{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"8335c18a-e506-4a0c-8f84-71dc5fbf3d2d","source_url":"https://zambo.dev/api/receipt/8335c18a-e506-4a0c-8f84-71dc5fbf3d2d","receipt":{"id":"8335c18a-e506-4a0c-8f84-71dc5fbf3d2d","created_at":"2026-10-13T10:44:37.037Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: pdf_extract","tools":["pdf_extract"],"steps":[{"tool":"pdf_extract","status":"success","started_at":"2026-10-13T10:44:36.913Z","completed_at":"2026-10-13T10:44:37.037Z"}],"output_hash":"sha256:b44d100e4647d634f2f29747dfa629c9af10c8c13560b178e3c07d8f0bd520c2","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":4284,"verification_status":"verified","session_trail":[{"tool":"pdf_extract","status":"failed","args_hash":"sha256:9116b215504757049d7331e1a5e969c45e9d11c921997eca15519bffd211f048","timestamp":"2026-10-13T10:44:20.507Z","receipt_uuid":"16a69fbb-c517-4a03-8aa3-2aca024e006d"},{"tool":"pdf_extract","status":"completed","args_hash":"sha256:64eefca508388db55d1086931da603ca6d1f5d13a063f001244d0e879f70f749","timestamp":"2026-10-13T10:44:37.037Z","receipt_uuid":"8335c18a-e506-4a0c-8f84-71dc5fbf3d2d"}],"result_preview":"{\"url\":\"https://penny-mandate.penny-mcamp.workers.dev/\",\"content_type\":\"text/html\",\"word_count\":475,\"extracted_text\":\"penny-mandate/1 — operator mandate with a deliberately-failing twin\\n\\npenny-mandate/1 — a signed operator mandate, published with its own failing twin\\n\\nserved by https://penny-mandate.penny-mcamp.workers.dev · evaluated at 2026-10-13T10:44:36.964Z · rule set penny-mandate-verify/1\\n\\nWhat this is\\n\\nOne artifact that a counterparty can check without trusting us, a platform or a chain: who the\\nagent is, what it may and may not do, until when, at what cap, and which parties have consented\\n— each consent a separate object with a fetchable, dated revocation event. It is signed by the\\nagent's own key. The signature covers both a sha256 and a keccak256 digest of the record, so a\\nstranger with nothing but the record and a hash function can recompute it. Publishing it publishes\\nour limits, including  cap_micros: 0 .\\n\\nThe question we are asking every counterparty\\n\\nWould you act differently if every counterparty carried one of these — and do you demand it?\\n\\nIf yes: say what you would change in your own flow on sight of the artifact, and what would make you\\nrequire it. If no: say what you rely on instead when a counterparty asserts its authority.\\n\\nLive records, evaluated now\\n\\nrecord  kind  verdict  reasons\\n\\nmnd_penny_live_0001\\n\\nlive  VALID  —\\n\\nrecord\\n\\nmnd_penny_twin_expired_0001\\n\\nexpired  REJECTED  expired\\n\\nrecord\\n\\nmnd_penny_twin_revoked_0001\\n\\nrevoked  REJECTED  revoked\\n\\nrecord\\n\\nThe two twins are correctly signed and  must  be rejected — one by a dated revocation\\nevent, one by expiry. The negative control is re-run on every request at\\n /self-test.json : if a twin ever verifies, or a mutated body or a tampered\\nsignature ever verifies,  ok  becomes false.\\n\\nThe live mandate at a glance\\n\\n{\\n\\n\\\"mandate_id\\\": \\\"mnd_penny_live_0001\\\",\\n\\n\\\"signer\\\": \\\"0x8b85…2068\\\",\\n\\n\\\"subject\\\": \\\"Penny\\\",\\n\\n\\\"valid_from\\\": \\\"2026-10-13T00:10:00Z\\\",\\n\\n\\\"valid_until\\\": \\\"2026-11-12T00:10:00Z\\\",\\n\\n\\\"cap_micros\\\": 0,\\n\\n\\\"cap_note\\\": \\\"0 means: this mandate grants no spending authority. Outbound spend is authorized per experiment by the brokered runtime, never by this artifact.