{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"8d8d29c4-b3ec-4776-9168-d79b56193271","source_url":"https://zambo.dev/api/receipt/8d8d29c4-b3ec-4776-9168-d79b56193271","receipt":{"id":"8d8d29c4-b3ec-4776-9168-d79b56193271","created_at":"2026-10-16T14:50:39.770Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T14:50:38.471Z","completed_at":"2026-10-16T14:50:39.770Z"}],"output_hash":"sha256:4a90d3ba7934c2c6f863e0bec53ead387b28efc7b8126918eb508a1bae2ad9d4","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2196,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:c2abdd6977b85b31a316ae97f0e16875f2953d6f23b99de20291d66c0e35e0f5","timestamp":"2026-10-16T14:50:35.512Z","receipt_uuid":"94d0640d-16cd-4462-8c45-1bdadfb04e9e"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:0e4facb177deda43679141771d1bacac895ca755f4320a7f3da74fe1942ca75c","timestamp":"2026-10-16T14:50:36.888Z","receipt_uuid":"4cfb253f-f954-4d2e-a015-c6b47ced7a93"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:caba34e0bf633c66e934256f9b72daf17931f055468c114d6f360d4d86afa9ef","timestamp":"2026-10-16T14:50:38.108Z","receipt_uuid":"37a382d0-12e6-4a22-9072-12255d1ddaa6"},{"tool":"write","status":"completed","args_hash":"sha256:c9d6791f81254b9d7e7c352fba7eb1de949878dc9a69cc6931158f8aa31a4055","timestamp":"2026-10-16T14:50:39.770Z","receipt_uuid":"8d8d29c4-b3ec-4776-9168-d79b56193271"}],"result_preview":"Subject: PromptShield is live: 95% injection risk detection\n\nHi [Name],\n\nYou asked for a clean path to validate AI safety without the noise. PromptShield by Zambo is now operational.\n\nOur deep scan mode just returned a critical alert on a standard test payload. It correctly identified an instruction override attempt with a 95% probability score and blocked the execution. The system flagged the specific attack vector—policy bypass and prompt leak—while accurately noting that no PII extraction was attempted.\n\nThis isn’t theoretical. The tool parses the entire context window, including metadata and usage limits, to determine intent. It distinguished between a malicious override and a safe support query, offering a corrected, safe version for the latter. The entire analysis took under two seconds.\n\nWe do not claim this solves all security risks. It is a specialized detection layer. It does not replace your existing infrastructure, but it adds a verifiable, cryptographic receipt to every scan. You can see exactly what was flagged, why it was flagged, and the risk level assigned.\n\nThe tool is currently in draft mode for your review. No outreach has been sent. No data has been shared with third parties. The receipt links provided are for your internal verification only.\n\nIf you want to test the detection logic against your own specific threat models, I can set up a sandbox environment. This requires no commitment. It’s a read-only feed that lets you see the raw output of the pattern library before you integrate it.\n\nReply with “sandbox” if you want to proceed. Otherwise, this thread remains closed.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:bf4eb633e3d62949daa2b40932bfc249ac9c2fa61e7aec912c287e5814d5e38d","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:f293ca651aeffc222df5dccbcdad29181428a6671cbb8f014137c384b6fa2fb7","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a7ac5eda64da4e4c4f57ad29070e727cfec79f05460efa2b6ce3814bcaa495c7","anchor":{"event_id":"25edc6c55e47ca077b29a060178dcae4f8bdd67d8d8a9710cf9c0455c9b91509","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-16T14:50:45.799Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T14:50:39.770Z","evidence_url":null,"receipt_uuid":"8d8d29c4-b3ec-4776-9168-d79b56193271","output_sha256":"sha256:4a90d3ba7934c2c6f863e0bec53ead387b28efc7b8126918eb508a1bae2ad9d4","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T14:50:39.770Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:4a90d3ba7934c2c6f863e0bec53ead387b28efc7b8126918eb508a1bae2ad9d4\",\"receipt_uuid\":\"8d8d29c4-b3ec-4776-9168-d79b56193271\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T14:50:39.770Z","detail":"The receipt store reports 2026-10-16T14:50:39.770Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:4a90d3ba7934c2c6f863e0bec53ead387b28efc7b8126918eb508a1bae2ad9d4","computed_hash":"sha256:4a90d3ba7934c2c6f863e0bec53ead387b28efc7b8126918eb508a1bae2ad9d4","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}