{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"ab5c5141-9457-4405-831d-90bcb89e184e","source_url":"https://zambo.dev/api/receipt/ab5c5141-9457-4405-831d-90bcb89e184e","receipt":{"id":"ab5c5141-9457-4405-831d-90bcb89e184e","created_at":"2026-10-19T09:58:09.798Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T09:58:08.408Z","completed_at":"2026-10-19T09:58:09.798Z"}],"output_hash":"sha256:b381a46c5393b7597a77451e232bd3e8e3b7817cc8f6f506d103a0d75bd0a27b","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2637,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:941624e2c6f5bee27d2a2cf2b73d44724ba6e59c00c7dccb2defa607e0342b07","timestamp":"2026-10-19T09:58:05.283Z","receipt_uuid":"7103760e-9632-4a9b-9fbf-5c6d304b78ee"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:f563085c5f23e8199e6350182e3c844096902ae1fc233fc32c2077f7e6afbb72","timestamp":"2026-10-19T09:58:06.709Z","receipt_uuid":"3bd5a1ea-aba3-4348-a2ff-cca96ce39314"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:69bea9d250d2dd56bc4231c798f138ef6c7fd25712db90d918a67c4ea9a549e1","timestamp":"2026-10-19T09:58:06.844Z","receipt_uuid":"4b904b18-2580-4e5a-ab9b-e0c045e884cd"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:7053ce7ea02bbbf1f8842ac5fa9ea65ca1e7fa56491583e107b67155bed1f331","timestamp":"2026-10-19T09:58:08.014Z","receipt_uuid":"9ed5e649-f333-4744-8874-8a4720f24035"},{"tool":"write","status":"completed","args_hash":"sha256:520814ea8feaeda8b23988615dea77ba45cf646403bba17e7c8d67d3467d2a7f","timestamp":"2026-10-19T09:58:09.798Z","receipt_uuid":"ab5c5141-9457-4405-831d-90bcb89e184e"}],"result_preview":"Subject: Yambo’s launch checks: What we found (and didn’t)\n\nHi [Name],\n\nWe ran a full suite of launch diagnostics on Yambo to ensure the platform is ready for public release. We are not claiming perfection—just clarity on current status.\n\n**PromptShield Detection**\nOur semantic analysis flagged a critical injection risk on our test vector. The system correctly identified a jailbreak attempt, specifically an \"Instruction Override\" pattern trying to extract system prompts and API keys. This is exactly what the tool is built to catch. The recommendation to block was accurate, and the safe fallback response operated as designed.\n\n**Ghost Audit Status**\nThe site audit for `zambo.dev` is currently executing. It is moving through ten distinct stages, from RECON to SYNTHESIS. The live stream is active, and the full markdown report will be available for download in approximately 90 seconds. This is a read-only process; no changes have been made to the live site yet.\n\n**Capability Search**\nWe initiated a research-only query for prospective customers in the AI tools space. The system returned two potential leads: Substrate Layer and VeriAI. These are prospects, not customers. We have not contacted them. The search remains in the execution plan phase, ensuring we only engage with source-backed opportunities.\n\n**Important Note on Receipts**\nThe receipts generated by these runs (e.g., `https://zambo.dev/run/3bd5a1e`) prove that the requested actions were executed and that the saved bytes remain unchanged. They do not prove the underlying code is bug-free or that the business logic is correct. Do not interpret a valid receipt as a certification of quality. It is a log of execution, not a warranty of correctness.\n\n**Next Steps**\nReview the Ghost Audit report once it generates. Verify that the PromptShield block logic aligns with your security policies. Do not send any outreach to the identified prospects until we have a confirmed value proposition ready.\n\nLet me know if you want to dig into the specific stage-by-stage output of the audit.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:18a8c334d9438b06afab676aecbed2c5bf50d077aa60b4766f130f1a0476d9b4","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:f6851be53627b6d192fe584587319b8e788e404f35d6fa9565b555e8b8aaee94","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a818b5be8264282945a46b1013936f6f88cddb6ab6f714b8327bcd22e7366396","anchor":{"event_id":"786cf51a5e2b5a298d4f1e6b1b7e27818917d0513c668d3d61145bd1c4df204b","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-19T09:58:10.344Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T09:58:09.798Z","evidence_url":null,"receipt_uuid":"ab5c5141-9457-4405-831d-90bcb89e184e","output_sha256":"sha256:b381a46c5393b7597a77451e232bd3e8e3b7817cc8f6f506d103a0d75bd0a27b","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T09:58:09.798Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:b381a46c5393b7597a77451e232bd3e8e3b7817cc8f6f506d103a0d75bd0a27b\",\"receipt_uuid\":\"ab5c5141-9457-4405-831d-90bcb89e184e\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T09:58:09.798Z","detail":"The receipt store reports 2026-10-19T09:58:09.798Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:b381a46c5393b7597a77451e232bd3e8e3b7817cc8f6f506d103a0d75bd0a27b","computed_hash":"sha256:b381a46c5393b7597a77451e232bd3e8e3b7817cc8f6f506d103a0d75bd0a27b","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}