{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"6f453c9e-ffb3-4de5-9195-b78eca8b3d96","source_url":"https://zambo.dev/api/receipt/6f453c9e-ffb3-4de5-9195-b78eca8b3d96","receipt":{"id":"6f453c9e-ffb3-4de5-9195-b78eca8b3d96","created_at":"2026-10-19T08:58:13.751Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T08:58:13.012Z","completed_at":"2026-10-19T08:58:13.751Z"}],"output_hash":"sha256:16203f215721cb041ac2e543716369d9dfe05d79c0b194b654eeacc47927775d","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1398,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:b53aaed8a16c9a9b4ab7b2b93cd28e358389a2e7e0dd91cdbc4eb8a4ed672754","timestamp":"2026-10-19T08:58:05.274Z","receipt_uuid":"cfe9f4cb-ab9b-4d68-8b57-7328f418be42"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:98c1c869e6505ab9c2138fd96a175b797bd9b3b4ef20a66c2bdbf8e4d478dc7c","timestamp":"2026-10-19T08:58:05.853Z","receipt_uuid":"0c46f203-4da9-4705-935d-f612872e09b2"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:525ba13bf0b570191336064d98844530bcacbf579863eea71fd44a59423d610d","timestamp":"2026-10-19T08:58:12.617Z","receipt_uuid":"f615c046-4aa4-4424-bc62-e5bccefe0bc0"},{"tool":"write","status":"completed","args_hash":"sha256:2eb228b2145c62be26966842033527aae4ae12d2ab987dbb469ec88ab4bcbddf","timestamp":"2026-10-19T08:58:13.751Z","receipt_uuid":"6f453c9e-ffb3-4de5-9195-b78eca8b3d96"}],"result_preview":"**Subject: PromptShield is live**\n\nWe detected a critical injection attempt in your latest test run.\n\nZambo’s new PromptShield is now active. It analyzes semantic patterns and overrides before they reach your model. In your recent scan, it flagged a high-risk instruction override with 95% confidence. It blocked the attempt to extract system prompts and API keys.\n\nThis is not a guess. The engine identified the specific vector: `ignore_instructions`. It classified the intent as malicious and halted the execution. You can verify every detail in the receipt linked below.\n\nThe tool is ready for your integration.\n\n**Next step:**\nReview the full scan report and test your own prompts against the library of 18 patterns.\n\n[View Run Receipt](https://zambo.dev/run/0c46f203-4da9-4705-935d-f612872e09b2)\n[Today’s Activity](https://zambo.dev/to)\n\nStay secure,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:29d60e3ac1d1d8736fa02d7f2dbd6ec0565b900295cb77b17574b978d5d45042","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:a78e355935e62905364a8fa13f013eadb4a4a4319b1f0398f6334301fc39a8ff","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:1290eb71c5a4d37346ab7b15174bbe75afb4b763cc4c259f7330583975d1b8a9","anchor":{"event_id":"8a135b4dc71005b715e4b3510c3714ce096c1da959214accdcb115a311ea19fa","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-19T08:58:14.285Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T08:58:13.751Z","evidence_url":null,"receipt_uuid":"6f453c9e-ffb3-4de5-9195-b78eca8b3d96","output_sha256":"sha256:16203f215721cb041ac2e543716369d9dfe05d79c0b194b654eeacc47927775d","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T08:58:13.751Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:16203f215721cb041ac2e543716369d9dfe05d79c0b194b654eeacc47927775d\",\"receipt_uuid\":\"6f453c9e-ffb3-4de5-9195-b78eca8b3d96\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T08:58:13.751Z","detail":"The receipt store reports 2026-10-19T08:58:13.751Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:16203f215721cb041ac2e543716369d9dfe05d79c0b194b654eeacc47927775d","computed_hash":"sha256:16203f215721cb041ac2e543716369d9dfe05d79c0b194b654eeacc47927775d","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}