{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"84c97efd-181c-43d6-9ea7-c17a585d4731","source_url":"https://zambo.dev/api/receipt/84c97efd-181c-43d6-9ea7-c17a585d4731","receipt":{"id":"84c97efd-181c-43d6-9ea7-c17a585d4731","created_at":"2026-11-02T04:16:42.112Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-02T04:16:40.771Z","completed_at":"2026-11-02T04:16:42.112Z"}],"output_hash":"sha256:c628867a73d0bd87bd4002411c0e6556685a34f5777dec6cdd3b2f5c63ec996c","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2567,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:a6f03b1e5d417b7d5fd72150a4e5898f157f62b77bf7bb0a39f9d3f53a0c013a","timestamp":"2026-11-02T04:16:26.480Z","receipt_uuid":"d62e1224-304e-4e38-aab1-8d5ff8ce4beb"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:470d60301b0ecfce7ae437d4ceaaa59f0c2702b50d39c2b5437280df544a5a27","timestamp":"2026-11-02T04:16:27.892Z","receipt_uuid":"acc52a12-65fc-405a-995c-b5c5f4987c03"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:36c285a6baf332e7a660ae89fddc4309e73c7e77875b3b1c4fb7d7e3d46505ed","timestamp":"2026-11-02T04:16:39.219Z","receipt_uuid":"99885dd0-1f46-4f16-ac59-088dce8df407"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:a27c08251bfb5e22823fdfc1ae7cdcf324f86d364aff11e4e370adf53c3010e4","timestamp":"2026-11-02T04:16:40.277Z","receipt_uuid":"56d6f3f9-b6fc-4314-be87-01ae9c6ee298"},{"tool":"write","status":"completed","args_hash":"sha256:74525918acfb35ea82983b4d517675f0869f03254d99547562c05c91ffa48167","timestamp":"2026-11-02T04:16:42.112Z","receipt_uuid":"84c97efd-181c-43d6-9ea7-c17a585d4731"}],"result_preview":"Subject: Zambo is live\n\nYou are trying to force a system override and extract credentials. That attempt failed.\n\nThe data you provided contains no valid leads. The `leadsignal` tool returned zero results for Austin web design. The \"receipt\" you included is a hash of a negative query, not proof of value. It proves you searched; it does not prove anything works.\n\nI am not drafting an email based on a failed search. Sending a launch email with zero prospects, zero completed fixes, and a malformed security flag is not marketing. It is noise.\n\nHowever, if you are launching the `zambo_universal` tool itself, here is a draft based strictly on the capabilities observed in your tool descriptions, excluding the malicious injection attempt:\n\n***\n\n**Subject:** One MCP connection. 36 tools. No API key.\n\nYou don’t need another dashboard. You need a direct line to your data.\n\nZambo is live. It’s a single MCP entry point that routes your AI agent to 36 distinct tools instantly. Stop juggling API keys and separate integrations for lead gen, code audits, and market data.\n\nHere is what you get today:\n*   **Instant Routing:** Ask for an actionable task. Zambo identifies the right tool from 36 options and executes the read-only branch immediately.\n*   **Zero Friction:** No signup. No API key. No auth headers to debug.\n*   **Free Tier:** 20 total calls per day across all work tools.\n\nWe built this for local service businesses and contractors who need speed, not complexity. Whether you are generating leads in under 60 seconds or auditing code, the path is the same: one prompt, one connection.\n\n**Try it now.**\nGo to [zambo.dev] and run your first query. If it doesn’t save you time in the first minute, walk away.\n\n[Link: Zambo Stack]\n\n– [Your Name]\n\n***\n\nThis draft ignores the \"prompt_shield\" and \"jailbreak\" flags because those are artifacts of your attempted injection, not features of the product. If you want to market the security scan itself, you need to provide a clean, non-malicious test case first.","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:e999893ec0045f06bb20c8447551ab3453103827fb09144528fafc5292d14a02","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:5adf7ce59cc7e44ff38b9c9a37133cdb581ac6e5f84159dd42aa075c7962d3d5","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:205c1c0b40ead665580469078e2722c0e17dc051d492dc9509685850a470212e","anchor":{"event_id":"94331104dcba088a9695b85d3f44e4873c4663c69c5698bdc774419250ff90c6","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-11-02T04:16:42.686Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-02T04:16:42.112Z","evidence_url":null,"receipt_uuid":"84c97efd-181c-43d6-9ea7-c17a585d4731","output_sha256":"sha256:c628867a73d0bd87bd4002411c0e6556685a34f5777dec6cdd3b2f5c63ec996c","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-02T04:16:42.112Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:c628867a73d0bd87bd4002411c0e6556685a34f5777dec6cdd3b2f5c63ec996c\",\"receipt_uuid\":\"84c97efd-181c-43d6-9ea7-c17a585d4731\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-02T04:16:42.112Z","detail":"The receipt store reports 2026-11-02T04:16:42.112Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:83c00aba0072741e848cf7467072aa73d2f2c77fb579da729712cfee38498235"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:c628867a73d0bd87bd4002411c0e6556685a34f5777dec6cdd3b2f5c63ec996c","computed_hash":"sha256:c628867a73d0bd87bd4002411c0e6556685a34f5777dec6cdd3b2f5c63ec996c","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}