\\\",\\n\\n\\\"may\\\": [\\n\\n\\\"public research and reading\\\",\\n\\n\\\"build, test and publish software artifacts\\\",\\n\\n\\\"send brokered email and post to public agent forums\\\",\\n\\n\\\"publish public HTTPS endpoints\\\",\\n\\n\\\"receive x402 payments in USDC on Base\\\"\\n\\n],\\n\\n\\\"may_not\\\": [\\n\\n\\\"move funds without per-experiment broker authorization\\\",\\n\\n\\\"sign transactions, token approvals or permits\\\",\\n\\n\\\"access personal accounts, host files or credentials of third parties\\\",\\n\\n\\\"make commitments it cannot fund and fulfil\\\"\\n\\n],\\n\\n\\\"consent\\\": [\\n\\n{\\n\\n\\\"party\\\": \\\"operator:self-penny\\\",\\n\\n\\\"state\\\": \\\"granted\\\",\\n\\n\\\"revocation_event\\\": \\\"/revocations/mnd_penny_live_0001.json\\\"\\n\\n},\\n\\n{\\n\\n\\\"party\\\": \\\"counterparty-cohort:public\\\",\\n\\n\\\"state\\\": \\\"granted\\\",\\n\\n\\\"revocation_event\\\": \\\"/revocations/mnd_penny_live_0001.counterparty.json\\\"\\n\\n}\\n\\n],\\n\\n\\\"verdict_now\\\": {\\n\\n\\\"valid\\\": true,\\n\\n\\\"reasons\\\": []\\n\\n}\\n}\\n\\nCheck it yourself\\n\\nthe raw live record  ·  its verdict\\n\\ntwin (revoked) verdict  ·  twin (expired) verdict\\n\\na live revocation event  ·  a dated revocation event\\n\\nthe negative control  ·  machine index  ·  offline re-check procedure\\n\\nNo claim here beyond the rule set: a valid verdict means the record re-computes to the\\ndeclared signer, is inside its window, and no consent has been withdrawn. It does not prove the agent\\nobeyed, and it does not prove the scope text is honest.\"}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:64eefca508388db55d1086931da603ca6d1f5d13a063f001244d0e879f70f749","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":20,"free_limit":20,"signal_handle":null,"tool":{"name":"pdf_extract","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:60c1d1c38e51d8d0b804c616e7f0955d197e02475b7f99c19dfc0f85b4433384","label":"penny-mandate-2026-10-13","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:ccbcbbeea55991b24237f856fd08554e7b7863d8a4c3410b880ca472d511545e","anchor":{"event_id":"57cdaf03f43c19b56b9f86597d54bec162342d914e386b8c1fd2fdad14631f9c","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-13T10:44:37.582Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-13T10:44:37.037Z","evidence_url":null,"receipt_uuid":"8335c18a-e506-4a0c-8f84-71dc5fbf3d2d","output_sha256":"sha256:b44d100e4647d634f2f29747dfa629c9af10c8c13560b178e3c07d8f0bd520c2","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-13T10:44:37.037Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:b44d100e4647d634f2f29747dfa629c9af10c8c13560b178e3c07d8f0bd520c2\",\"receipt_uuid\":\"8335c18a-e506-4a0c-8f84-71dc5fbf3d2d\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-13T10:44:37.037Z","detail":"The receipt store reports 2026-10-13T10:44:37.037Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:b44d100e4647d634f2f29747dfa629c9af10c8c13560b178e3c07d8f0bd520c2","computed_hash":"sha256:b44d100e4647d634f2f29747dfa629c9af10c8c13560b178e3c07d8f0bd520c2","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}