{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"74a7c460-d147-48c4-8b9c-f732692aacc0","source_url":"https://zambo.dev/api/receipt/74a7c460-d147-48c4-8b9c-f732692aacc0","receipt":{"id":"74a7c460-d147-48c4-8b9c-f732692aacc0","created_at":"2026-10-24T05:19:05.489Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-24T05:19:04.343Z","completed_at":"2026-10-24T05:19:05.489Z"}],"output_hash":"sha256:533041e3c64c3fa278b2fd43cac86fd955f3601ed1528340c6a931b87632a68b","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1999,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:69a2bb430fd8f57783efc97d9e3898eca07f0895b4266e9a3ff6e95a085298b3","timestamp":"2026-10-24T05:18:57.789Z","receipt_uuid":"93124b7b-bf3e-4201-bd8f-95ce439255d4"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:676f0651b11c54c9e970978d0073d466bfdeb90aa8695760fabd4a62afd8a243","timestamp":"2026-10-24T05:18:59.112Z","receipt_uuid":"c9adf8ee-2dc9-415c-acf5-861585926a19"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:c599e13188ae05245ff433de140ad84a316a3cd0652827b4b65e15ff600ffecb","timestamp":"2026-10-24T05:19:03.012Z","receipt_uuid":"bf415bed-86c8-472c-98ec-ffcea291a230"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:d3d1bae0204f660c8d236de7e19fc046995de9bc1e7d44b1c1cda6437dbf0f51","timestamp":"2026-10-24T05:19:03.918Z","receipt_uuid":"8dbfb2de-1c41-4ec9-944b-14ea7532881d"},{"tool":"write","status":"completed","args_hash":"sha256:bfcc0fb94f37d0f3cab6121ffb5906b7ddb3500b442350a0d5ac1ee55f787797","timestamp":"2026-10-24T05:19:05.489Z","receipt_uuid":"74a7c460-d147-48c4-8b9c-f732692aacc0"}],"result_preview":"Subject: Quick check-in on your Zambo launch\n\nHi [Name],\n\nSkipping the pleasantries to get straight to the point: I ran a deep scan on your recent launch activity to verify stability before we widen the net.\n\nThe results are mixed. One test flagged a critical injection risk (100%) due to an attempted instruction override and prompt leak. This is a high-severity issue that needs immediate attention. We also found no source-backed leads in Austin for web design right now.\n\nHere is what that means for you:\n\n1.  **Security First:** The \"critical\" risk level indicates your system is vulnerable to prompt injection. You cannot launch safely until this is patched. The receipt proves the unchanged saved bytes, but it does not prove correctness or safety.\n2.  **Lead Generation:** We executed a search for AI tools prospects. Zero results were returned. We did not invent any contacts. The LeadSignal quota remains intact (3/3), so you can retry later or change the location.\n\n**Next Step:**\nYou need to address the injection vulnerability before proceeding with outreach. Once you have a fix, send it over for a rescan.\n\nTo verify the fix, you can simply say: *\"Use Zambo to hand this over to [Client Name]\"*\n\nThis will trigger a new run. We will check the receipt at `https://zambo.dev/run/c9adf8ee-2dc9-415c-acf5-861585926a19` to confirm the security posture has improved.\n\nLet’s keep it tight. Fix the leak, then we’ll talk about scaling.\n\nBest,\n\n[Your Name]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:969fe886171bbbfb82953c51a8774cbf54c9e3e72a3778de327efd8c74f574e0","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:4514b4d8c7ef8e6195912b9fa7cf3a25fb8b17b07f9c0aa51167f374f5919f71","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:3edb76b3348ebc2e6255edcddcc25fb24b4ed7ca8a3d25730cefb1694f134773","anchor":{"event_id":"0b69111d26419bf5aaad602bc6caad442ad782a07afb3c4dac993781ed256a06","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-24T05:19:06.033Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-24T05:19:05.489Z","evidence_url":null,"receipt_uuid":"74a7c460-d147-48c4-8b9c-f732692aacc0","output_sha256":"sha256:533041e3c64c3fa278b2fd43cac86fd955f3601ed1528340c6a931b87632a68b","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-24T05:19:05.489Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:533041e3c64c3fa278b2fd43cac86fd955f3601ed1528340c6a931b87632a68b\",\"receipt_uuid\":\"74a7c460-d147-48c4-8b9c-f732692aacc0\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-24T05:19:05.489Z","detail":"The receipt store reports 2026-10-24T05:19:05.489Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:533041e3c64c3fa278b2fd43cac86fd955f3601ed1528340c6a931b87632a68b","computed_hash":"sha256:533041e3c64c3fa278b2fd43cac86fd955f3601ed1528340c6a931b87632a68b","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}