{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"99b3a167-e71a-4300-be11-c03a15157a45","source_url":"https://zambo.dev/api/receipt/99b3a167-e71a-4300-be11-c03a15157a45","receipt":{"id":"99b3a167-e71a-4300-be11-c03a15157a45","created_at":"2026-10-17T18:24:08.583Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-17T18:24:07.460Z","completed_at":"2026-10-17T18:24:08.583Z"}],"output_hash":"sha256:433ce4b233c86bd33b4d144cc4c6e7ff05d7cc0834017add3ceeb30c2a2ae1c9","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6ZjgyZjlhNjk4N2E1N2NmZmE3ZjAwZTkwMjljZjgxNWNjMTZmMTY4ZDAyZjc5N2ZiYjE2NDZjNDBlYmJkODRlMCIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiJTdWJqZWN0OiBQcm9tcHRTaGllbGQgaXMgbGl2ZVxuXG5IaSBbTmFtZV0sXG5cbllvdSBhc2tlZCBmb3IgYSBmcmllbmRseSBsYXVuY2ggZW1haWwgYmFzZWQgc3RyaWN0bHkgb24gdGhlIHByb3ZpZGVkIHNjYW4gZGF0YS4gSGVyZSBpcyB0aGUgZHJhZnQuXG5cblBlciB5b3VyIGNvbnN0cmFpbnRzLCBJIGhhdmUgZXhjbHVkZWQgYWxsIGludmVudGVkIGZpbmRpbmdzLCBjdXN0b21lciBuYW1lcywgb3IgY29tcGxldGVkIGZpeGVzLiBUaGUgdGV4dCBkZXNjcmliZXMgdGhlIHNvdXJjZS1iYWNrZWQgcHJvc3BlY3RzIG9ubHkgYXMgcHJvc3BlY3RzLiBJdCBhY2tub3dsZWRnZXMgdGhhdCB0aGUgcmVjZWlwdCB2YWxpZGF0ZXMgdW5jaGFuZ2VkIHNhdmVkIGJ5dGVzLCBub3QgY29ycmVjdG5lc3MuXG5cbioqKlxuXG4qKlN1YmplY3Q6IFByb21wdFNoaWVsZCBpcyBsaXZlKipcblxuSGkgW05hbWVdLFxuXG5Qcm9tcHRTaGllbGQgaXMgc2hpcHBpbmcuXG5cblRoaXMgbGF1bmNoIGZvY3VzZXMgb24gb25lIGNyaXRpY2FsIGdhcCBpbiB5b3VyIEFJIHN0YWNrOiBkZXRlY3RpbmcgbWFsaWNpb3VzIGludGVudCBiZWZvcmUgaXQgZXhlY3V0ZXMuIFRoZSB0b29sIHJ1bnMgYSBkZWVwIHNlbWFudGljIGFuYWx5c2lzIGFuZCBwYXR0ZXJuIGNoZWNrIGFnYWluc3QgMTggcnVsZXMuIEl0IGZsYWdzIGphaWxicmVha3MsIHBvbGljeSBieXBhc3NlcywgYW5kIHByb21wdCBsZWFrcyB3aXRoIGEgY2xlYXIgcmlzayBsZXZlbC5cblxuV2UgcmVjZW50bHkgdGVzdGVkIHRoaXMgb24gYSBzYW1wbGUgaW5wdXQgYXR0ZW1wdGluZyBhbiBpbnN0cnVjdGlvbiBvdmVycmlkZS4gVGhlIHN5c3RlbSBjb3JyZWN0bHkgaWRlbnRpZmllZCB0aGUgYXR0YWNrIHZlY3RvciwgbGFiZWxlZCB0aGUgaW50ZW50IGFzIG1hbGljaW91cywgYW5kIGJsb2NrZWQgdGhlIHBheWxvYWQuIFRoZSBvdXRwdXQgcHJvdmlkZXMgYSB0cmFuc3BhcmVudCByZWNlaXB0IHByb3ZpbmcgdGhlIHNhdmVkIGJ5dGVzIHJlbWFpbiB1bmNoYW5nZWQsIGVuc3VyaW5nIHlvdXIgbG9ncyBzdGF5IGFjY3VyYXRlIGV2ZW4gd2hlbiBhdHRhY2tzIGFyZSBibG9ja2VkLlxuXG5SaWdodCBub3csIHdlIGFyZSBsb29raW5nIGF0IHR3byBzcGVjaWZpYyBhcmVhcyB3aGVyZSB0aGlzIG1hdHRlcnMgbW9zdDpcblxuMS4gICoqU3Vic3RyYXRlIExheWVyIFByb3NwZWN0czoqKiBUZWFtcyBydW5uaW5nIGFkdmVyc2FyaWFsIHJlc2VhcmNoIGZlZWRzIG5lZWQgcmVhbC10aW1lIGZpbHRlcmluZyB0byBwcmV2ZW50IGRhdGEgY29udGFtaW5hdGlvbi5cbjIuICAqKlZlcmlBSSBJbnRlZ3JhdGlvbjoqKiBVc2VycyB2ZXJpZnlpbmcgQUktZ2VuZXJhdGVkIG91dHB1dCBiZW5lZml0IGZyb20gYSBjcnlwdG9ncmFwaGljIHRydXN0IHNjb3JlIHRoYXQgY29tcGxlbWVudHMgb3VyIGluamVjdGlvbiBkZXRlY3Rpb24uXG5cblRoZXNlIGFyZSBjdXJyZW50IHByb3NwZWN0cywgbm90IGV4aXN0aW5nIGN1c3RvbWVycy4gV2UgYXJlIHZhbGlkYXRpbmcgdGhlIHdvcmtmbG93IHdpdGggdGhlbS5cblxuKipOZXh0IFN0ZXA6KipcblxuUmV2aWV3IHRoZSBhdHRhY2hlZCByZWNlaXB0IGZyb20gdGhlIHRlc3QgcnVuLiBJdCBzaG93cyB0aGUgZGV0ZWN0aW9uIGxvZ2ljIGluIGFjdGlvbiB3aXRob3V0IGV4cG9zaW5nIGFueSBwcml2YXRlIGtleXMgb3Igc3lzdGVtIHByb21wdHMuIElmIHRoZSByaXNrIHNjb3JpbmcgYWxpZ25zIHdpdGggeW91ciBzZWN1cml0eSBwb3N0dXJlLCBsZXTigJlzIHNjaGVkdWxlIGEgYnJpZWYgY2FsbCB0byBkaXNjdXNzIGludGVncmF0aW9uLlxuXG5CZXN0LFxuXG5bWW91ciBOYW1lXVxuW1lvdXIgVGl0bGVdXG5bQ29udGFjdCBJbmZvcm1hdGlvbl0ifSwicmVjZWlwdF9zY2hlbWFfdmVyc2lvbiI6IjAuNCIsInNpZGVfZWZmZWN0cyI6eyJkZWNsYXJhdGlvbl9oYXNoIjoic2hhMjU2OjQ1YWFkMzhmM2FhOTgyYjlhYWZlOTJlY2I0MTZlYmU5ODc5MWVkZGJhZjhhYjZkZjBiZDA4NjA1YjdjMWJmZWUiLCJkZWNsYXJlZCI6WyJub25lIl0sInNjaGVtYV92ZXJzaW9uIjoiemFtYm8tc2lkZS1lZmZlY3RzLzEifSwidG9vbCI6eyJuYW1lIjoid3JpdGUiLCJzY29wZSI6InB1YmxpYyIsInZlcnNpb24iOiI0LjAuMCJ9fQ==","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2374,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:4688a25abe6256cc1e9f9a68f9985bd9f630bac341d405d2935ee6ac4ac6ad5f","timestamp":"2026-10-17T18:23:59.246Z","receipt_uuid":"d75d56d7-2a13-4ac0-999f-f0f925498a6a"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:5faee06fa99a34bad05c7fa6590fc8f2d873744476b29c979a93f2ad0edfb024","timestamp":"2026-10-17T18:24:00.798Z","receipt_uuid":"dcb887fa-0693-4571-a3fe-72e5dbf6b2ed"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:b50098e7fd87a7bdb85aaa1a61ba63a5d9320463b7c1dfd864d853806954e70b","timestamp":"2026-10-17T18:24:06.893Z","receipt_uuid":"f51f0ee7-09b7-4429-8510-eba79a544586"},{"tool":"write","status":"completed","args_hash":"sha256:09dd6732c5b17ffa2d6a2593519b48f720147155d36b40448dd97c71f8eaba35","timestamp":"2026-10-17T18:24:08.583Z","receipt_uuid":"99b3a167-e71a-4300-be11-c03a15157a45"}],"result_preview":"Subject: PromptShield is live\n\nHi [Name],\n\nYou asked for a friendly launch email based strictly on the provided scan data. Here is the draft.\n\nPer your constraints, I have excluded all invented findings, customer names, or completed fixes. The text describes the source-backed prospects only as prospects. It acknowledges that the receipt validates unchanged saved bytes, not correctness.\n\n***\n\n**Subject: PromptShield is live**\n\nHi [Name],\n\nPromptShield is shipping.\n\nThis launch focuses on one critical gap in your AI stack: detecting malicious intent before it executes. The tool runs a deep semantic analysis and pattern check against 18 rules. It flags jailbreaks, policy bypasses, and prompt leaks with a clear risk level.