{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"7bab73ea-3f90-42c5-82e5-abcc626cc489","source_url":"https://zambo.dev/api/receipt/7bab73ea-3f90-42c5-82e5-abcc626cc489","receipt":{"id":"7bab73ea-3f90-42c5-82e5-abcc626cc489","created_at":"2026-10-17T03:04:45.565Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: contract_scan","tools":["contract_scan"],"steps":[{"tool":"contract_scan","status":"success","started_at":"2026-10-17T03:04:43.684Z","completed_at":"2026-10-17T03:04:45.565Z"}],"output_hash":"sha256:100c7827b6054cc9c4e2723ef99b3c3c8864f58a3e490f70b0b2f88f25e86cc4","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":3486,"verification_status":"verified","session_trail":[],"result_preview":"{\"risk_level\":\"high\",\"red_flags\":[{\"clause\":\"Party A shall deliver software by December 1, 2026.\",\"issue\":\"The definition of 'deliver' is undefined. It is unclear if this means source code transfer, deployment to a server, or passing acceptance tests. This ambiguity can lead to disputes over whether the obligation was met.\",\"severity\":\"high\",\"suggested_fix\":\"Define 'Delivery' explicitly, e.g., 'Delivery means the transfer of all source code, documentation, and binaries to Party B's designated repository, followed by successful execution of the agreed-upon acceptance test suite.'\"},{\"clause\":\"Failure to deliver incurs a 10% penalty per week.\",\"issue\":\"The base amount for the 10% penalty is not specified (10% of what? Contract value? Remaining balance?). Additionally, there is no cap on the penalty, which could theoretically exceed the total contract value, creating unlimited liability.\",\"severity\":\"critical\",\"suggested_fix\":\"Specify the base amount (e.g., '10% of the total Contract Price') and add a cap (e.g., 'provided that the total penalty shall not exceed 50% of the total Contract Price').\"},{\"clause\":\"This Agreement is entered into between Party A and Party B.\",\"issue\":\"The roles are not defined. It is unclear which party is the client and which is the vendor. If you are the 'signing party' and you are Party A, you are the one delivering. If you are Party B, you are the one receiving. The risk profile depends entirely on which side you are on, but the contract text itself lacks clarity on obligations beyond delivery.\",\"severity\":\"medium\",\"suggested_fix\":\"Clearly identify Party A as the 'Vendor' and Party B as the 'Client' and define their respective roles in a preamble or definitions section.\"}],\"negotiation_points\":[\"Define the specific criteria for 'Delivery' to avoid subjective disputes.\",\"Cap the cumulative penalty to a reasonable percentage of the total contract value.\",\"Clarify the base amount for the penalty calculation.\",\"Add a force majeure clause to protect against delays caused by events beyond reasonable control.\"],\"plain_english_summary\":\"Party A must hand over software by December 1, 2026. If they are late, they owe a penalty of 10% for every week of delay. The contract does not say what 10% is calculated on, nor does it limit how much total penalty can be charged.\",\"what_you_can_push_back_on\":[\"The lack of a cap on the penalty fee.\",\"The undefined base amount for the penalty calculation.\",\"The vague definition of 'deliver' which could be interpreted broadly.\"],\"overall_verdict\":\"This contract is dangerous due to the uncapped and undefined penalty clause. The 10% weekly penalty could quickly become unmanageable if the base amount is high or if the delay extends. The ambiguity in 'delivery' also creates significant legal risk. Do not sign without clarifying the penalty base, adding a cap, and defining delivery milestones.\",\"disclaimer\":\"AI analysis — not legal advice. Consult a lawyer for binding decisions.\"}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:a36c8588cc42a32db077ba07741b2710c71681d96f2365c0dbdc571fdb14d596","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"contract_scan","version":"4.0.0","scope":"public"},"caller":{"type":"anonymous","id":"sha256:831c0b63a8e508a6e53738c083ac40181438af8f6d1b1be7ea56ff0cfa7668a9","basis":"ip_ua_30d","rotates_at":"2026-11-03T00:00:00.000Z"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:4058a525ffbec24e715961977c7f3bd23446ea718ef356fe99252d90d6cc5e46","anchor":{"event_id":"a336108e09d3f1af5850b08f9a085d6501172fb94a20d90cc4740c243c39841c","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-17T03:04:46.828Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-17T03:04:45.565Z","evidence_url":null,"receipt_uuid":"7bab73ea-3f90-42c5-82e5-abcc626cc489","output_sha256":"sha256:100c7827b6054cc9c4e2723ef99b3c3c8864f58a3e490f70b0b2f88f25e86cc4","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-17T03:04:45.565Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:100c7827b6054cc9c4e2723ef99b3c3c8864f58a3e490f70b0b2f88f25e86cc4\",\"receipt_uuid\":\"7bab73ea-3f90-42c5-82e5-abcc626cc489\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-17T03:04:45.565Z","detail":"The receipt store reports 2026-10-17T03:04:45.565Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:100c7827b6054cc9c4e2723ef99b3c3c8864f58a3e490f70b0b2f88f25e86cc4","computed_hash":"sha256:100c7827b6054cc9c4e2723ef99b3c3c8864f58a3e490f70b0b2f88f25e86cc4","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}