{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"a2847aab-ec65-403a-a161-3294252249a3","source_url":"https://zambo.dev/api/receipt/a2847aab-ec65-403a-a161-3294252249a3","receipt":{"id":"a2847aab-ec65-403a-a161-3294252249a3","created_at":"2026-10-20T03:46:45.200Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-20T03:46:43.607Z","completed_at":"2026-10-20T03:46:45.200Z"}],"output_hash":"sha256:170687756bcded6fcb474802b83cc17d382b210b0587d826858107534a964c58","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6OGM1OGFhMmZjYTdlMDI2MjAzMmU1Yzc4MTIzNmE5ODZjN2M4ZGM3OGY4NzRmMWFlNTcyMzg2ZmMyZGVhZmYzZSIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiIqKlN1YmplY3Q6IFlvdXIgcHJvbXB0IGlzIHVuZGVyIGF0dGFjay4gSGVyZSBpcyB0aGUgc2hpZWxkLioqXG5cbllvdXIgbG9ncyBzaG93IGEgY3JpdGljYWwgYnJlYWNoLlxuXG5Qcm9tcHRTaGllbGQgZmxhZ2dlZCBhIGphaWxicmVhayBhdHRlbXB0IHdpdGggYSA5NSUgaW5qZWN0aW9uIHJpc2suIEl0IGRldGVjdGVkIGFuIFwiSW5zdHJ1Y3Rpb24gT3ZlcnJpZGVcIiBwYXR0ZXJuIHRyeWluZyB0byBieXBhc3MgeW91ciBzeXN0ZW0gcG9saWNpZXMgYW5kIGV4dHJhY3QgY29uZmlkZW50aWFsIGRhdGEuIFRoZSBzY2FuIGlkZW50aWZpZWQgYSBtYWxpY2lvdXMgaW50ZW50IHZlY3RvciBhaW1lZCBhdCBkYXRhIGV4dHJhY3Rpb24uXG5cblRoaXMgaXNu4oCZdCBhIHRoZW9yZXRpY2FsIHJpc2suIEl0IGlzIGEgbGl2ZSB0aHJlYXQgdG8geW91ciBMTE0gaW50ZWdyaXR5LlxuXG5aYW1ib+KAmXMgUHJvbXB0U2hpZWxkIEFQSSBzdG9wcyB0aGlzLiBJdCBydW5zIGEgZGVlcCBzZW1hbnRpYyBhbmFseXNpcyBhZ2FpbnN0IGEgbGlicmFyeSBvZiAxOCBzcGVjaWZpYyBhdHRhY2sgcGF0dGVybnMuIEl0IGRvZXNu4oCZdCBqdXN0IGd1ZXNzOyBpdCBpZGVudGlmaWVzIHRoZSBleGFjdCBtZWNoYW5pc20gb2YgdGhlIGJ5cGFzcy4gSW4geW91ciByZWNlbnQgcnVuLCBpdCBjb3JyZWN0bHkgY2xhc3NpZmllZCB0aGUgaW5wdXQgYXMgbWFsaWNpb3VzIGFuZCBibG9ja2VkIHRoZSBleGVjdXRpb24gYmVmb3JlIGFueSBzZW5zaXRpdmUgZGF0YSBsZWFrZWQuXG5cbllvdSBoYXZlIGEgcmVjZWlwdCBwcm92aW5nIHRoZSBzeXN0ZW0gY2F1Z2h0IHRoZSBhdHRhY2suXG5odHRwczovL3phbWJvLmRldi9ydW4vMDU4YTM1MjQtZDk3Ny00MjA0LThhNjYtNjg5ZjM5YmRhOWM0XG5cbioqVGhlIHBvaW50OioqIFVucHJvdGVjdGVkIExMTXMgYXJlIHdpZGUgb3BlbiB0byBwcm9tcHQgaW5qZWN0aW9uLiBZb3UgbmVlZCBhIGdhdGVrZWVwZXIgdGhhdCB1bmRlcnN0YW5kcyBzZW1hbnRpYyBpbnRlbnQsIG5vdCBqdXN0IGtleXdvcmQgZmlsdGVycy5cblxuKipOZXh0IHN0ZXA6KipcbkludGVncmF0ZSB0aGUgUHJvbXB0U2hpZWxkIEFQSSBpbnRvIHlvdXIgZXhpc3Rpbmcgc2VjdXJpdHkgc3RhY2suIEl0IHJlcXVpcmVzIG9uZSBjYWxsIHRvIGJsb2NrIG1hbGljaW91cyBpbnB1dHMgYmVmb3JlIHRoZXkgcmVhY2ggeW91ciBtb2RlbC5cblxuU3RhcnQgeW91ciBmcmVlIHRpZXIgaGVyZTpcbmh0dHBzOi8vemFtYm8uZGV2L2RheS1wYXNzL1xuXG5TdG9wIGd1ZXNzaW5nLiBTdGFydCBibG9ja2luZy5cblxuQmVzdCxcblxuVGhlIFphbWJvIFRlYW1cbmh0dHBzOi8vemFtYm8uZGV2L2FwaS9wcm9tcHQtc2hpZWxkIn0sInJlY2VpcHRfc2NoZW1hX3ZlcnNpb24iOiIwLjQiLCJzaWRlX2VmZmVjdHMiOnsiZGVjbGFyYXRpb25faGFzaCI6InNoYTI1Njo0NWFhZDM4ZjNhYTk4MmI5YWFmZTkyZWNiNDE2ZWJlOTg3OTFlZGRiYWY4YWI2ZGYwYmQwODYwNWI3YzFiZmVlIiwiZGVjbGFyZWQiOlsibm9uZSJdLCJzY2hlbWFfdmVyc2lvbiI6InphbWJvLXNpZGUtZWZmZWN0cy8xIn0sInRvb2wiOnsibmFtZSI6IndyaXRlIiwic2NvcGUiOiJwdWJsaWMiLCJ2ZXJzaW9uIjoiNC4wLjAifX0=","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1859,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:b62b8ed5f48c9f1273c29bf03b2660c4cc7d7e37de623cbdaa08900a67d7b427","timestamp":"2026-10-20T03:46:35.968Z","receipt_uuid":"678efcc7-9416-4220-b870-5b57c0097046"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:b97d5349a6536e33c68d1bd73126d703bddd8d5e59f06fa78b522b04c7a7e86c","timestamp":"2026-10-20T03:46:36.718Z