{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"91fdbed2-b545-4e2d-b118-ecb2585f5111","source_url":"https://zambo.dev/api/receipt/91fdbed2-b545-4e2d-b118-ecb2585f5111","receipt":{"id":"91fdbed2-b545-4e2d-b118-ecb2585f5111","created_at":"2026-09-27T13:10:45.018Z","receipt_schema_version":"0.3","job_summary":"MCP tool execution: contract_scan","tools":["contract_scan"],"steps":[{"tool":"contract_scan","status":"success","started_at":"2026-09-27T13:10:42.261Z","completed_at":"2026-09-27T13:10:45.006Z"}],"output_hash":"sha256:53481ec188dc0a04e6f24fde4666ad74494816c759282d39833c935542042bab","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2884,"verification_status":"legacy_receipt","session_trail":[],"result_preview":"{\"risk_level\":\"high\",\"red_flags\":[{\"clause\":\"Party A shall deliver software by December 1, 2026.\",\"issue\":\"The definition of 'deliver' is undefined. It is unclear if this means source code transfer, deployment to a server, or passing acceptance tests. This ambiguity can lead to disputes over whether the obligation has been met.\",\"severity\":\"high\",\"suggested_fix\":\"Define 'Delivery' explicitly, e.g., 'Delivery means the transfer of all source code, documentation, and successful execution of the Acceptance Test Plan in the production environment.'\"},{\"clause\":\"Failure to deliver incurs a 10% penalty per week.\",\"issue\":\"The penalty is uncapped and lacks a base value definition (10% of what? Contract value? Remaining balance?). A 10% weekly penalty can quickly exceed the total contract value, creating a disproportionate liability that may be deemed unenforceable or financially ruinous.\",\"severity\":\"critical\",\"suggested_fix\":\"Cap the total penalty at a reasonable percentage (e.g., 10-20% of the total contract value) and clarify the base amount for the calculation. Add a clause stating that the penalty is the sole and exclusive remedy for delay.\"}],\"negotiation_points\":[\"Request a clear definition of 'Delivery' including acceptance criteria.\",\"Negotiate a cap on the total liquidated damages to prevent unlimited liability.\",\"Clarify the base amount for the 10% penalty calculation.\",\"Add a force majeure clause to exclude delays caused by events beyond Party A's control.\"],\"plain_english_summary\":\"You agree to hand over software by December 1, 2026. If you are late, you must pay a fine of 10% for every week you are late. The contract does not say what 'hand over' means or how much the 10% is based on, and there is no limit to how much you might have to pay if you are very late.\",\"what_you_can_push_back_on\":[\"The lack of a cap on the penalty fee.\",\"The undefined base value for the penalty calculation.\",\"The vague definition of 'deliver'.\"],\"overall_verdict\":\"Do not sign as is. The penalty clause is structurally dangerous due to the lack of a cap and undefined base, and the delivery obligation is too vague to be enforceable in your favor. Significant revisions are required to mitigate financial and legal exposure.\",\"disclaimer\":\"AI analysis — not legal advice. Consult a lawyer for binding decisions.\"}\n\n$0.99 Day Pass · 24h access · USDC on Base — activate with day_pass_activate.","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"contract_scan","version":"4.0.0","scope":"public"},"caller":{"type":"anonymous","id":"sha256:462e58a7c71e2908382513a2b3aa6526ad882e315da5746728c943130aea6da4"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":null,"anchor":{"event_id":"5dd728e9dff4af40fbcea08018522aa1d2df2c063c7164d2b2f4ac39dfca0a9e","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"pending","published_at":null,"schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-09-27T13:10:45.006Z","evidence_url":null,"receipt_uuid":"91fdbed2-b545-4e2d-b118-ecb2585f5111","output_sha256":"sha256:53481ec188dc0a04e6f24fde4666ad74494816c759282d39833c935542042bab","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-09-27T13:10:45.006Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:53481ec188dc0a04e6f24fde4666ad74494816c759282d39833c935542042bab\",\"receipt_uuid\":\"91fdbed2-b545-4e2d-b118-ecb2585f5111\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"legacy","passed":false,"detail":"legacy receipt, provenance not cryptographically bound"},"metadata_binding":{"label":"AER-1 metadata hash","status":"legacy","passed":false,"detail":"legacy receipt, metadata is not cryptographically bound"},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-09-27T13:10:45.018Z","detail":"The receipt store reports 2026-09-27T13:10:45.018Z; immutability is not checked here."},"receipt_schema_version":"0.3","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}}},"verification_status":"legacy_receipt","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:53481ec188dc0a04e6f24fde4666ad74494816c759282d39833c935542042bab","computed_hash":"sha256:53481ec188dc0a04e6f24fde4666ad74494816c759282d39833c935542042bab","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"legacy","passed":false,"detail":"legacy receipt, provenance not cryptographically bound"},"metadata_binding":{"label":"AER-1 metadata hash","status":"legacy","passed":false,"detail":"legacy receipt, metadata is not cryptographically bound"},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}