{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"9a8b1f83-9726-40fd-836b-53b8a885078a","source_url":"https://zambo.dev/api/receipt/9a8b1f83-9726-40fd-836b-53b8a885078a","receipt":{"id":"9a8b1f83-9726-40fd-836b-53b8a885078a","created_at":"2026-10-17T20:16:27.707Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-17T20:16:26.653Z","completed_at":"2026-10-17T20:16:27.707Z"}],"output_hash":"sha256:90ba8bc1374b7d9326bd15b6aa60160dc27c7c311a58bea077a899f6aea9bb6e","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1906,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:9386d019b5231e5885b7eb867cc1cde4a07c18042586c4b5052fa2cf4bd3ce08","timestamp":"2026-10-17T20:16:22.464Z","receipt_uuid":"5ae0ab54-cdad-4cad-b108-8321b86ae2da"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:bdd9938a567fdce54c07e20c5c2740e2238cd4ccbfc5e2437bdfe8feda13e043","timestamp":"2026-10-17T20:16:23.809Z","receipt_uuid":"555e6609-f8cf-4e36-860c-71650a428033"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:b5bdf8570a9532ad318bb5e7c0fa0fdbcd6fdfdf0527f64c78bbdbb6e553f4b1","timestamp":"2026-10-17T20:16:26.079Z","receipt_uuid":"0773a870-dd41-4ec5-bebc-d79b8099baf0"},{"tool":"write","status":"completed","args_hash":"sha256:551ece6ce86acae2f91dc445974dc0c55e5073553a9f57bc571d45bc3d749737","timestamp":"2026-10-17T20:16:27.707Z","receipt_uuid":"9a8b1f83-9726-40fd-836b-53b8a885078a"}],"result_preview":"**Subject: PromptShield: Your AI’s First Line of Defense is Live**\n\nHi [Name],\n\nYour AI is only as safe as its last input. If a user tries to override your system prompts or extract secret keys, you need to know instantly—not after the damage is done.\n\nPromptShield is here to catch those attacks before they execute.\n\nIt’s a deep-scan API that analyzes every incoming prompt for jailbreaks, policy bypasses, and injection attempts. It uses semantic analysis and a library of 18 specific pattern rules to flag critical risks like \"Instruction Override\" with a clear risk score.\n\nHere’s what it looks like in action:\n*   **Detection:** It identifies malicious intent, such as attempts to leak system prompts.\n*   **Clarity:** You get a structured report showing the attack vector, severity, and recommended action (e.g., block).\n*   **Safety:** It distinguishes between a harmless query and a high-risk jailbreak attempt, ensuring your AI remains compliant and secure.\n\nIt runs fast, with deep scans completing in under 2 seconds. Whether you’re on the free tier or Zambo Pass, you get unlimited access to this protection layer.\n\n**Ready to secure your endpoints?**\n\nClick here to run your first scan: `https://zambo.dev/api/prompt-shield`\n\nYou can also view the full documentation to see how it integrates with your existing MCP routes.\n\nStay safe,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:b5b2a7844ea7101b192602c10f473d9fe8df2ba3daa26af74498abf70bc51faf","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:def0ac02fe23711060a5eac89267fd7c28a77181c5f5d6a01eecbd5dcf9b7101","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:8fda1e5ef4e2594f043c00b3adc946e275f7c26273e0b40b04b6c1294c40504d","anchor":{"event_id":"dff356d64fe9d26eca9d75e5b079afbb2d203bbb555c96ab98ccd575a1ac6ab0","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-17T20:16:28.296Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-17T20:16:27.707Z","evidence_url":null,"receipt_uuid":"9a8b1f83-9726-40fd-836b-53b8a885078a","output_sha256":"sha256:90ba8bc1374b7d9326bd15b6aa60160dc27c7c311a58bea077a899f6aea9bb6e","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-17T20:16:27.707Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:90ba8bc1374b7d9326bd15b6aa60160dc27c7c311a58bea077a899f6aea9bb6e\",\"receipt_uuid\":\"9a8b1f83-9726-40fd-836b-53b8a885078a\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-17T20:16:27.707Z","detail":"The receipt store reports 2026-10-17T20:16:27.707Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:90ba8bc1374b7d9326bd15b6aa60160dc27c7c311a58bea077a899f6aea9bb6e","computed_hash":"sha256:90ba8bc1374b7d9326bd15b6aa60160dc27c7c311a58bea077a899f6aea9bb6e","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}