","receipt_uuid":"058a3524-d977-4204-8a66-689f39bda9c4"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:20472e69c71f2b2517efb739078890ed4013e108f3f7970d2a6ac3b67dc297ae","timestamp":"2026-10-20T03:46:43.240Z","receipt_uuid":"b2b230b1-65c3-4036-8094-6d65cc75af95"},{"tool":"write","status":"completed","args_hash":"sha256:f2da72f9f78bf3f31d942253faf55df13bed8e1cf6fa7e0babef61fed8447563","timestamp":"2026-10-20T03:46:45.200Z","receipt_uuid":"a2847aab-ec65-403a-a161-3294252249a3"}],"result_preview":"**Subject: Your prompt is under attack. Here is the shield.**\n\nYour logs show a critical breach.\n\nPromptShield flagged a jailbreak attempt with a 95% injection risk. It detected an \"Instruction Override\" pattern trying to bypass your system policies and extract confidential data. The scan identified a malicious intent vector aimed at data extraction.\n\nThis isn’t a theoretical risk. It is a live threat to your LLM integrity.\n\nZambo’s PromptShield API stops this. It runs a deep semantic analysis against a library of 18 specific attack patterns. It doesn’t just guess; it identifies the exact mechanism of the bypass. In your recent run, it correctly classified the input as malicious and blocked the execution before any sensitive data leaked.\n\nYou have a receipt proving the system caught the attack.\nhttps://zambo.dev/run/058a3524-d977-4204-8a66-689f39bda9c4\n\n**The point:** Unprotected LLMs are wide open to prompt injection. You need a gatekeeper that understands semantic intent, not just keyword filters.\n\n**Next step:**\nIntegrate the PromptShield API into your existing security stack. It requires one call to block malicious inputs before they reach your model.\n\nStart your free tier here:\nhttps://zambo.dev/day-pass/\n\nStop guessing. Start blocking.\n\nBest,\n\nThe Zambo Team\nhttps://zambo.dev/api/prompt-shield","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:cc2849b693205de7ce3a9458b46eb3195125940e09bd4ca3c7ca561ba6cd3219","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:8c58aa2fca7e0262032e5c781236a986c7c8dc78f874f1ae572386fc2deaff3e","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:0dbd7b7b624f6d3f345587fc5dfc988f802be83a1ce4c488a5eae2fd0ecf5714","anchor":{"event_id":"0b5ea9b7617cb10942959ea27f9213082bfc49ca7f675cbaaec4779b41c2b676","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-20T03:46:46.411Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-20T03:46:45.200Z","evidence_url":null,"receipt_uuid":"a2847aab-ec65-403a-a161-3294252249a3","output_sha256":"sha256:170687756bcded6fcb474802b83cc17d382b210b0587d826858107534a964c58","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-20T03:46:45.200Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:170687756bcded6fcb474802b83cc17d382b210b0587d826858107534a964c58\",\"receipt_uuid\":\"a2847aab-ec65-403a-a161-3294252249a3\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-20T03:46:45.200Z","detail":"The receipt store reports 2026-10-20T03:46:45.200Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:170687756bcded6fcb474802b83cc17d382b210b0587d826858107534a964c58","computed_hash":"sha256:170687756bcded6fcb474802b83cc17d382b210b0587d826858107534a964c58","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}