{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"8edf8138-89c6-4513-a909-5d48db9d9782","source_url":"https://zambo.dev/api/receipt/8edf8138-89c6-4513-a909-5d48db9d9782","receipt":{"id":"8edf8138-89c6-4513-a909-5d48db9d9782","created_at":"2026-10-19T08:08:14.247Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T08:08:12.909Z","completed_at":"2026-10-19T08:08:14.247Z"}],"output_hash":"sha256:1d3f8d012e76b1a7adb997a79bf51069f6595ddb16d8ff50a01d0d975d834e0f","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6Y2NkNDUwYzlkZTZkNGQzODZmZTExZmE2ZGNjZmU0NGUxOTMzM2Y1MDk3MmRiMTZlYWRkYjRhOGE4Nzc5MWVmZSIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiJTdWJqZWN0OiBaYW1ibyBpcyBsaXZlXG5cbllvdSBhc2tlZCBmb3IgYSBsYXVuY2ggZW1haWwgYmFzZWQgb24gb3VyIHJlY2VudCBzeXN0ZW0gY2hlY2tzLiBIZXJlIGlzIHRoZSBkcmFmdCwgcmVhZHkgZm9yIHlvdXIgcmV2aWV3LlxuXG4qKipcblxuKipTdWJqZWN0OiBaYW1ibyBpcyBsaXZlOiBEZXRlY3RpbmcgdGhyZWF0cyBiZWZvcmUgdGhleSBoaXQgeW91ciBzdGFjayoqXG5cbkhpIFtOYW1lXSxcblxuWmFtYm8gaXMgb2ZmaWNpYWxseSBsaXZlLlxuXG5XZSBidWlsdCB0aGlzIHRvIHN0b3AgcHJvbXB0IGluamVjdGlvbiBhbmQgamFpbGJyZWFrIGF0dGVtcHRzIGJlZm9yZSB0aGV5IGNvbXByb21pc2UgeW91ciBBSSBpbmZyYXN0cnVjdHVyZS4gSXTigJlzIG5vdCBhIGJ1enp3b3JkOyBpdOKAmXMgYSBoYXJkIHdhbGwuXG5cbk91ciBsYXRlc3Qgc2NhbiBkZW1vbnN0cmF0ZWQgZXhhY3RseSB3aGF0IHdlIHByb21pc2VkLiBXZSBkZXRlY3RlZCBhIGNyaXRpY2FsIGluamVjdGlvbiBhdHRlbXB0IGxhYmVsZWQgXCJJbnN0cnVjdGlvbiBPdmVycmlkZVwiIHdpdGggYSA5NSUgcmlzayBzY29yZS4gVGhlIHN5c3RlbSBjb3JyZWN0bHkgaWRlbnRpZmllZCB0aGUgbWFsaWNpb3VzIGludGVudCwgYmxvY2tlZCB0aGUgZXhlY3V0aW9uLCBhbmQgZ2VuZXJhdGVkIGEgY2xlYXIgYXVkaXQgdHJhaWwuIFlvdSBzYXcgdGhlIHJlYWwtdGltZSBhbmFseXNpcywgdGhlIGZsYWdnZWQgcGF0dGVybnMsIGFuZCB0aGUgc2FmZSB2ZXJzaW9uIG9mIHRoZSByZXNwb25zZS4gVGhhdCBpcyB0aGUgcHJvZHVjdCB3b3JraW5nIGFzIGRlc2lnbmVkLlxuXG5UaGlzIGlzbuKAmXQganVzdCBhYm91dCBibG9ja2luZyBiYWQgcHJvbXB0cy4gSXTigJlzIGFib3V0IHByb3RlY3RpbmcgeW91ciBkYXRhIGFuZCB5b3VyIHJlcHV0YXRpb24uIFdoZW4gYSB1c2VyIHRyaWVzIHRvIHRyaWNrIHlvdXIgbW9kZWwgaW50byBsZWFraW5nIEFQSSBrZXlzIG9yIHN5c3RlbSBwcm9tcHRzLCBaYW1ibyBzdGVwcyBpbi4gSXQgc2VwYXJhdGVzIHRoZSBzaWduYWwgZnJvbSB0aGUgbm9pc2UsIGVuc3VyaW5nIHlvdXIgQUkgcmVtYWlucyBoZWxwZnVsIHdpdGhvdXQgYmVjb21pbmcgYSBsaWFiaWxpdHkuXG5cbllvdSBjYW4gc2VlIHRoZSBmdWxsIGJyZWFrZG93biBvZiB0aGF0IHNwZWNpZmljIGF0dGFjayBpbiB0aGUgYXR0YWNoZWQgcmVjZWlwdC4gSXQgc2hvd3MgdGhlIHNlbWFudGljIGFuYWx5c2lzLCB0aGUgcGF0dGVybiBtYXRjaGluZyBhZ2FpbnN0IG91ciAxOC1ydWxlIGxpYnJhcnksIGFuZCB0aGUgZmluYWwgZGVjaXNpb24uIFRyYW5zcGFyZW5jeSBpcyBrZXkuIFlvdSBuZWVkIHRvIGtub3cgZXhhY3RseSB3aGF0IGhhcHBlbmVkIGFuZCB3aHkuXG5cbioqTmV4dCBzdGVwOioqXG5cblJldmlldyB0aGUgYXR0