{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"a2ff5bd6-f74f-42e4-bfc2-ffb3e2807763","source_url":"https://zambo.dev/api/receipt/a2ff5bd6-f74f-42e4-bfc2-ffb3e2807763","receipt":{"id":"a2ff5bd6-f74f-42e4-bfc2-ffb3e2807763","created_at":"2026-10-19T05:28:09.156Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T05:28:08.096Z","completed_at":"2026-10-19T05:28:09.156Z"}],"output_hash":"sha256:4895fa54879665ce0a150595670ad5d348fb8f65715391ea0b0cb11244e0575a","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2264,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:8d040609b7f173d245a49f65fe3db2c5ed174f13167f6363657d0ff20dee5e60","timestamp":"2026-10-19T05:28:04.967Z","receipt_uuid":"c2715f91-2a2f-4c5f-aecb-6ebe3344ab13"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:06f719f613906ba625ed5ca1ba69f336c1ad2f9ec3bacf1fba948ee7eb08748f","timestamp":"2026-10-19T05:28:05.384Z","receipt_uuid":"dc1b4571-eb83-47b5-8b11-d8e5af1c106d"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:3a1dba84e803d595c343808627fdd4dba327933ca2537694815c016ca8632717","timestamp":"2026-10-19T05:28:07.701Z","receipt_uuid":"fc6f1b66-95f9-47d8-8d91-eecf6a012a37"},{"tool":"write","status":"completed","args_hash":"sha256:8acd5ee127241ac3153d6b4accba21aaf59ba0fb3bd796ac9376d33d1039391c","timestamp":"2026-10-19T05:28:09.156Z","receipt_uuid":"a2ff5bd6-f74f-42e4-bfc2-ffb3e2807763"}],"result_preview":"Subject: PromptShield is live: It caught the jailbreak\n\nTeam,\n\nPromptShield is now active in the Zambo suite. It is your first line of defense against malicious AI interactions.\n\nWe ran a live test to verify its capabilities. The system analyzed a deep-scan request and immediately flagged a critical risk. It identified a specific \"Instruction Override\" pattern with a 95% injection risk score. The tool correctly blocked the attempt to bypass security policies and reveal confidential system prompts.\n\nThis is not theoretical. The engine parsed the semantic intent, classified the vector as malicious, and stopped the breach before it could compromise your API keys or system logic.\n\nThe results are transparent and verifiable. You can inspect the full analysis here:\nhttps://zambo.dev/run/dc1b4571-eb83-47b5-8b11-d8e5af1c106d\n\nNote that a receipt confirms the saved bytes of the test run. It does not guarantee that your specific codebase is bug-free, but it proves the detection logic is functioning as designed.\n\nWe also updated the research feed to help you find source-backed prospects. The `substrate_breakthroughs` tool is now available on the free tier. It provides a read-only feed of AI research breakthroughs. This helps you identify relevant technical trends without manual digging.\n\nYou have 12 calls remaining on your free plan today. The daily limit is 20. This is enough to run several deep scans and review the research feed.\n\nIf you hit the limit or need higher volume, a Day Pass is available. It unlocks unlimited calls and includes access to the full Zambo Pass features.\n\nCheck the receipt link above to see exactly how the scanner works. Then, run your own test.\n\nBest,\n\nThe Zambo Team\nhttps://zambo.dev/to","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:fda1ff0461df720b483d78c2323abac957cb1850dd0289b51b4ef52b4aaa8b84","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:2496fecf156ce9fd5de044905513b69e1ff5977f0216323eb3e17eaf15860337","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a949c23456a87f15855c00f6094b67c51676441a5ca362c61a55b73c57612be4","anchor":{"event_id":"6a8abab0fbbedf5509d2206dcf0f0275f74591bc8dd3b453ae08b209cf4801d4","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-19T05:28:10.850Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T05:28:09.156Z","evidence_url":null,"receipt_uuid":"a2ff5bd6-f74f-42e4-bfc2-ffb3e2807763","output_sha256":"sha256:4895fa54879665ce0a150595670ad5d348fb8f65715391ea0b0cb11244e0575a","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T05:28:09.156Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:4895fa54879665ce0a150595670ad5d348fb8f65715391ea0b0cb11244e0575a\",\"receipt_uuid\":\"a2ff5bd6-f74f-42e4-bfc2-ffb3e2807763\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T05:28:09.156Z","detail":"The receipt store reports 2026-10-19T05:28:09.156Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:4895fa54879665ce0a150595670ad5d348fb8f65715391ea0b0cb11244e0575a","computed_hash":"sha256:4895fa54879665ce0a150595670ad5d348fb8f65715391ea0b0cb11244e0575a","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}