{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"9a258238-4b8a-4755-bbf8-d2e5524d4299","source_url":"https://zambo.dev/api/receipt/9a258238-4b8a-4755-bbf8-d2e5524d4299","receipt":{"id":"9a258238-4b8a-4755-bbf8-d2e5524d4299","created_at":"2026-10-16T22:58:06.112Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T22:58:05.189Z","completed_at":"2026-10-16T22:58:06.112Z"}],"output_hash":"sha256:4ca3920f38b704d5cb8e380ab73cc7a571cc06050ed8df9fe5ce2249ec128851","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2105,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:b33b2c63dc45996c1ee3b9149c258391c0a4ccf21f61adb6a7d5f50b7ff5be71","timestamp":"2026-10-16T22:57:57.092Z","receipt_uuid":"2da23181-418d-4d96-a77b-61dddce90547"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:a776be2dbe9fde0e987348a0bbd009d534acfc28a8cc42717d98b3c58e8f51c8","timestamp":"2026-10-16T22:57:58.242Z","receipt_uuid":"d257786a-47ac-48de-9683-4e31517e462f"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:3b7fa28b5537c9290a338e69a63a91252e2b9dd87a5b22f2b699d29a7ba99209","timestamp":"2026-10-16T22:58:04.746Z","receipt_uuid":"55c752a1-96da-4e30-971c-6efb70d98291"},{"tool":"write","status":"completed","args_hash":"sha256:1e4fbce5cf64e111a8c63ec6fa323318e381b6cc40642e822cac62106ce33535","timestamp":"2026-10-16T22:58:06.112Z","receipt_uuid":"9a258238-4b8a-4755-bbf8-d2e5524d4299"}],"result_preview":"Subject: Your PromptShield scan flagged critical jailbreak attempts\n\n[Name],\n\nYour recent scan of the provided payload returned a critical risk level with a 95% injection score. The system detected multiple high-severity violations, including a confirmed jailbreak and policy bypass.\n\nSpecifically, the analysis identified an \"Instruction Override\" pattern. The input explicitly attempted to override system instructions to extract system prompts and secret keys. While the scan correctly flagged these malicious intents, it is important to distinguish detection from execution. The tool identified the threat; it did not execute the override.\n\nThe receipt at [Link to Receipt] confirms the saved bytes remain unchanged. This proves the integrity of the data you submitted, not the correctness of the underlying AI response. The scan is a diagnostic tool. It highlights where your current guardrails might be insufficient against sophisticated prompt injection techniques.\n\nTo move forward, review the flagged patterns. The \"ignore_instructions\" tag indicates a direct attempt to bypass your safety protocols. If you are using this payload in a production environment, you need to tighten your input validation. The detection API is working as intended by blocking the malicious intent before it reaches your core logic.\n\nCheck the detailed reasoning in the full report. It breaks down the attack vector and confirms the safe version of the response. Use this data to harden your defenses.\n\nReview the full report here: [Link to Receipt]\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:c26808b7e4d2388fba303493170f7c109c6a58026143f5d6559b82ca77d41b68","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:8975f6d7ae9582081eb91730491700ad7425eaee3e8435fad628eae22a3443b0","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:e7e0a940d19346a9ddfcd7c3fd3d2e68d552a7ba83c1fcbc29ae426b4642564b","anchor":{"event_id":"0a79b7f2ab98b34f3adbe442bc62465e52d2574fc7ea9879cfa652273fb97ac3","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-16T22:58:06.655Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T22:58:06.112Z","evidence_url":null,"receipt_uuid":"9a258238-4b8a-4755-bbf8-d2e5524d4299","output_sha256":"sha256:4ca3920f38b704d5cb8e380ab73cc7a571cc06050ed8df9fe5ce2249ec128851","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T22:58:06.112Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:4ca3920f38b704d5cb8e380ab73cc7a571cc06050ed8df9fe5ce2249ec128851\",\"receipt_uuid\":\"9a258238-4b8a-4755-bbf8-d2e5524d4299\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T22:58:06.112Z","detail":"The receipt store reports 2026-10-16T22:58:06.112Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:4ca3920f38b704d5cb8e380ab73cc7a571cc06050ed8df9fe5ce2249ec128851","computed_hash":"sha256:4ca3920f38b704d5cb8e380ab73cc7a571cc06050ed8df9fe5ce2249ec128851","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}