{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"7887b119-99e7-440d-98b1-581ba2947040","source_url":"https://zambo.dev/api/receipt/7887b119-99e7-440d-98b1-581ba2947040","receipt":{"id":"7887b119-99e7-440d-98b1-581ba2947040","created_at":"2026-10-27T11:10:08.689Z","receipt_schema_version":"0.4","job_summary":"query: prompt security scan","tools":["capability_search"],"steps":[{"tool":"capability_search","status":"success","started_at":"2026-10-27T11:10:08.575Z","completed_at":"2026-10-27T11:10:08.689Z"}],"output_hash":"sha256:a1c44bb3ea3068d8239fced5380fc1d85c9abc88890f3cfd6ab950f8abb8db62","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":8571,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:9a3c1a1cfb06d5f51349fac412b23724789448acae1872442ee662e7c13dabe1","timestamp":"2026-10-27T11:10:08.689Z","receipt_uuid":"7887b119-99e7-440d-98b1-581ba2947040"}],"result_preview":"{\"query\":\"prompt security scan\",\"status\":\"execution_plan\",\"tools\":[{\"rank\":1,\"name\":\"provibe_audit\",\"product\":\"ProvibeCode\",\"description\":\"AI code audit — Provibe Score, security scan, dead code map\",\"classification\":\"fully_executable_in_chat\",\"tool\":\"provibe_audit\",\"callable\":\"provibe_audit({repo_url: \\\"https://github.com/owner/repo\\\"})\",\"required_arguments\":[\"repo_url\"],\"side_effects\":\"Read-only public-repository audit; without a pass email this returns the free teaser.\",\"access\":{\"free_tier\":\"teaser (score + top 3 issues)\",\"paid\":\"included with Zambo Pass (five full audits per month)\",\"per_call\":\"free (teaser)\"},\"approval_required\":false,\"retry_safe\":true,\"expected_output\":{\"provibe_score\":\"number\",\"vulnerabilities\":\"string[]\",\"dead_code\":\"string[]\",\"execution_plan\":\"string\"},\"input_hints\":{\"repo_url\":{\"type\":\"string\",\"description\":\"Public GitHub repository URL. Example: https://github.com/owner/my-saas\"}},\"relevance_score\":37,\"why_relevant\":\"security, scan\"},{\"rank\":2,\"product\":\"VeriAI\",\"description\":\"Cryptographic trust score for any AI-generated output\",\"classification\":\"requires_human_web_action\",\"human_action\":\"The public VeriAI product has no confirmed callable Zambo MCP route; use its web flow.\",\"web_link\":\"https://veriai.site\",\"relevance_score\":27,\"why_relevant\":\"prompt, security\"},{\"rank\":3,\"product\":\"Govri\",\"description\":\"AI governance policy from 5 questions in 60 seconds\",\"classification\":\"requires_human_web_action\",\"human_action\":\"The public Govri product has no confirmed callable Zambo MCP route; policy publication requires human review.\",\"web_link\":\"https://govri.xyz\",\"relevance_score\":27,\"why_relevant\":\"prompt, security\"},{\"rank\":4,\"name\":\"zambro_analyze\",\"product\":\"ZAMBRO\",\"description\":\"Free deterministic opportunity scanner — 21 branches, any input\",\"classification\":\"fully_executable_in_chat\",\"tool\":\"zambro_analyze\",\"callable\":\"zambro_analyze({input: \\\"<URL, repo, idea, or description>\\\"})\",\"required_arguments\":[\"input\"],\"side_effects\":\"Read-only analysis.\",\"access\":{\"free_tier\":\"unlimited\",\"paid\":\"included in Zambo Pass\",\"per_call\":\"free\"},\"approval_required\":false,\"retry_safe\":true,\"expected_output\":{\"branch\":\"string\",\"confidence\":\"number\",\"bottleneck\":\"string\",\"fastest_win\":\"string\",\"playbook\":\"string[]\"},\"input_hints\":{\"input\":{\"type\":\"string\",\"description\":\"Anything to analyze: URL, wallet address, GitHub repo URL, business description, product idea, or goal (max 2000 chars). Example: 'https://github.com/owner/repo' or 'My SaaS idea: AI code reviewer for solo founders' or 'zambo.dev'\"}},\"relevance_score\":22,\"why_relevant\":\"scan\"},{\"rank\":5,\"product\":\"Entangler\",\"description\":\"Cross-agent messaging fabric — trustless coordination without a broker\",\"classification\":\"requires_human_web_action\",\"human_action\":\"This external service requires its own account/configuration and consent.\",\"web_link\":\"https://entangler.tech\",\"relevance_score\":10,\"why_relevant\":\"security\"},{\"rank\":6,\"name\":\"scam_check\",\"product\":\"SCAMRA\",\"description\":\"Free scammer intelligence — check any domain, IP, wallet, URL against 30,000+ threat records\",\"classification\":\"fully_executable_in_chat\",\"tool\":\"scam_check\",\"callable\":\"scam_check({target: \\\"<domain-or-url-or-wallet>\\\"})\",\"required_arguments\":[\"target\"],\"side_effects\":\"Read-only SCAMRA threat-intelligence lookup with optional Criptic wallet cross-reference. An empty result is not proof of safety.\",\"access\":{\"free_tier\":\"20/day per tool\",\"paid\":\"included in Zambo Pass\",\"per_call\":\"free\"},\"approval_required\":false,\"retry_safe\":true,\"expected_output\":{\"verdict\":\"clean|suspicious|scam\",\"confidence\":\"number\",\"reasons\":\"string[]\",\"sources\":\"string[]\",\"first_seen\":\"string | undefined\"},\"input_hints\":{\"target\":{\"type\":\"string\",\"description\":\"Wallet address, contract address, domain, or full URL.