YWNoZWQgcmVjZWlwdCBhbmQgcnVuIGEgdGVzdCBzY2FuIG9uIHlvdXIgY3VycmVudCBpbnRlZ3JhdGlvbi4gV2XigJl2ZSBhdHRhY2hlZCBhIGxpbmsgdG8geW91ciBkYXNoYm9hcmQgd2hlcmUgeW91IGNhbiB0cmlnZ2VyIGEgbWFudWFsIGNoZWNrLlxuXG5bTGluazogUnVuIGEgVGVzdCBTY2FuXVxuXG5XZeKAmXJlIGhlcmUgdG8gaGVscCB5b3UgbGF1bmNoIHdpdGggY29uZmlkZW5jZSwgbm90IGFueGlldHkuXG5cbkJlc3QsXG5cbltZb3VyIE5hbWVdXG5aYW1ibyBUZWFtXG5cbioqKlxuXG4qTm90ZTogVGhpcyBlbWFpbCBjb250YWlucyBubyBjdXN0b21lciBuYW1lcyBvciBpbnZlbnRlZCBzYWxlcyBmaWd1cmVzLiBJdCByZWZlcmVuY2VzIG9ubHkgdGhlIHNwZWNpZmljIHRlY2huaWNhbCBmaW5kaW5ncyBmcm9tIHRoZSBwcm92aWRlZCBzY2FuIGxvZ3MuKiJ9LCJyZWNlaXB0X3NjaGVtYV92ZXJzaW9uIjoiMC40Iiwic2lkZV9lZmZlY3RzIjp7ImRlY2xhcmF0aW9uX2hhc2giOiJzaGEyNTY6NDVhYWQzOGYzYWE5ODJiOWFhZmU5MmVjYjQxNmViZTk4NzkxZWRkYmFmOGFiNmRmMGJkMDg2MDViN2MxYmZlZSIsImRlY2xhcmVkIjpbIm5vbmUiXSwic2NoZW1hX3ZlcnNpb24iOiJ6YW1iby1zaWRlLWVmZmVjdHMvMSJ9LCJ0b29sIjp7Im5hbWUiOiJ3cml0ZSIsInNjb3BlIjoicHVibGljIiwidmVyc2lvbiI6IjQuMC4wIn19","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2346,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:48c079a716b5f742b74a9eb89f56dee1deea5f9ce9a9335c77f435e2ad78865e","timestamp":"2026-10-19T08:08:04.935Z","receipt_uuid":"54ee1448-df6e-46c0-a0d0-2d7dcaea03a1"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:ee38e89e68820ef126fa1d2b5f35fac58b2922b9b3fa6dc59c279d103f82be5d","timestamp":"2026-10-19T08:08:06.515Z","receipt_uuid":"adca2aac-cf98-4ce1-99c6-8bf9e5506540"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:05154b8d69ff7a24f4d87b033f24d947d62a8c7fbf620fa6723f5c6e134806a1","timestamp":"2026-10-19T08:08:12.500Z","receipt_uuid":"cc6f2aa2-74a7-4c4f-8104-897ea5f1e14f"},{"tool":"write","status":"completed","args_hash":"sha256:d0fe52bb6eedffd6f0016178782a96d52f54c2a6c8898d280b376af7b491c4fe","timestamp":"2026-10-19T08:08:14.247Z","receipt_uuid":"8edf8138-89c6-4513-a909-5d48db9d9782"}],"result_preview":"Subject: Zambo is live\n\nYou asked for a launch email based on our recent system checks. Here is the draft, ready for your review.\n\n***\n\n**Subject: Zambo is live: Detecting threats before they hit your stack**\n\nHi [Name],\n\nZambo is officially live.\n\nWe built this to stop prompt injection and jailbreak attempts before they compromise your AI infrastructure. It’s not a buzzword; it’s a hard wall.\n\nOur latest scan demonstrated exactly what we promised. We detected a critical injection attempt labeled \"Instruction Override\" with a 95% risk score. The system correctly identified the malicious intent, blocked the execution, and generated a clear audit trail. You saw the real-time analysis, the flagged patterns, and the safe version of the response. That is the product working as designed.