uuid":"7f9077b6-2492-4a28-8292-2d9f06eebbd9"},{"tool":"spend_limit_set","status":"completed","args_hash":"sha256:c71515922531712e28b0da7856d13ed90a3f284256cc17414abe60374de962c9","timestamp":"2026-11-15T07:43:01.086Z","receipt_uuid":"636bca86-c9dd-4314-9755-cd09c597ec6f"}],"result_preview":"{\"limit\":1,\"monthly_usd\":null}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:c71515922531712e28b0da7856d13ed90a3f284256cc17414abe60374de962c9","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":1,"free_remaining":2,"free_limit":3,"signal_handle":null,"tool":{"name":"spend_limit_set","version":"4.1.4","scope":"public"},"caller":{"type":"session","id":"sha256:d99962c6b717a0a1e50bc15052e79402c08f3cba29bc01f26bd10129bf629e6a","label":"mcp","label_source":"caller_reported"},"side_effects":{"declared":["state_write"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:dfb4412aa429d3ac637a05668c435bcc90a251363fcdd49f7b85ae4ab55b5bc9"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"status":"executed","state_hash":null,"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:840e9d34ff83012cec016bc3388cc3cad8ed9cc06d4a7cd147fb21ea0ed183cd","anchor":{"event_id":"763b511b62a3869eccf3c505d1a4b238d9b120123134edbd2fb1474189e45154","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-15T07:43:01.689Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-15T07:43:01.086Z","evidence_url":null,"receipt_uuid":"636bca86-c9dd-4314-9755-cd09c597ec6f","output_sha256":"sha256:51096b6c758e3ae604ca4479367dd6b2e6e8ed3f6bb42de1479fb58c530bc066","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-15T07:43:01.086Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:51096b6c758e3ae604ca4479367dd6b2e6e8ed3f6bb42de1479fb58c530bc066\",\"receipt_uuid\":\"636bca86-c9dd-4314-9755-cd09c597ec6f\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-15T07:43:01.086Z","detail":"The receipt store reports 2026-11-15T07:43:01.086Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:6552dc1b834405ccd3e798b0d07f4dd1ddc038fd2670ab60368b8d33df47fcd1"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:51096b6c758e3ae604ca4479367dd6b2e6e8ed3f6bb42de1479fb58c530bc066","computed_hash":"sha256:51096b6c758e3ae604ca4479367dd6b2e6e8ed3f6bb42de1479fb58c530bc066","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}