\"}},\"relevance_score\":7,\"why_relevant\":\"general relevance\"}],\"execution_plan\":[{\"step\":1,\"rank\":1,\"name\":\"provibe_audit\",\"product\":\"ProvibeCode\",\"description\":\"AI code audit — Provibe Score, security scan, dead code map\",\"classification\":\"fully_executable_in_chat\",\"tool\":\"provibe_audit\",\"callable\":\"provibe_audit({repo_url: \\\"https://github.com/owner/repo\\\"})\",\"required_arguments\":[\"repo_url\"],\"side_effects\":\"Read-only public-repository audit; without a pass email this returns the free teaser.\",\"access\":{\"free_tier\":\"teaser (score + top 3 issues)\",\"paid\":\"included with Zambo Pass (five full audits per month)\",\"per_call\":\"free (teaser)\"},\"approval_required\":false,\"retry_safe\":true,\"expected_output\":{\"provibe_score\":\"number\",\"vulnerabilities\":\"string[]\",\"dead_code\":\"string[]\",\"execution_plan\":\"string\"},\"input_hints\":{\"repo_url\":{\"type\":\"string\",\"description\":\"Public GitHub repository URL. Example: https://github.com/owner/my-saas\"}},\"relevance_score\":37,\"why_relevant\":\"security, scan\"},{\"step\":2,\"rank\":2,\"product\":\"VeriAI\",\"description\":\"Cryptographic trust score for any AI-generated output\",\"classification\":\"requires_human_web_action\",\"human_action\":\"The public VeriAI product has no confirmed callable Zambo MCP route; use its web flow.\",\"web_link\":\"https://veriai.site\",\"relevance_score\":27,\"why_relevant\":\"prompt, security\"},{\"step\":3,\"rank\":3,\"product\":\"Govri\",\"description\":\"AI governance policy from 5 questions in 60 seconds\",\"classification\":\"requires_human_web_action\",\"human_action\":\"The public Govri product has no confirmed callable Zambo MCP route; policy publication requires human review.\",\"web_link\":\"https://govri.xyz\",\"relevance_score\":27,\"why_relevant\":\"prompt, security\"},{\"step\":4,\"rank\":4,\"name\":\"zambro_analyze\",\"product\":\"ZAMBRO\",\"description\":\"Free deterministic opportunity scanner — 21 branches, any input\",\"classification\":\"fully_executable_in_chat\",\"tool\":\"zambro_analyze\",\"callable\":\"zambro_analyze({input: \\\"<URL, repo, idea, or description>\\\"})\",\"required_arguments\":[\"input\"],\"side_effects\":\"Read-only analysis.\",\"access\":{\"free_tier\":\"unlimited\",\"paid\":\"included in Zambo Pass\",\"per_call\":\"free\"},\"approval_required\":false,\"retry_safe\":true,\"exp","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:2fc854db5eb7dd56b088e385f1450494ad5393ce2d02560d6a0eac07488ed5eb","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":20,"free_limit":20,"signal_handle":null,"tool":{"name":"capability_search","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:60bf9108217bcb4fce8fcd3b8f506703ab3650cb849e136e1c2735cde76deeed","label":"heartbeat","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":"sha256:587b217c8f4bca132c1af004e8960ba1854f6e9e50b60a19e50814712aa63509","evidence_url":"/api/evidence/587b217c8f4bca132c1af004e8960ba1854f6e9e50b60a19e50814712aa63509","evidence_byte_length":2552,"evidence_content_type":"application/json","evidence_source_url":null,"evidence_status":"captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:76c7e8d241dd96969e19fd1747cc8231781b046a096188285ceb4c946b372f70","anchor":{"event_id":"3935a3e410ee4cd8db4dd7c550fa2117e6259dbddbbd02c1bb9b93f7c6ab584c","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-27T11:10:09.338Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-27T11:10:08.689Z","evidence_url":"https://zambo.dev/api/evidence/587b217c8f4bca132c1af004e8960ba1854f6e9e50b60a19e50814712aa63509","receipt_uuid":"7887b119-99e7-440d-98b1-581ba2947040","output_sha256":"sha256:a1c44bb3ea3068d8239fced5380fc1d85c9abc88890f3cfd6ab950f8abb8db62","schema_version":"zambo-receipt-anchor/1","evidence_sha256":"sha256:587b217c8f4bca132c1af004e8960ba1854f6e9e50b60a19e50814712aa63509","evidence_byte_length":2552},"envelope_bytes":"{\"anchored_at\":\"2026-10-27T11:10:08.689Z\",\"evidence_byte_length\":2552,\"evidence_sha256\":\"sha256:587b217c8f4bca132c1af004e8960ba1854f6e9e50b60a19e50814712aa63509\",\"evidence_url\":\"https://zambo.dev/api/evidence/587b217c8f4bca132c1af004e8960ba1854f6e9e50b60a19e50814712aa63509\",\"output_sha256\":\"sha256:a1c44bb3ea3068d8239fced5380fc1d85c9abc88890f3cfd6ab950f8abb8db62\",\"receipt_uuid\":\"7887b119-99e7-440d-98b1-581ba2947040\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-27T11:10:08.689Z","detail":"The receipt store reports 2026-10-27T11:10:08.689Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:a1c44bb3ea3068d8239fced5380fc1d85c9abc88890f3cfd6ab950f8abb8db62","computed_hash":"sha256:a1c44bb3ea3068d8239fced5380fc1d85c9abc88890f3cfd6ab950f8abb8db62","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}