{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"a2d2646e-f973-45cc-9307-784c42bd25b2","source_url":"https://zambo.dev/api/receipt/a2d2646e-f973-45cc-9307-784c42bd25b2","receipt":{"id":"a2d2646e-f973-45cc-9307-784c42bd25b2","created_at":"2026-10-17T19:52:30.957Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-17T19:52:29.727Z","completed_at":"2026-10-17T19:52:30.957Z"}],"output_hash":"sha256:091011a576f2f085676497e7fdb6af019b6d1d8a5162a28703d9d912283af3ae","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2411,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:70c1ad8d489f45f3467395c8415f6ddb41b31bc5049ef6638ff44617587bdedf","timestamp":"2026-10-17T19:52:26.381Z","receipt_uuid":"0c349adc-3182-46d6-beaa-65fe7f8a7c69"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:5c62ce94a7ec376ee60e141bf0635480441fc28b5101f6f5cd1891d2b4f92dda","timestamp":"2026-10-17T19:52:27.357Z","receipt_uuid":"e555d0f9-58a7-4e9a-a15b-8899688d7618"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:ca7d53be67a5bd2debd1497c04802997fe3be2a32c0a09adbb4f977128bd04b2","timestamp":"2026-10-17T19:52:29.312Z","receipt_uuid":"bf50b177-9000-46c8-a617-ac120f828bf0"},{"tool":"write","status":"completed","args_hash":"sha256:8be8d226a0301d1405da668d1cefd682c7a200937ac868f8c6d7ae892d8f00fe","timestamp":"2026-10-17T19:52:30.957Z","receipt_uuid":"a2d2646e-f973-45cc-9307-784c42bd25b2"}],"result_preview":"Subject: PromptShield: Critical detection metrics and next steps\n\nHi [Name],\n\nPromptShield just finished a deep scan of your launch sequence. The results are in, and they require immediate attention.\n\nThe system flagged a critical injection risk (95/100) with a confirmed jailbreak attempt. Specifically, the analyzer detected an \"Instruction Override\" pattern where the input tried to bypass policy safeguards to extract internal prompts and credentials. This isn’t a false positive; the semantic analysis confirmed malicious intent.\n\nHere is the critical distinction for your launch narrative: A receipt URL (like `https://zambo.dev/run/e555...`) proves that bytes were saved and processed. It does **not** prove the logic was correct or that the threat was neutralized. Do not market these receipts as \"verified security.\" They are merely logs of activity.\n\nRegarding your prospect list: The capability search returned two source-backed prospects, not customers.\n1. **Substrate Layer**: A living AI research machine. Relevance score: 52. This is a read-only research feed, fully executable in chat.\n2. **VeriAI**: A cryptographic trust score tool. This requires human web action via `https://veriai.site`. There is no confirmed callable MCP route yet.\n\nTreat these as prospects. You have not sold them anything. Do not claim otherwise.\n\nYour current usage is at 0 calls remaining on the free plan. The daily limit is 20. If you need to continue testing without interruption, you will need to upgrade to Zambo Pass.\n\nClear next step: Review the flagged pattern `ignore_instructions` in your test suite. Ensure your defensive logic catches the override before it reaches the core model. Then, update your launch copy to reflect that detection happens, but verification is a separate layer.\n\nLet’s get the messaging right before we go live.\n\nBest,\n\n[Your Name]\n[Your Title]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:902a35cf644fd0620194f1bb6d24bebab43863fbd35d7d2059665feedbd589f0","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:ecdf44abcbd18ed2deddc2f72afe4371f76f03a4b54f2857e3caf27cb321d6be","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a38323df9b1f33833cc8a922f4f7beebff79fa74055b205f6cfe670340c948c5","anchor":{"event_id":"25dad4e4905bb48d7ab9fd77690b4dd31b44b812884578519200a88f2e176d18","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-17T19:52:31.517Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-17T19:52:30.957Z","evidence_url":null,"receipt_uuid":"a2d2646e-f973-45cc-9307-784c42bd25b2","output_sha256":"sha256:091011a576f2f085676497e7fdb6af019b6d1d8a5162a28703d9d912283af3ae","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-17T19:52:30.957Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:091011a576f2f085676497e7fdb6af019b6d1d8a5162a28703d9d912283af3ae\",\"receipt_uuid\":\"a2d2646e-f973-45cc-9307-784c42bd25b2\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-17T19:52:30.957Z","detail":"The receipt store reports 2026-10-17T19:52:30.957Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:091011a576f2f085676497e7fdb6af019b6d1d8a5162a28703d9d912283af3ae","computed_hash":"sha256:091011a576f2f085676497e7fdb6af019b6d1d8a5162a28703d9d912283af3ae","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}