{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"96176db0-f769-48e1-bf22-feea3e545b6f","source_url":"https://zambo.dev/api/receipt/96176db0-f769-48e1-bf22-feea3e545b6f","receipt":{"id":"96176db0-f769-48e1-bf22-feea3e545b6f","created_at":"2026-10-16T06:53:46.641Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T06:53:45.364Z","completed_at":"2026-10-16T06:53:46.641Z"}],"output_hash":"sha256:100d57686ff7f6f182c5e9c3c1d981ca2a4c7f47028237eda142bb71e5518ee7","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6NTRkZGY2ZWYyYjQ1YWNiYTZkNDQ1ZGQxZmMxODhkZDdhMzdjNWVlNGU3NzM0MDk3MjhhZGZlZTc3YjkwY2YyOSIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiIqKlN1YmplY3Q6IFphbWJvIGxhdW5jaGVzOiBTaGllbGQsIFNlYXJjaCwgYW5kIFNpdGUgQXVkaXQqKlxuXG5UaGUgWmFtYm8gcGxhdGZvcm0gaXMgbGl2ZS4gWW91IG5vdyBoYXZlIHRocmVlIGNvcmUgY2FwYWJpbGl0aWVzIHJlYWR5IGZvciBpbW1lZGlhdGUgaW50ZWdyYXRpb24uXG5cbioqMS4gUHJvbXB0U2hpZWxkKipcbllvdXIgZGVmZW5zZSBsYXllciBhZ2FpbnN0IG1hbGljaW91cyBpbnB1dHMuIEl0IGRldGVjdHMgamFpbGJyZWFrcywgaW5zdHJ1Y3Rpb24gb3ZlcnJpZGVzLCBhbmQgZGF0YSBleHRyYWN0aW9uIGF0dGVtcHRzIGluIHJlYWwtdGltZS4gVGhlIGxhdGVzdCBzY2FuIGZsYWdnZWQgYSBjcml0aWNhbCBpbmplY3Rpb24gcmlzayAoc2NvcmU6IDk1LzEwMCkgYXR0ZW1wdGluZyB0byBvdmVycmlkZSBzeXN0ZW0gaW5zdHJ1Y3Rpb25zLiBQcm9tcHRTaGllbGQgYmxvY2tlZCBpdC4gWW91IGNhbiB2aWV3IHRoZSBmdWxsIGFuYWx5c2lzIGFuZCByZWNlaXB0IGF0IFt6YW1iby5kZXYvcnVuLzliMTFlM2I1XShodHRwczovL3phbWJvLmRldi9ydW4vOWIxMWUzYjUtN2YzMi00ZWJmLTgzZmEtZGJjZWFhMDhiMGY0KS4gTm90ZTogQSByZWNlaXB0IGNvbmZpcm1zIHRoZSBieXRlcyBwcm9jZXNzZWQ7IGl0IGRvZXMgbm90IHZhbGlkYXRlIGJ1c2luZXNzIGxvZ2ljLlxuXG4qKjIuIENhcGFiaWxpdHkgU2VhcmNoKipcbkZpbmQgc291cmNlLWJhY2tlZCBwcm9zcGVjdGl2ZSBjdXN0b21lcnMgZm9yIEFJIHByb2R1Y3RzLiBUaGlzIGlzIGEgcmVzZWFyY2gtb25seSB0b29sLiBJdCBpZGVudGlmaWVzIHBvdGVudGlhbCBsZWFkcyBiYXNlZCBvbiBwdWJsaWMgc2lnbmFscyBidXQgbmV2ZXIgc2VuZHMgb3V0cmVhY2guIEZvciBleGFtcGxlLCBhIHJlY2VudCBxdWVyeSBzdXJmYWNlZCBcIlN1YnN0cmF0ZSBCcmVha3Rocm91Z2hzXCIgYXMgYSByZWxldmFudCBwcm9zcGVjdCBmb3IgQUkgcmVzZWFyY2ggZmVlZHMuIEl0IGlzIGEgcHJvc3BlY3QsIG5vdCBhIGN1c3RvbWVyLiBZb3UgY2FuIHJldmlldyB0aGUgZXhlY3V0aW9uIHBsYW4gYW5kIHJlbGV2YW5jZSBzY29yZXMgaGVyZTogW3phbWJvLmRldi9ydW4vMjQ1YWVhN2FdKGh0dHBzOi8vemFtYm8uZGV2L3J1bi8yNDVhZWE3YS1kMDJhLTQyZTUtOGIzMS0wYzhkMWNmZWZhNWUpLlxuXG4qKjMuIEdob3N0IEF1ZGl0KipcbkEgZGVlcC1kaXZlIGhlYWx0aCBjaGVjayBmb3IgeW91ciB3ZWIgcHJlc2VuY2UuIEl0IHJ1bnMgdGVuIHN0YWdlcywgZnJvbSBpbmZyYXN0cnVjdHVyZSByZWNvbiB0byBjb21wZXRpdGl2ZSBzeW50aGVzaXMuIEFuIGF1ZGl0IG9uIHphbWJvLmRldiBpcyBjdXJyZW50bHkgaW4gcHJvZ3Jlc3MuIFlvdSBjYW4gc3RyZWFtIGxpdmUgc3RhZ2UtYnktc3RhZ2Ugb3V0cHV0IG9yIGRvd25sb2FkIHRoZSBmdWxsIG1hcmtkb3duIHJlcG9ydCBvbmNlIGNvbXBsZXRlIChhcHByb3guIDkwIHNlY29uZHMpLiBUcmFjayB0aGUgc3RhdHVzIG9yIHZpZXcgdGhlIFVJIGF0IFt6YW1iby5kZXYvZ2hvc3QtYXVkaXRdKGh0dHBzOi8vemFtYm8uZGV2L2dob3N0LWF1ZGl0KS5cblxuKipOZXh0IFN0ZXAqKlxuUnVuIHlvdXIgb3duIFByb21wdFNoaWVsZCBzY2FuIHRvIHZlcmlmeSB5b3VyIGlucHV0IHNhZmV0eS4gSXTigJlzIGZyZWUgb24gdGhlIHN0YXJ0ZXIgdGllci5cblxuW1J1biBTY2FuIE5vd10oaHR0cHM6Ly96YW1iby5kZXYvYXBpL3Byb21wdC1zaGllbGQpXG5cblN0YXkgc2FmZSxcblxuVGhlIFphbWJvIFRlYW0ifSwicmVjZWlwdF9zY2hlbWFfdmVyc2lvbiI6IjAuNCIsInNpZGVfZWZmZWN0cyI6eyJkZWNsYXJhdGlvbl9oYXNoIjoic2hhMjU2OjQ1YWFkMzhmM2FhOTgyYjlhYWZlOTJlY2I0MTZlYmU5ODc5MWVkZGJhZjhhYjZkZjBiZDA4NjA1YjdjMWJmZWUiLCJkZWNsYXJlZCI6WyJub25lIl0sInNjaGVtYV92ZXJzaW9uIjoiemFtYm8tc2lkZS1lZmZlY3RzLzEifSwidG9vbCI6eyJuYW1lIjoid3JpdGUiLCJzY29wZSI6InB1YmxpYyIsInZlcnNpb24iOiI0LjAuMCJ9fQ==","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2257,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:6fdd721364d73b3f3ff888b0948be0aaf0a3e61094b5b878262da552f6c7f163","timestamp":"2026-10-16T06:53:40.958Z","receipt_uuid":"245aea7a-d02a-42e5-8b31-0c8d1cfefa5e"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:5bf76a64e7cd1efe6dbf8bfa0acd7504cdfda0f0e8dce02c0d19b9aa47959599","timestamp":"2026-10-16T06:53:41.407Z","receipt_uuid":"2398523d-1705-43b2-b9e2-be95d4189d55"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:7a7fcad432842fe78e3349a2f98ea2bc966dbd23945504022ad7207cfb02fb11","timestamp":"2026-10-16T06:53:42.310Z","receipt_uuid":"9b11e3b5-7f32-4ebf-83fa-dbceaa08b0f4"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:76366a8fc66522edb073a5e1b974125a0112c2ef206a8ba6db4d42a78d460bac","timestamp":"2026-10-16T06:53:44.719Z","receipt_uuid":"cedfdc25-a233-49be-965d-327431b20fc3"},{"tool":"write","status":"completed","args_hash":"sha256:6737ad3b561a66e335c2dac20c98275788d20d1f212e66f65a1430bc8f015b84","timestamp":"2026-10-16T06:53:46.641Z","receipt_uuid":"96176db0-f769-48e1-bf22-feea3e545b6f"}],"result_preview":"**Subject: Zambo launches: Shield, Search, and Site Audit**\n\nThe Zambo platform is live. You now have three core capabilities ready for immediate integration.\n\n**1. PromptShield**\nYour defense layer against malicious inputs. It detects jailbreaks, instruction overrides, and data extraction attempts in real-time. The latest scan flagged a critical injection risk (score: 95/100) attempting to override system instructions. PromptShield blocked it. You can view the full analysis and receipt at [zambo.dev/run/9b11e3b5](https://zambo.dev/run/9b11e3b5-7f32-4ebf-83fa-dbceaa08b0f4). Note: A receipt confirms the bytes processed; it does not validate business logic.