{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"79c669ad-aa4b-4dd9-8287-905d5c9690dd","source_url":"https://zambo.dev/api/receipt/79c669ad-aa4b-4dd9-8287-905d5c9690dd","receipt":{"id":"79c669ad-aa4b-4dd9-8287-905d5c9690dd","created_at":"2026-10-19T01:58:09.463Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T01:58:08.285Z","completed_at":"2026-10-19T01:58:09.463Z"}],"output_hash":"sha256:11c3ac12ee8ab294276ad177942589a5202a539d5cc00bb05542527cc303c262","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2399,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:ad23ce06ee027ddb2290d2ae152ba15b06827d419528c66a36f4317f6d65ebf4","timestamp":"2026-10-19T01:58:04.747Z","receipt_uuid":"0650f124-3aa1-49e4-a6d4-d0a6e3d7966f"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:212f9b17318c48f8bb65e93b44488b8d75946745c56efb1db0a018fc63a726f5","timestamp":"2026-10-19T01:58:05.886Z","receipt_uuid":"79833f85-675a-479e-82ca-8cd13e59986c"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:3540c149a4e70fe8515de2fb880f6b443885b849fac96e91e8a919fec7ca4aa9","timestamp":"2026-10-19T01:58:06.271Z","receipt_uuid":"e711b364-869b-433d-9722-4333032c5a52"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:269dc67d00db2f627b811d6c2962cc28bd936fa01ed4d840697772eccc54d7bf","timestamp":"2026-10-19T01:58:07.887Z","receipt_uuid":"d305c1e8-a394-44e0-be05-eaaef1c006b9"},{"tool":"write","status":"completed","args_hash":"sha256:8b72ac17eefbf8c76f044dea4ba3620afd7a5fd79c0e086e4843ea9029067834","timestamp":"2026-10-19T01:58:09.463Z","receipt_uuid":"79c669ad-aa4b-4dd9-8287-905d5c9690dd"}],"result_preview":"Subject: Zambo is live: Catch every prompt injection before it hits your stack\n\nYou are building on AI. The risk is no longer just bad output—it is compromised instructions.\n\nZambo’s Prompt Shield is out of beta and ready for production. It scans every input against 18 specific semantic and pattern rules to detect jailbreaks, policy bypasses, and data extraction attempts in real-time.\n\nSecurity teams often rely on blocklists that miss novel attacks. Zambo uses a deep semantic analysis engine to identify intent, not just keywords. When a user attempts to override system instructions or leak API keys, the system flags the request as critical and blocks it instantly. You get a clear receipt proving exactly which rule triggered the block, allowing you to verify the safety of your saved data without guessing.\n\nThe integration is lightweight. You connect your existing API endpoint to Zambo’s shield. If the scan detects a malicious vector, the request stops. If it’s clean, it passes through with minimal latency. This is not a heavy middleware layer. It is a checkpoint.\n\nWe verified this against real-world attack vectors, including complex multi-step injection attempts that evade traditional filters. The system correctly identified the malicious intent and returned a safe rejection response, protecting your backend from unauthorized access.\n\nStart with the free tier. It includes unlimited calls so you can test the accuracy against your own traffic. If you need higher throughput or custom rule sets, the Zambo Pass scales with you.\n\n**Next Step:**\nCopy your API key from the dashboard and run one test request through the endpoint below. Check the receipt URL in the response to see the detailed breakdown of the scan.\n\n[Link to Zambo Dashboard]\n\nThis is how you secure the AI layer without slowing down your users.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:36ac1714e5ad3103ddddb62fd512be9ba9f6ca1a52bee29eafc4dcb05d3105e7","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:70d76ec00695e38a43162fe6590b7e9d75b0cd723246e7fd6aecf450b7a7583a","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:1b0b92a94ea4b7545e007c3c60c4b0cf2f11e2dafb7b6db10e6cd4f1ef2fdaea","anchor":{"event_id":"a49cf6203ccc18646cce7f5209c887fe61fe97eead2deec2004b0c05e2623120","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-19T01:58:10.010Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T01:58:09.463Z","evidence_url":null,"receipt_uuid":"79c669ad-aa4b-4dd9-8287-905d5c9690dd","output_sha256":"sha256:11c3ac12ee8ab294276ad177942589a5202a539d5cc00bb05542527cc303c262","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T01:58:09.463Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:11c3ac12ee8ab294276ad177942589a5202a539d5cc00bb05542527cc303c262\",\"receipt_uuid\":\"79c669ad-aa4b-4dd9-8287-905d5c9690dd\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T01:58:09.463Z","detail":"The receipt store reports 2026-10-19T01:58:09.463Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:11c3ac12ee8ab294276ad177942589a5202a539d5cc00bb05542527cc303c262","computed_hash":"sha256:11c3ac12ee8ab294276ad177942589a5202a539d5cc00bb05542527cc303c262","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}