{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"6e782f66-b1d3-449a-af5e-ac2091f9bad0","source_url":"https://zambo.dev/api/receipt/6e782f66-b1d3-449a-af5e-ac2091f9bad0","receipt":{"id":"6e782f66-b1d3-449a-af5e-ac2091f9bad0","created_at":"2026-11-09T17:22:36.936Z","receipt_schema_version":"0.4","job_summary":"goal: Deep Auditor re-verify 2026-11-09 (team QA, not a customer)","tools":["handover"],"steps":[{"tool":"handover","status":"success","started_at":"2026-11-09T17:22:35.368Z","completed_at":"2026-11-09T17:22:36.936Z"}],"output_hash":"sha256:b26a164717016f849237dc40a7b65b834a835666a9c9efc4d482bcd9eb709ce8","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6MDUwN2E4OGQzZGU3MTUxZjg5ZWQwMGE3YTBmY2Y4MjIwYzg0ZTI2MDIwNmU4YzQ1MGY2ZTcwNWMzZjY5ZTI4NiIsImxhYmVsIjoidGVzdC1kZWVwLWF1ZGl0b3ItMjAyNi0xMS0wOSIsImxhYmVsX3NvdXJjZSI6ImNhbGxlcl9yZXBvcnRlZCIsInR5cGUiOiJzZXNzaW9uIn0sImlzc3Vlcl9jbGFpbXMiOnsicHJvdmVuYW5jZV9jbGFzcyI6IkVYRUNVVEVEIEJZIFpBTUJPIn0sIm91dHB1dCI6eyJhY2NlcHRhbmNlX3VybCI6Imh0dHBzOi8vemFtYm8uZGV2L2hhbmRvdmVyLzI4NTkyOTlmLTFmNzQtNGM3MS05NzJlLTYyODNkYWY1ZGE2Zi9hY2NlcHRhbmNlLmpzb24iLCJhZ2VudF9pZCI6ImFnZW50LWY3ZjA1MWMzZDEyOWFmNmU0M2E0YjNhZiIsImFnZW50X3VybCI6Imh0dHBzOi8vemFtYm8uZGV2L2FnZW50L2FnZW50LWY3ZjA1MWMzZDEyOWFmNmU0M2E0YjNhZiIsImFpX3VzZV9zdGF0ZW1lbnQiOiJBSSB1c2U6IHRlc3QtZGVlcC1hdWRpdG9yLTIwMjYtMTEtMDkgaGVscGVkIHdpdGggMiBvZiAyIHN0ZXBzLiBTZWUgdGhlIGxpc3RlZCByZWNlaXB0cy4iLCJhaXMiOlsidGVzdC1kZWVwLWF1ZGl0b3ItMjAyNi0xMS0wOSJdLCJiYWRnZV91cmwiOiJodHRwczovL3phbWJvLmRldi9iYWRnZS9hZ2VudC1mN2YwNTFjM2QxMjlhZjZlNDNhNGIzYWYuc3ZnIiwiaGFuZG92ZXJfaWQiOiIyODU5Mjk5Zi0xZjc0LTRjNzEtOTcyZS02MjgzZGFmNWRhNmYiLCJub3RfY2hlY2tlZCI6W10sIm93bmVyX3VybCI6Imh0dHBzOi8vemFtYm8uZGV2L2hhbmRvdmVyLzI4NTkyOTlmLTFmNzQtNGM3MS05NzJlLTYyODNkYWY1ZGE2ZiIsInJlZGFjdGlvbnMiOjAsInJlbGVhc2VfaGludCI6ImhvbGQiLCJyZXVzZWQiOmZhbHNlLCJzZWFsX25leHQiOiJLZWVwIHdvcmtmbG93X21hbmFnZV90b2tlbiBwcml2YXRlLiBXaXRoIGFuIGFjdGl2ZSBwYXNzLCBjYWxsIHdvcmtmbG93X3NlYWwgd2l0aCB3b3JrZmxvd19pZCwgd29ya2Zsb3dfbWFuYWdlX3Rva2VuIGFuZCB0aGUgc2FtZSBfc2Vzc2lvbl9pZCB1c2VkIGZvciB0aGlzIGhhbmRvdmVyLiBTZWFsaW5nLCBpbmNsdWRpbmcgdGhlIGRpc3B1dGUgcGFjaywgcmVxdWlyZXMgYSBwYXNzLiIsInNoYXJlX3RleHQiOiJIZXJlJ3MgdGhlIGhhbmRvdmVyIGZvciB0ZXN0LWRlZXAtYXVkaXRvci0yMDI2LTExLTA5OiBEZWVwIEF1ZGl0b3IgcmUtdmVyaWZ5IDIwMjYtMTEtMDkgKHRlYW0gUUEsIG5vdCBhIGN1c3RvbWVyKS4gaHR0cHM6Ly96YW1iby5kZXYvaGFuZG92ZXIvMjg1OTI5OWYtMWY3NC00YzcxLTk3MmUtNjI4M2RhZjVkYTZmIEVhY2ggbGlzdGVkIHN0ZXAgaGFzIGEgdmVyaWZpYWJsZSByZWNlaXB0IHlvdSBjYW4gY2hlY2sgaW4geW91ciBicm93c2VyLiIsInNoaWVsZCI6InBhc3MiLCJzb3VyY2VzIjp7Im5vdF9jaGVja2VkIjowLCJub3RfcmVzb2x2ZWQiOjAsInJlc29sdmVkIjowfSwic3RlcHMiOjIsInVybCI6Imh0dHBzOi8vemFtYm8uZGV2L2hhbmRvdmVyLzI4NTkyOTlmLTFmNzQtNGM3MS05NzJlLTYyODNkYWY1ZGE2ZiIsInZlcmlmeV91cmwiOiJodHRwczovL3phbWJvLmRldi9hcGkvdjIvcmVjZWlwdC8xNDdmYzQ0Ny0wM2NiLTQyNTktODhkMS0yOWQ0YzM4OGI2YTgvdmVyaWZ5IiwidmlzaWJpbGl0eSI6InB1YmxpYyIsIndhcm5pbmdzIjpbXSwid29ya2Zsb3dfaWQiOiI1ZDg3NmE2ZS0yY2YzLTQ1MzItYTA2OC1lMmI1MmI5MTBlNGIiLCJ3b3JrZmxvd19yZWNlaXB0X3VybCI6Imh0dHBzOi8vemFtYm8uZGV2L3J1bi8xNDdmYzQ0Ny0wM2NiLTQyNTktODhkMS0yOWQ0YzM4OGI2YTgifSwicmVjZWlwdF9zY2hlbWFfdmVyc2lvbiI6IjAuNCIsInNpZGVfZWZmZWN0cyI6eyJkZWNsYXJhdGlvbl9oYXNoIjoic2hhMjU2OjQ1YWFkMzhmM2FhOTgyYjlhYWZlOTJlY2I0MTZlYmU5ODc5MWVkZGJhZjhhYjZkZjBiZDA4NjA1YjdjMWJmZWUiLCJkZWNsYXJlZCI6WyJub25lIl0sInNjaGVtYV92ZXJzaW9uIjoiemFtYm8tc2lkZS1lZmZlY3RzLzEifSwidG9vbCI6eyJuYW1lIjoiaGFuZG92ZXIiLCJzY29wZSI6InB1YmxpYyIsInZlcnNpb24iOiI0LjAuMCJ9fQ==","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2065,"verification_status":"verified","session_trail":[{"tool":"live_price","status":"completed","args_hash":"sha256:1dcdb702773c84031fa2e20fb0e32e10a2c06bc5985d0b59420a86e3c8cb2a89","timestamp":"2026-11-09T17:22:34.246Z","receipt_uuid":"d18eb93a-6f36-4a00-8a8c-597252327a13"},{"tool":"handover","status":"completed","args_hash":"sha256:ffc4d5a17d1ffd301615ffb6f7cd4f97078d8e1e0ded6edffad626f14be95ac9","timestamp":"2026-11-09T17:22:36.936Z","receipt_uuid":"6e782f66-b1d3-449a-af5e-ac2091f9bad0"}],"result_preview":"{\"handover_id\":\"2859299f-1f74-4c71-972e-6283daf5da6f\",\"url\":\"https://zambo.dev/handover/2859299f-1f74-4c71-972e-6283daf5da6f\",\"reused\":false,\"agent_id\":\"agent-f7f051c3d129af6e43a4b3af\",\"workflow_id\":\"5d876a6e-2cf3-4532-a068-e2b52b910e4b\",\"agent_url\":\"https://zambo.dev/agent/agent-f7f051c3d129af6e43a4b3af\",\"badge_url\":\"https://zambo.dev/badge/agent-f7f051c3d129af6e43a4b3af.svg\",\"share_text\":\"Here's the handover for test-deep-auditor-2026-11-09: Deep Auditor re-verify 2026-11-09 (team QA, not a customer). https://zambo.dev/handover/2859299f-1f74-4c71-972e-6283daf5da6f Each listed step has a verifiable receipt you can check in your browser.\",\"workflow_receipt_url\":\"https://zambo.dev/run/147fc447-03cb-4259-88d1-29d4c388b6a8\",\"verify_url\":\"https://zambo.dev/api/v2/receipt/147fc447-03cb-4259-88d1-29d4c388b6a8/verify\",\"steps\":2,\"ai_use_statement\":\"AI use: test-deep-auditor-2026-11-09 helped with 2 of 2 steps. See the listed receipts.\",\"sources\":{\"resolved\":0,\"not_resolved\":0,\"not_checked\":0},\"warnings\":[],\"acceptance_url\":\"https://zambo.dev/handover/2859299f-1f74-4c71-972e-6283daf5da6f/acceptance.json\",\"release_hint\":\"hold\",\"ais\":[\"test-deep-auditor-2026-11-09\"],\"not_checked\":[],\"shield\":\"pass\",\"visibility\":\"public\",\"redactions\":0,\"owner_url\":\"https://zambo.dev/handover/2859299f-1f74-4c71-972e-6283daf5da6f\",\"seal_next\":\"Keep workflow_manage_token private. With an active pass, call workflow_seal with workflow_id, workflow_manage_token and the same _session_id used for this handover. Sealing, including the dispute pack, requires a pass.