{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"97b3dd70-6468-46c6-ad48-e6557de8c12c","source_url":"https://zambo.dev/api/receipt/97b3dd70-6468-46c6-ad48-e6557de8c12c","receipt":{"id":"97b3dd70-6468-46c6-ad48-e6557de8c12c","created_at":"2026-11-08T15:16:47.623Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-08T15:16:46.492Z","completed_at":"2026-11-08T15:16:47.623Z"}],"output_hash":"sha256:06f7f52168a5e37e80b938f701e61d46168a5e434d7386c78572fa991b1e15f8","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2315,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:c50c1e421e33a69259d93b9418521c53469a002d8e851ec1ce867ed74300cdb9","timestamp":"2026-11-08T15:16:31.120Z","receipt_uuid":"19827b36-47c6-40e7-9704-f17add332927"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:e2df0da70450aca34f2aad23b90bfcc75899a206bd546f607895f16860d064f3","timestamp":"2026-11-08T15:16:32.327Z","receipt_uuid":"63af08d6-a80a-46bb-a81a-607272d6c740"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b83ccd96e6fa72a3708ad88ad320225e5e00cc7b654c1b4af13e8a8790015b31","timestamp":"2026-11-08T15:16:45.020Z","receipt_uuid":"c2cf0c58-247b-4093-84ad-61f7231b051f"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:9d5d06edd8d36ba75158c9fd3b4279a57058fd8de82503ff5e5814270c4b3923","timestamp":"2026-11-08T15:16:45.990Z","receipt_uuid":"53e219f5-7a58-448e-8553-910f374a90d8"},{"tool":"write","status":"completed","args_hash":"sha256:5374ea82b9e8d8c22fb468117df7eeb7d022124020acd807a3d150f70d16dba7","timestamp":"2026-11-08T15:16:47.623Z","receipt_uuid":"97b3dd70-6468-46c6-ad48-e6557de8c12c"}],"result_preview":"Subject: Zambo Launch: Verified Security & Lead Results\n\nHi [Name],\n\nZambo is live. We built it for contractors who need leads, not just data.\n\nHere is what the current launch checks confirm:\n\n**1. Security Integrity**\nOur deep semantic scan flagged a critical injection attempt targeting instruction overrides and prompt leaks. The system blocked it. The receipt proves the saved bytes remain unchanged. This is a security verification, not a guarantee of code correctness, but it confirms the integrity of our core logic against known attack vectors.\n\n**2. Lead Generation Reality**\nWe tested LeadSignal, our AI lead generation tool. It returns source-backed prospects only. It does not invent contacts. In a recent test for web design in Austin, TX, it returned zero results. This is by design. We prioritize accuracy over volume. If we cannot find a verified, source-backed lead in that specific niche and location, we tell you so. We do not pad the list with unverified data.\n\n**What This Means for You**\nYou get a tool that respects your time. No fake leads. No hallucinated contacts. Just verified prospects or a clear \"no data\" signal. The system is ready to handle high-risk inputs without leaking sensitive data or bypassing safety protocols.\n\n**Next Step**\nReview the two receipts below. They document the security block and the lead search logic.\n\n1.  **Security Scan Receipt:** [Link]\n2.  **Lead Search Receipt (Austin Web Design):** [Link]\n\nIf the integrity of the data and the security posture look good to you, let’s schedule a 15-minute demo. I will walk you through how LeadSignal handles trades like roofing in high-demand cities like Phoenix, where source-backed leads are more abundant.\n\nNo pressure. Just a look at the raw data.\n\nBest,\n\n[Your Name]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:29efb12e32f482acee7f448335891f9a4eb9d86af3f1157cb51361988f32b47f","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:4d55826e10493fdf9a3165a6d5fd0c04b41c05a8c60b00b3dabf01f8213c74d2","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a58c13412a3116e60bfe359371971d1dc6daa42933d4c97abe28ade50c475b23","anchor":{"event_id":"79803ac69a2b3b8a0d6e59b46a078f50968abf99403869c296ee76e43846b3e2","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"failed","published_at":null,"retry":{"state":"scheduled","interval_seconds":960,"last_attempt_at":"2026-11-08T15:33:05.090Z","next_attempt_at":"2026-11-08T15:49:05.090Z","expected_completion":"No guaranteed ETA; relay acknowledgement is external."},"schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-08T15:16:47.623Z","evidence_url":null,"receipt_uuid":"97b3dd70-6468-46c6-ad48-e6557de8c12c","output_sha256":"sha256:06f7f52168a5e37e80b938f701e61d46168a5e434d7386c78572fa991b1e15f8","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-08T15:16:47.623Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:06f7f52168a5e37e80b938f701e61d46168a5e434d7386c78572fa991b1e15f8\",\"receipt_uuid\":\"97b3dd70-6468-46c6-ad48-e6557de8c12c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-08T15:16:47.623Z","detail":"The receipt store reports 2026-11-08T15:16:47.623Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:1321df9acf4e5aa48579d014788655e855ee35aa76f799f138da6ebe8afa377b"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:06f7f52168a5e37e80b938f701e61d46168a5e434d7386c78572fa991b1e15f8","computed_hash":"sha256:06f7f52168a5e37e80b938f701e61d46168a5e434d7386c78572fa991b1e15f8","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}