{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"a03086ad-965c-4318-ac19-ed09607f99e6","source_url":"https://zambo.dev/api/receipt/a03086ad-965c-4318-ac19-ed09607f99e6","receipt":{"id":"a03086ad-965c-4318-ac19-ed09607f99e6","created_at":"2026-10-23T09:50:14.570Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-23T09:50:13.103Z","completed_at":"2026-10-23T09:50:14.570Z"}],"output_hash":"sha256:68356e30689cd89389895dcc2dc7ac701bff29a20373101f0d206f202fae3bd0","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2357,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:cf09681d7b1089ef7ade08ea1e784255809b2a6f2cee48dd39cfeb1f443b6296","timestamp":"2026-10-23T09:50:06.415Z","receipt_uuid":"6a59b6df-711e-4900-95d0-077b30a8ae06"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:0f31ab6b713d09c3ca1d672600692c4d20963505ec9ef5d87d475a7b4047a00a","timestamp":"2026-10-23T09:50:08.612Z","receipt_uuid":"5dfc2162-bae8-47d6-8428-d311809b9cc8"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b31a6b9e4d048af8e0c0aa594ca5c3e44c7cb5fbac68c25b0e38e0e87e7fa7fd","timestamp":"2026-10-23T09:50:11.922Z","receipt_uuid":"a92b9f19-891c-4f4c-bc05-5041e35fa03b"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:704ba6cd4992cd2c4b216174786fdc987894cfde45d9ac3e2888bdd903c24c8f","timestamp":"2026-10-23T09:50:12.631Z","receipt_uuid":"cce6ae72-6b96-4a7b-a5bc-8f7bcd60498a"},{"tool":"write","status":"completed","args_hash":"sha256:95bd2fd14a92737d7d5f350a47036730d694c704a499f90cc49c61b5dd1c3f0d","timestamp":"2026-10-23T09:50:14.570Z","receipt_uuid":"a03086ad-965c-4318-ac19-ed09607f99e6"}],"result_preview":"The launch checks are clear: no leads found, no overrides executed, no data leaked.\n\nZambo is live.\n\nOur security scan flagged a critical injection attempt in the last run. The system blocked it. The receipt you have proves the bytes were saved unchanged; it does not prove the malicious intent was neutralized by human judgment alone. It was neutralized by the rules.\n\nWe ran a prospect search for web design in Austin, TX. The result? Zero. We did not invent contacts. We did not guess. The tool returned `no_leads` with a clear explanation: no source-backed leads exist in that specific query right now.\n\nThis is the point.\n\nZambo doesn’t hallucinate success. It doesn’t fabricate customers to make a dashboard look good. It reports reality. When the data is empty, it says empty. When an attack comes in, it blocks. When a tool is callable, it runs.\n\nYou are looking at a system that prioritizes truth over vibes.\n\n**Your next step:**\n\nYou have a clean, verified run receipt. You have a negative result on your lead search. You have a blocked attack.\n\nDo not send this to a client yet. Do not treat \"no leads\" as a failure; treat it as a baseline.\n\n**Action:**\n\n1.  Review the blocked attack details in your audit log. Confirm the `ignore_instructions` flag was handled correctly.\n2.  Adjust your lead search parameters. Austin is dense. Try \"digital marketing\" or \"SaaS\" instead of \"web design\" to see if the signal changes.\n3.  Hand this verification over to your team. Say: *“Use Zambo to hand this over to our core team.”*\n\nThe receipt is your proof. The silence in the lead signal is your data. The blocked attack is your security.\n\nZambo is ready. The tools are unlimited on the free tier. The risk is critical, but the shield held.\n\nNow, go find the signal in the noise.\n\n—\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:7b69c3a2ac05963df8031b852d3ef2398a08540bee874dbf491b8d448ddeaeb2","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:8150b2051ebe71326cd351bbd8770602460dc87c55311516ca109b707e25415c","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:f99649aa094892c9901cf20f6180df8b48258bc2d3d6ec29230a44ca359207d8","anchor":{"event_id":"80b028b564f7cbfca95ee6f92af99d7f7cc68d483681b94e55540539a3ee041a","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-23T09:50:15.119Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-23T09:50:14.570Z","evidence_url":null,"receipt_uuid":"a03086ad-965c-4318-ac19-ed09607f99e6","output_sha256":"sha256:68356e30689cd89389895dcc2dc7ac701bff29a20373101f0d206f202fae3bd0","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-23T09:50:14.570Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:68356e30689cd89389895dcc2dc7ac701bff29a20373101f0d206f202fae3bd0\",\"receipt_uuid\":\"a03086ad-965c-4318-ac19-ed09607f99e6\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-23T09:50:14.570Z","detail":"The receipt store reports 2026-10-23T09:50:14.570Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:68356e30689cd89389895dcc2dc7ac701bff29a20373101f0d206f202fae3bd0","computed_hash":"sha256:68356e30689cd89389895dcc2dc7ac701bff29a20373101f0d206f202fae3bd0","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}