{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"93873cff-70e4-4b91-8920-6bf195bcd9f3","source_url":"https://zambo.dev/api/receipt/93873cff-70e4-4b91-8920-6bf195bcd9f3","receipt":{"id":"93873cff-70e4-4b91-8920-6bf195bcd9f3","created_at":"2026-11-01T10:42:15.797Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: ghost_audit_status","tools":["ghost_audit_status"],"steps":[{"tool":"ghost_audit_status","status":"success","started_at":"2026-11-01T10:42:15.452Z","completed_at":"2026-11-01T10:42:15.797Z"}],"output_hash":"sha256:44e8d350928e41f14b9b55016265f318bb89026db1fbb2762fa618fa04674e98","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1085,"verification_status":"verified","session_trail":[{"tool":"memory_recall","status":"completed","args_hash":"sha256:81e86733b7dde33ba06178a69bc09956be5c1b9864c392212e51287cdbed529d","timestamp":"2026-11-01T10:40:15.558Z","receipt_uuid":"3e439bcf-e133-4bb6-aff5-dff9ab2cceca"},{"tool":"memory_remember","status":"completed","args_hash":"sha256:22f2c0c9353a0d66f5f6740cada033d9cc22adf2a099984ba1bfe3edc3025743","timestamp":"2026-11-01T10:40:26.528Z","receipt_uuid":"66b62734-4514-435f-9f6e-77466f36935e"},{"tool":"zambo_universal","status":"completed","args_hash":"sha256:2b1c2768f1cd6512323eb49167ebe5e03584714c909707242c00d11f8643e5f9","timestamp":"2026-11-01T10:40:32.707Z","receipt_uuid":"e401b1d8-1f21-41a9-a23d-73e5302f49f7"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:30d89b13130b1fb37f3ae6e09d47e27f48db9c48b7e299465ea0a2edaba53257","timestamp":"2026-11-01T10:40:51.588Z","receipt_uuid":"008598f0-c0bd-4b6d-b103-3c400a1684cc"},{"tool":"ghost_audit_status","status":"completed","args_hash":"sha256:9641b8ad12f3e3f07ebe890f7f5a47e1dd1159b35755158ccc9a3642721f7999","timestamp":"2026-11-01T10:42:15.797Z","receipt_uuid":"93873cff-70e4-4b91-8920-6bf195bcd9f3"}],"result_preview":"{\"auditId\":\"0db6bc2a-0a49-4038-9df0-1f0a4f91126a\",\"url\":\"https://zambo.dev/\",\"status\":\"complete\",\"score\":42,\"grade\":\"F\",\"criticalCount\":1,\"highCount\":3,\"mediumCount\":8,\"lowCount\":3,\"startedAt\":\"2026-11-01T10:40:51.129Z\",\"completedAt\":\"2026-11-01T10:41:17.867Z\",\"hasReport\":true,\"nextStep\":\"ghost_audit_report\",\"audit_id\":\"0db6bc2a-0a49-4038-9df0-1f0a4f91126a\",\"download_url\":\"/api/ghost-audit/0db6bc2a-0a49-4038-9df0-1f0a4f91126a/download\",\"pdf_url\":\"/api/ghost-audit/0db6bc2a-0a49-4038-9df0-1f0a4f91126a/pdf\",\"ready\":true,\"next_step\":\"ghost_audit_report\",\"message\":\"Report ready. Call ghost_audit_report to retrieve the full markdown.\"}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:edf5553513f3a6839b5686c1f2681bc62f1c233f3e1c05ffefe0ee462b434e44","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"ghost_audit_status","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:c7d67dbb1a8b8dfe6c0822a28001fa8e2a4885355bc22574017c5a87ad3a5e5a"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":"sha256:90c60519b46a64ce2579122c396a56cf73a705765905e53dfb1100905439620d","evidence_url":"/api/evidence/90c60519b46a64ce2579122c396a56cf73a705765905e53dfb1100905439620d","evidence_byte_length":588,"evidence_content_type":"application/json","evidence_source_url":null,"evidence_status":"ok","result_source":null,"evidence_source":"localhost","external_evidence":[],"provenance":{"result_source":null,"evidence_source":"localhost","evidence_status":"ok","evidence_captures":[{"sha256":"sha256:90c60519b46a64ce2579122c396a56cf73a705765905e53dfb1100905439620d","source":"localhost","capture_role":"primary","evidence_status":"ok"}]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:f0b4ffa754efeb0bd59bef880c4704de475341616265444585b10122d23f176d","anchor":{"event_id":"dc0805362c72e801fb251fc9bf82cc924a77a47e2feb0912ce0a755cba2c217c","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-11-01T10:42:16.344Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-01T10:42:15.797Z","evidence_url":"https://zambo.dev/api/evidence/90c60519b46a64ce2579122c396a56cf73a705765905e53dfb1100905439620d","receipt_uuid":"93873cff-70e4-4b91-8920-6bf195bcd9f3","output_sha256":"sha256:44e8d350928e41f14b9b55016265f318bb89026db1fbb2762fa618fa04674e98","schema_version":"zambo-receipt-anchor/1","evidence_sha256":"sha256:90c60519b46a64ce2579122c396a56cf73a705765905e53dfb1100905439620d","evidence_byte_length":588},"envelope_bytes":"{\"anchored_at\":\"2026-11-01T10:42:15.797Z\",\"evidence_byte_length\":588,\"evidence_sha256\":\"sha256:90c60519b46a64ce2579122c396a56cf73a705765905e53dfb1100905439620d\",\"evidence_url\":\"https://zambo.dev/api/evidence/90c60519b46a64ce2579122c396a56cf73a705765905e53dfb1100905439620d\",\"output_sha256\":\"sha256:44e8d350928e41f14b9b55016265f318bb89026db1fbb2762fa618fa04674e98\",\"receipt_uuid\":\"93873cff-70e4-4b91-8920-6bf195bcd9f3\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-01T10:42:15.797Z","detail":"The receipt store reports 2026-11-01T10:42:15.797Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:865bb62150329f41fcf8b1e157765d947f521cb150ceda253fc981d58486fe7d","stable_handle_hash":"sha256:c7d67dbb1a8b8dfe6c0822a28001fa8e2a4885355bc22574017c5a87ad3a5e5a"}}},"evidence_status":"ok","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:44e8d350928e41f14b9b55016265f318bb89026db1fbb2762fa618fa04674e98","computed_hash":"sha256:44e8d350928e41f14b9b55016265f318bb89026db1fbb2762fa618fa04674e98","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}