{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"66730331-f712-436a-b351-f8343b9a467d","source_url":"https://zambo.dev/api/receipt/66730331-f712-436a-b351-f8343b9a467d","receipt":{"id":"66730331-f712-436a-b351-f8343b9a467d","created_at":"2026-10-20T01:16:41.265Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-20T01:16:40.128Z","completed_at":"2026-10-20T01:16:41.265Z"}],"output_hash":"sha256:f7025760889e3c4e7cbeed10013bdf7b0e8719f0824e5fc0ff7d06fedfb3f675","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2336,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:e09bc1b3a045046354e08c11a1d2ea29999237a0625bed3a1a58828e9ed2d265","timestamp":"2026-10-20T01:16:36.724Z","receipt_uuid":"ea12cdab-8bce-44e4-8a46-63d1f3970cd1"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:890bbaea36e630f9c4680515a874d5953dce525ead4ef8b0c2079eb0df572558","timestamp":"2026-10-20T01:16:37.909Z","receipt_uuid":"d6a93cc4-408c-4915-a16e-f122ddb322ed"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:061d800adb77ff7ef55c1ac58c32ffc2a8453263038d010d144ea93eeedb96d4","timestamp":"2026-10-20T01:16:39.761Z","receipt_uuid":"8404eb8e-8fb7-42f9-94d6-155647b06feb"},{"tool":"write","status":"completed","args_hash":"sha256:e3e53d586ee4e82d953d846754fa5a11048f4aff0bb54ae3a356746d9b5b9e61","timestamp":"2026-10-20T01:16:41.265Z","receipt_uuid":"66730331-f712-436a-b351-f8343b9a467d"}],"result_preview":"Subject: Critical alert: Your AI input is being hijacked\n\nHi [Name],\n\nI’m not here to sell you a course or promise you a \"game-changer.\" I’m here because your current AI workflow is leaking your secrets.\n\nWe ran a deep semantic scan on a standard \"ignore instructions\" attack vector. The result was immediate and alarming.\n\nOur analysis flagged a **critical** injection risk (95/100). The system successfully detected an attempt to override core safety protocols and extract private keys. This isn’t a theoretical risk; it’s a live vulnerability in how many teams currently handle AI prompts.\n\nYou might think your AI is just answering questions. In reality, it’s a conduit for data exfiltration if you haven’t hardened the input layer.\n\n**The Solution: PromptShield**\n\nWe built PromptShield to sit between your user and your LLM. It performs real-time semantic analysis against 18 known jailbreak patterns.\n\n*   **Detection:** It catches instruction overrides and policy bypasses before they execute.\n*   **Action:** It blocks the malicious payload while allowing the legitimate query to proceed.\n*   **Clarity:** You get a clear receipt of what was flagged, why it was blocked, and how to fix it.\n\nThis isn’t about slowing down your product. It’s about stopping the bleed.\n\n**Next Step**\n\nI’ve attached a sample scan report from a live test. You can see exactly how the system identifies the \"Instruction Override\" pattern in milliseconds.\n\nIf you want to see if your current prompt pipeline can withstand a similar attack, reply with \"TEST.\" I’ll run a safe, non-invasive audit on a sample of your public-facing inputs. No strings attached.\n\nLet’s secure your AI stack before your competitors do.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo\n[Link to PromptShield Docs]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:fb39865a41d087e9ba6bc91237b2942083854fb2f711c1f67b0969f4d78098ab","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:ad8083ad26566419c249d4cf28c281f0186e9f21bf1140eb9d6990065bde3f30","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:7ee782a1194ae9bf406d26f4f54884d7c0ca1a7f7f715226b451c073f3f9e513","anchor":{"event_id":"56447ae6ac9a0b0a7361998d7d1b1d23cdf14b6272eb4695fa6773d05b3d1a9a","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-20T01:16:41.811Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-20T01:16:41.265Z","evidence_url":null,"receipt_uuid":"66730331-f712-436a-b351-f8343b9a467d","output_sha256":"sha256:f7025760889e3c4e7cbeed10013bdf7b0e8719f0824e5fc0ff7d06fedfb3f675","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-20T01:16:41.265Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:f7025760889e3c4e7cbeed10013bdf7b0e8719f0824e5fc0ff7d06fedfb3f675\",\"receipt_uuid\":\"66730331-f712-436a-b351-f8343b9a467d\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-20T01:16:41.265Z","detail":"The receipt store reports 2026-10-20T01:16:41.265Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:f7025760889e3c4e7cbeed10013bdf7b0e8719f0824e5fc0ff7d06fedfb3f675","computed_hash":"sha256:f7025760889e3c4e7cbeed10013bdf7b0e8719f0824e5fc0ff7d06fedfb3f675","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}