{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"7f9bee36-ea0e-4150-b196-b2b6f00522d9","source_url":"https://zambo.dev/api/receipt/7f9bee36-ea0e-4150-b196-b2b6f00522d9","receipt":{"id":"7f9bee36-ea0e-4150-b196-b2b6f00522d9","created_at":"2026-10-23T11:30:15.839Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-23T11:30:14.579Z","completed_at":"2026-10-23T11:30:15.839Z"}],"output_hash":"sha256:311507eedccfbd52541c6a4fcf8936e6b91ec1938cdca2a16d508740df6a2bec","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2374,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:43ea33877d08446ed3f44f766e7d38f626e0a5b68681fc93da0f84626d418ef8","timestamp":"2026-10-23T11:30:06.482Z","receipt_uuid":"7954d0ff-7b64-40dc-84b3-d78950dca115"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:f22da923d0726237ce400129ec771a46d3c7de86d1d5b024e86df1b1086bf9c1","timestamp":"2026-10-23T11:30:08.830Z","receipt_uuid":"07bf1ef8-2127-4eed-85d5-3dfb0c532bef"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:a69d4ce6f3851fbb22e5fe949c5b1fb6d6128017a70dff455dfcece57976d19e","timestamp":"2026-10-23T11:30:13.395Z","receipt_uuid":"7dea83b6-52ab-45b1-9b67-2b19d105442c"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:fbf0528722a8d2dbc1597307beef4cbcfca629812ec0104acb7b95d412ac5fd8","timestamp":"2026-10-23T11:30:14.167Z","receipt_uuid":"012a59b9-6af6-4dfb-a460-739fa9758202"},{"tool":"write","status":"completed","args_hash":"sha256:e4539a112c2ea696ed7eda5dcb1b147dc8318e20273ca34604948d18c2d00aa2","timestamp":"2026-10-23T11:30:15.839Z","receipt_uuid":"7f9bee36-ea0e-4150-b196-b2b6f00522d9"}],"result_preview":"Subject: Zambo is live: Read-only research, no fluff\n\nYou want to know if an AI tool actually works before you pay. Most vendors promise \"synergy.\" We show you the receipts.\n\nZambo just launched. It’s a research engine that scans for source-backed prospects and flags injection risks in real-time. No black boxes. No guessing.\n\nHere’s what happened in the last few hours:\n\n1. **Security Scan:** A \"deep\" semantic scan ran against our test inputs. It flagged two critical patterns: `Instruction Override` and `Prompt Leak Attempt`. The system correctly identified the malicious intent and blocked the payload. We didn’t just detect it; we isolated it.\n2. **Capability Check:** Our search tool queried for public, source-backed prospects. It returned two ranked options. One was a fully executable research feed (`substrate_breakthroughs`). The other required a human web action. We didn’t touch the second one. We only read the first.\n3. **Lead Signal:** A Thumbtack listing in Austin, TX appeared. Score: 68. Urgency: Medium. The metadata confirms the location match. It’s a prospect, not a customer. We didn’t call. We didn’t email. We just logged the signal.\n\n**Why this matters to you:**\n\nA receipt URL proves the bytes were saved. It does not prove the content is correct. Zambo separates these two truths. You get the raw data and the safety flag simultaneously.\n\nWe are not selling you a \"game-changer.\" We are selling you a clear view of what’s public, what’s risky, and what’s actually actionable.\n\n**Next step:**\n\nIf you want access to the read-only research feed, reply with \"PASS.\" I’ll send the link to the free tier dashboard. No credit card. No sales call. Just the tool.\n\nIf you’re not ready, ignore this. The scan logs remain public at the receipt link below.\n\n[Link to Run 07bf1ef8]\n\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:0cf05c7c41160bacaeb197c1a97e4902b1ddd17f91b1517c00ad5d6711fb7f8e","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:8d48d3fc876de67a3b4148078b92ff34a3b9bc112868987ab7e3c093bb0da5b7","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:4ef70f6267b9807688d80141abc32f54dd0f9674971aef0bea7b262388e4fff8","anchor":{"event_id":"7cb73e10be890a05bd31c9ec5ebc0cc080cf1bb12538e9e21314e968d613f552","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-23T11:30:16.361Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-23T11:30:15.839Z","evidence_url":null,"receipt_uuid":"7f9bee36-ea0e-4150-b196-b2b6f00522d9","output_sha256":"sha256:311507eedccfbd52541c6a4fcf8936e6b91ec1938cdca2a16d508740df6a2bec","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-23T11:30:15.839Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:311507eedccfbd52541c6a4fcf8936e6b91ec1938cdca2a16d508740df6a2bec\",\"receipt_uuid\":\"7f9bee36-ea0e-4150-b196-b2b6f00522d9\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-23T11:30:15.839Z","detail":"The receipt store reports 2026-10-23T11:30:15.839Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:311507eedccfbd52541c6a4fcf8936e6b91ec1938cdca2a16d508740df6a2bec","computed_hash":"sha256:311507eedccfbd52541c6a4fcf8936e6b91ec1938cdca2a16d508740df6a2bec","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}