\"}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:287658316d49d0e1c9fb4bb1787ec66e07edad158507b187cabcf64a326ef676","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":1,"free_remaining":19,"free_limit":20,"signal_handle":null,"tool":{"name":"handover","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:0507a88d3de7151f89ed00a7a0fcf8220c84e260206e8c450f6e705c3f69e286","label":"test-deep-auditor-2026-11-09","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":"sha256:ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","evidence_url":"/api/evidence/ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","evidence_byte_length":752,"evidence_content_type":"application/json","evidence_source_url":null,"evidence_status":"ok","result_source":null,"evidence_source":"localhost","external_evidence":[],"provenance":{"result_source":null,"evidence_source":"localhost","evidence_status":"ok","evidence_captures":[{"sha256":"sha256:ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","source":"localhost","capture_role":"primary","evidence_status":"ok"}]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:5d5945ffaea32bd9b08f07bebe848b4648b7882b3c8c356a0b908459958456fe","anchor":{"event_id":"1c55f22a99762a89d1c1999b371bd2f2c2c5077bd46bc06455c1aa77dde47bb7","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-09T17:22:37.514Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-09T17:22:36.936Z","evidence_url":"https://zambo.dev/api/evidence/ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","receipt_uuid":"6e782f66-b1d3-449a-af5e-ac2091f9bad0","output_sha256":"sha256:b26a164717016f849237dc40a7b65b834a835666a9c9efc4d482bcd9eb709ce8","schema_version":"zambo-receipt-anchor/1","evidence_sha256":"sha256:ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0","evidence_byte_length":752},"envelope_bytes":"{\"anchored_at\":\"2026-11-09T17:22:36.936Z\",\"evidence_byte_length\":752,\"evidence_sha256\":\"sha256:ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0\",\"evidence_url\":\"https://zambo.dev/api/evidence/ea7ed2f24c71f77beba6936d24a50a3e009d96e0464d7d547af1222964d9a0b0\",\"output_sha256\":\"sha256:b26a164717016f849237dc40a7b65b834a835666a9c9efc4d482bcd9eb709ce8\",\"receipt_uuid\":\"6e782f66-b1d3-449a-af5e-ac2091f9bad0\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-09T17:22:36.936Z","detail":"The receipt store reports 2026-11-09T17:22:36.936Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:593ba4fa9f922bde4cec7c9b101a8266eae96c089513164d471ab3122fa889d1"}}},"evidence_status":"ok","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:b26a164717016f849237dc40a7b65b834a835666a9c9efc4d482bcd9eb709ce8","computed_hash":"sha256:b26a164717016f849237dc40a7b65b834a835666a9c9efc4d482bcd9eb709ce8","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}