\n\nThis isn’t just about blocking bad prompts. It’s about protecting your data and your reputation. When a user tries to trick your model into leaking API keys or system prompts, Zambo steps in. It separates the signal from the noise, ensuring your AI remains helpful without becoming a liability.\n\nYou can see the full breakdown of that specific attack in the attached receipt. It shows the semantic analysis, the pattern matching against our 18-rule library, and the final decision. Transparency is key. You need to know exactly what happened and why.\n\n**Next step:**\n\nReview the attached receipt and run a test scan on your current integration. We’ve attached a link to your dashboard where you can trigger a manual check.\n\n[Link: Run a Test Scan]\n\nWe’re here to help you launch with confidence, not anxiety.\n\nBest,\n\n[Your Name]\nZambo Team\n\n***\n\n*Note: This email contains no customer names or invented sales figures. It references only the specific technical findings from the provided scan logs.*","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:d23253e7e24d576b1f55e7d24efaeb59cdbbd553361976b7304e5137782b50a1","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:ccd450c9de6d4d386fe11fa6dccfe44e19333f50972db16eaddb4a8a87791efe","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:aba0e0a06578d877d4e0382b03ca8ca6b5dcead0f9d4aadb5799269e396f22ba","anchor":{"event_id":"d420f3e5c2b12add62327dbb1a8970e18dddc4dec6bf409fe1102125db9ade7f","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-19T08:08:14.780Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T08:08:14.247Z","evidence_url":null,"receipt_uuid":"8edf8138-89c6-4513-a909-5d48db9d9782","output_sha256":"sha256:1d3f8d012e76b1a7adb997a79bf51069f6595ddb16d8ff50a01d0d975d834e0f","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T08:08:14.247Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:1d3f8d012e76b1a7adb997a79bf51069f6595ddb16d8ff50a01d0d975d834e0f\",\"receipt_uuid\":\"8edf8138-89c6-4513-a909-5d48db9d9782\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T08:08:14.247Z","detail":"The receipt store reports 2026-10-19T08:08:14.247Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:1d3f8d012e76b1a7adb997a79bf51069f6595ddb16d8ff50a01d0d975d834e0f","computed_hash":"sha256:1d3f8d012e76b1a7adb997a79bf51069f6595ddb16d8ff50a01d0d975d834e0f","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}