\n\n**2. Capability Search**\nFind source-backed prospective customers for AI products. This is a research-only tool. It identifies potential leads based on public signals but never sends outreach. For example, a recent query surfaced \"Substrate Breakthroughs\" as a relevant prospect for AI research feeds. It is a prospect, not a customer. You can review the execution plan and relevance scores here: [zambo.dev/run/245aea7a](https://zambo.dev/run/245aea7a-d02a-42e5-8b31-0c8d1cfefa5e).\n\n**3. Ghost Audit**\nA deep-dive health check for your web presence. It runs ten stages, from infrastructure recon to competitive synthesis. An audit on zambo.dev is currently in progress. You can stream live stage-by-stage output or download the full markdown report once complete (approx. 90 seconds). Track the status or view the UI at [zambo.dev/ghost-audit](https://zambo.dev/ghost-audit).\n\n**Next Step**\nRun your own PromptShield scan to verify your input safety. It’s free on the starter tier.\n\n[Run Scan Now](https://zambo.dev/api/prompt-shield)\n\nStay safe,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:7511b3c621e8151b88370161ae0d1f370e3a39e6ab0b8cab4917b154840e7b44","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:54ddf6ef2b45acba6d445dd1fc188dd7a37c5ee4e773409728adfee77b90cf29","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a4ae1b39957027c575f8b3410201c337f7bef6335b6354c316df5201da6b8513","anchor":{"event_id":"1747c718abab186758d47a7542355e74c4644647cc5d7878e842fc789e69d55d","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-16T06:53:47.175Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T06:53:46.641Z","evidence_url":null,"receipt_uuid":"96176db0-f769-48e1-bf22-feea3e545b6f","output_sha256":"sha256:100d57686ff7f6f182c5e9c3c1d981ca2a4c7f47028237eda142bb71e5518ee7","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T06:53:46.641Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:100d57686ff7f6f182c5e9c3c1d981ca2a4c7f47028237eda142bb71e5518ee7\",\"receipt_uuid\":\"96176db0-f769-48e1-bf22-feea3e545b6f\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T06:53:46.641Z","detail":"The receipt store reports 2026-10-16T06:53:46.641Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:100d57686ff7f6f182c5e9c3c1d981ca2a4c7f47028237eda142bb71e5518ee7","computed_hash":"sha256:100d57686ff7f6f182c5e9c3c1d981ca2a4c7f47028237eda142bb71e5518ee7","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}