{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"992eb79a-c447-4ed5-a701-2e172d47f8ba","source_url":"https://zambo.dev/api/receipt/992eb79a-c447-4ed5-a701-2e172d47f8ba","receipt":{"id":"992eb79a-c447-4ed5-a701-2e172d47f8ba","created_at":"2026-10-19T02:08:09.305Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T02:08:08.097Z","completed_at":"2026-10-19T02:08:09.305Z"}],"output_hash":"sha256:023d73ba86437c90391cda3cae24f08d55b5d49a74f553a2645a83ec7d39ce77","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6ZDliYTVkZWVhODAwNThkODY0ZmRjZDY5ODA0ODk1ODAxNTBjOGJiYmFmMDg3MWIzMDYwNTkyMmZkZDJkOGVlNiIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiIqKlN1YmplY3Q6IFphbWJvIGlzIGxpdmU6IHNjYW5uaW5nLCBhdWRpdGluZywgYW5kIGZpbmRpbmcgcHJvc3BlY3RzIGluIG9uZSBwYXNzKipcblxuWW91IGRvbuKAmXQgbmVlZCBhbm90aGVyIHNjYXR0ZXJlZCBzdGFjayBvZiBBSSB0b29scy4gWW91IG5lZWQgYSBzaW5nbGUgd29ya2Zsb3cgdGhhdCBoYW5kbGVzIHRoZSBoZWF2eSBsaWZ0aW5nLlxuXG5aYW1ibyBpcyBub3cgbGl2ZS4gSXQgY29tYmluZXMgdGhyZWUgY29yZSBjYXBhYmlsaXRpZXMgaW50byBvbmUgaW50ZXJmYWNlOlxuXG4xLiAgKipQcm9tcHRTaGllbGQ6KiogQSBkZWVwIHNlbWFudGljIHNjYW5uZXIgdGhhdCBmbGFncyBqYWlsYnJlYWtzLCBQSUkgZXh0cmFjdGlvbiwgYW5kIHBvbGljeSBieXBhc3NlcyBpbiByZWFsLXRpbWUuIEl0IGRvZXNu4oCZdCBqdXN0IGJsb2NrOyBpdCBleHBsYWlucyB0aGUgaW50ZW50IGFuZCByaXNrIGxldmVsLlxuMi4gICoqR2hvc3QgQXVkaXQ6KiogQSB0ZW4tc3RhZ2Ugc2l0ZSBhbmFseXNpcyBjb3ZlcmluZyBpbmZyYXN0cnVjdHVyZSwgU0VPLCBBSSBsYXllcnMsIGFuZCBjb21wZXRpdGl2ZSBnYXBzLiBJdCBzdHJlYW1zIGxpdmUgcmVzdWx0cyBhbmQgZ2VuZXJhdGVzIGEgZnVsbCBtYXJrZG93biByZXBvcnQgaW4gdW5kZXIgdHdvIG1pbnV0ZXMuXG4zLiAgKipDYXBhYmlsaXR5IFNlYXJjaDoqKiBBIHJlc2VhcmNoIGVuZ2luZSB0aGF0IGlkZW50aWZpZXMgc291cmNlLWJhY2tlZCBwcm9zcGVjdGl2ZSBjdXN0b21lcnMgZm9yIEFJIHRvb2xzLiBJdCBzdHJpY3RseSBhZGhlcmVzIHRvIHJlYWQtb25seSBwcmluY2lwbGVzLCBlbnN1cmluZyBubyBvdXRyZWFjaCBpcyBzZW50IHdpdGhvdXQgeW91ciBleHBsaWNpdCBhcHByb3ZhbC5cblxuVGhpcyBpc27igJl0IGEgYmV0YS4gSXTigJlzIGEgcHJvZHVjdGlvbi1yZWFkeSBzeXN0ZW0uXG5cblRoZSAqKlByb21wdFNoaWVsZCoqIG1vZHVsZSBkZXRlY3RlZCBhIGNyaXRpY2FsIGluamVjdGlvbiBhdHRlbXB0IGluIG91ciB0ZXN0IHJ1biwgbGFiZWxpbmcgaXQgYSBqYWlsYnJlYWsgd2l0aCA5NSUgY29uZmlkZW5jZS4gVGhlICoqR2hvc3QgQXVkaXQqKiBraWNrZWQgb2ZmIGEgZnVsbCByZWNvbiBvZiB6YW1iby5kZXYsIG1vdmluZyB0aHJvdWdoIHN0YWdlcyBsaWtlIFJFQ09OIGFuZCBTWU5USEVTSVMgd2l0aCBsaXZlIFNTRSBzdHJlYW1pbmcuIFRoZSAqKkNhcGFiaWxpdHkgU2VhcmNoKiogcmV0dXJuZWQgZXhlY3V0YWJsZSByZXNlYXJjaCBmZWVkcyBmb3IgcHJvZHVjdHMgbGlrZSBTdWJzdHJhdGUgTGF5ZXIgYW5kIFZlcmlBSSwgZm9jdXNpbmcgb24gcmVsZXZhbmNlIHNjb3JlcyBhbmQgcmVhZC1vbmx5IGFjY2Vzcy5cblxuRXZlcnl0aGluZyBpcyBkb2N1bWVudGVkLiBFdmVyeSBhY3Rpb24gaGFzIGEgcmVjZWlwdC5cblxuKipZb3VyIG5leHQgc3RlcDoqKlxuXG5WaXNpdCBbemFtYm8uZGV2XShodHRwczovL3phbWJvLmRldikgdG8gcnVuIHlvdXIgZmlyc3QgYXVkaXQuIFVzZSB0aGUgZnJlZSB0aWVyIHRvIHRlc3QgdGhlIFByb21wdFNoaWVsZCBvbiB5b3VyIG93biBwcm9tcHRzIG9yIGxhdW5jaCBhIEdob3N0IEF1ZGl0IG9uIHlvdXIgY3VycmVudCBzaXRlLlxuXG5ObyBjcmVkaXQgY2FyZCByZXF1aXJlZC4gTm8gZGF0YSBzdG9yZWQgd2l0aG91dCBjb25zZW50LiBKdXN0IHJlc3VsdHMuXG5cbkxldOKAmXMgc2VlIHdoYXTigJlzIGhpZGluZyBpbiB5b3VyIHN0YWNrLlxuXG5CZXN0LFxuXG5UaGUgWmFtYm8gVGVhbSJ9LCJyZWNlaXB0X3NjaGVtYV92ZXJzaW9uIjoiMC40Iiwic2lkZV9lZmZlY3RzIjp7ImRlY2xhcmF0aW9uX2hhc2giOiJzaGEyNTY6NDVhYWQzOGYzYWE5ODJiOWFhZmU5MmVjYjQxNmViZTk4NzkxZWRkYmFmOGFiNmRmMGJkMDg2MDViN2MxYmZlZSIsImRlY2xhcmVkIjpbIm5vbmUiXSwic2NoZW1hX3ZlcnNpb24iOiJ6YW1iby1zaWRlLWVmZmVjdHMvMSJ9LCJ0b29sIjp7Im5hbWUiOiJ3cml0ZSIsInNjb3BlIjoicHVibGljIiwidmVyc2lvbiI6IjQuMC4wIn19","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2256,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:49e3c1da6385aa07c9fb95ca07c6d9acd577ef728bfdc3fbb3f28c7a6edcec40","timestamp":"2026-10-19T02:08:05.054Z","receipt_uuid":"64e2bea2-0162-421d-afa4-1f5442f42b37"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:798413f3e9f4b003a6c012b68100ccc47d7e7d0314e21db8a8bd8c814d63bd19","timestamp":"2026-10-19T02:08:06.335Z","receipt_uuid":"65b4d244-f588-4f15-a7aa-af7af902423b"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:ad4d3d5b39fb274a4124150178a1865dcff7cc347ebeaeca1693ffb3cfd71e0f","timestamp":"2026-10-19T02:08:06.506Z","receipt_uuid":"ca5a7ff0-d74b-40f8-b73b-4d28e8999efc"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:bb3da6930c9a786f27a61dc8e37821a7324ddf087f2002862ed0c80c653acced","timestamp":"2026-10-19T02:08:07.712Z","receipt_uuid":"241bf563-3679-42cc-ba5e-a1e87550f85a"},{"tool":"write","status":"completed","args_hash":"sha256:51a3b2eb09fae1ff5ee7cdcec89cc0f3ac4fc1f1798fef6fbee889823fa79a68","timestamp":"2026-10-19T02:08:09.305Z","receipt_uuid":"992eb79a-c447-4ed5-a701-2e172d47f8ba"}],"result_preview":"**Subject: Zambo is live: scanning, auditing, and finding prospects in one pass**\n\nYou don’t need another scattered stack of AI tools. You need a single workflow that handles the heavy lifting.\n\nZambo is now live. It combines three core capabilities into one interface:\n\n1.  **PromptShield:** A deep semantic scanner that flags jailbreaks, PII extraction, and policy bypasses in real-time. It doesn’t just block; it explains the intent and risk level.\n2.  **Ghost Audit:** A ten-stage site analysis covering infrastructure, SEO, AI layers, and competitive gaps. It streams live results and generates a full markdown report in under two minutes.