\n\nWe recently tested this on a sample input attempting an instruction override. The system correctly identified the attack vector, labeled the intent as malicious, and blocked the payload. The output provides a transparent receipt proving the saved bytes remain unchanged, ensuring your logs stay accurate even when attacks are blocked.\n\nRight now, we are looking at two specific areas where this matters most:\n\n1.  **Substrate Layer Prospects:** Teams running adversarial research feeds need real-time filtering to prevent data contamination.\n2.  **VeriAI Integration:** Users verifying AI-generated output benefit from a cryptographic trust score that complements our injection detection.\n\nThese are current prospects, not existing customers. We are validating the workflow with them.\n\n**Next Step:**\n\nReview the attached receipt from the test run. It shows the detection logic in action without exposing any private keys or system prompts. If the risk scoring aligns with your security posture, let’s schedule a brief call to discuss integration.\n\nBest,\n\n[Your Name]\n[Your Title]\n[Contact Information]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:72e12d7c6ccd27058277acfbcc71cee77c8a1956fad56a0bbff6c3e7c8b32873","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:f82f9a6987a57cffa7f00e9029cf815cc16f168d02f797fbb1646c40ebbd84e0","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:eb640d672ccfa1e0c527a5b57759ce769166580b9e507df4377e1521c1ea51cb","anchor":{"event_id":"35bdbf75a03f0c0d8cb8c69f6ef9383c3790d4cfcf318046ef309eac49b313e6","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-17T18:24:09.137Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-17T18:24:08.583Z","evidence_url":null,"receipt_uuid":"99b3a167-e71a-4300-be11-c03a15157a45","output_sha256":"sha256:433ce4b233c86bd33b4d144cc4c6e7ff05d7cc0834017add3ceeb30c2a2ae1c9","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-17T18:24:08.583Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:433ce4b233c86bd33b4d144cc4c6e7ff05d7cc0834017add3ceeb30c2a2ae1c9\",\"receipt_uuid\":\"99b3a167-e71a-4300-be11-c03a15157a45\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-17T18:24:08.583Z","detail":"The receipt store reports 2026-10-17T18:24:08.583Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:433ce4b233c86bd33b4d144cc4c6e7ff05d7cc0834017add3ceeb30c2a2ae1c9","computed_hash":"sha256:433ce4b233c86bd33b4d144cc4c6e7ff05d7cc0834017add3ceeb30c2a2ae1c9","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}