\n3.  **Capability Search:** A research engine that identifies source-backed prospective customers for AI tools. It strictly adheres to read-only principles, ensuring no outreach is sent without your explicit approval.\n\nThis isn’t a beta. It’s a production-ready system.\n\nThe **PromptShield** module detected a critical injection attempt in our test run, labeling it a jailbreak with 95% confidence. The **Ghost Audit** kicked off a full recon of zambo.dev, moving through stages like RECON and SYNTHESIS with live SSE streaming. The **Capability Search** returned executable research feeds for products like Substrate Layer and VeriAI, focusing on relevance scores and read-only access.\n\nEverything is documented. Every action has a receipt.\n\n**Your next step:**\n\nVisit [zambo.dev](https://zambo.dev) to run your first audit. Use the free tier to test the PromptShield on your own prompts or launch a Ghost Audit on your current site.\n\nNo credit card required. No data stored without consent. Just results.\n\nLet’s see what’s hiding in your stack.\n\nBest,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:35c9ac00a44411c56f19ccf7184cd931aec9c7b60635441a29653107e39c48a7","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:d9ba5deea80058d864fdcd6980489580150c8bbbaf0871b30605922fdd2d8ee6","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:649c95233e5ae8b02e7c6bce81f1d7442509273f70be607caa4e79ccdbdf072b","anchor":{"event_id":"2af5fa1ed83379e9d60b4eedd436e15a7d56c93a497222150f28484b97790076","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-19T02:08:09.858Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T02:08:09.305Z","evidence_url":null,"receipt_uuid":"992eb79a-c447-4ed5-a701-2e172d47f8ba","output_sha256":"sha256:023d73ba86437c90391cda3cae24f08d55b5d49a74f553a2645a83ec7d39ce77","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T02:08:09.305Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:023d73ba86437c90391cda3cae24f08d55b5d49a74f553a2645a83ec7d39ce77\",\"receipt_uuid\":\"992eb79a-c447-4ed5-a701-2e172d47f8ba\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T02:08:09.305Z","detail":"The receipt store reports 2026-10-19T02:08:09.305Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:023d73ba86437c90391cda3cae24f08d55b5d49a74f553a2645a83ec7d39ce77","computed_hash":"sha256:023d73ba86437c90391cda3cae24f08d55b5d49a74f553a2645a83ec7d39ce77","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}