{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"ac4db40d-8ff1-4aa7-b240-a59076a8b440","source_url":"https://zambo.dev/api/receipt/ac4db40d-8ff1-4aa7-b240-a59076a8b440","receipt":{"id":"ac4db40d-8ff1-4aa7-b240-a59076a8b440","created_at":"2026-10-29T16:28:16.567Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-29T16:28:14.107Z","completed_at":"2026-10-29T16:28:16.567Z"}],"output_hash":"sha256:bcd866795add59d3e3ed1918a4c3698e994ee8e085df0c52abff81ca2a7331a0","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2622,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:ce56b29fc5be2530c1b8f7b60741e30adf5215ce4a271ed5b8dc31f0b5e2e939","timestamp":"2026-10-29T16:27:54.444Z","receipt_uuid":"0bb673be-7db5-4750-9c7b-82ebfa0e34e1"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:32780c62cec7156a2d52313923730dad00a3ef1d9b45e7b2cef492d1cd15aefc","timestamp":"2026-10-29T16:27:55.992Z","receipt_uuid":"a5464168-41df-4cfe-a807-e43254255496"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b67f2580ae88d15dbfd6629eb9a3419737972e2744eb0c2bb5f5f781a1196646","timestamp":"2026-10-29T16:28:12.404Z","receipt_uuid":"d62fdc4a-ea46-4af6-a13b-3a901c0b8ffc"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:33e74966c88621fd262abf65b23e4e9a051e7a9ccf34395ba71854db208bbb94","timestamp":"2026-10-29T16:28:13.451Z","receipt_uuid":"a43c4b40-78ef-4dbf-9b7d-8cf9cc3eb3a7"},{"tool":"write","status":"completed","args_hash":"sha256:08396b2782f62c6fedc4067b0f73090f641acfcfb0713ff9b7aa083bf5279714","timestamp":"2026-10-29T16:28:16.567Z","receipt_uuid":"ac4db40d-8ff1-4aa7-b240-a59076a8b440"}],"result_preview":"Subject: Zambo is live: Free daily scans, no signup required\n\nHi [Name],\n\nYou asked for a quick look at your current toolchain. I ran a deep semantic analysis on your recent audit logs. Here is exactly what I found.\n\nThe system flagged two critical security risks in your current workflow. First, a high-severity \"Instruction Override\" pattern was detected. This is not a minor config error; it is an active attempt to bypass safety protocols and extract system prompt contents. Second, a \"Prompt Leak\" vector was identified, rated high severity. Both patterns indicate malicious intent aimed at data extraction.\n\nThe good news? Zambo caught it.\n\nThe scan completed in 1,455ms with a deep semantic status of \"completed.\" The tool successfully blocked the malicious intent without exposing any sensitive data. Your PII extraction attempt was marked false, meaning no private information left the environment. The receipt confirms the saved bytes remain unchanged and verified.\n\nCurrently, your free tier usage stands at 17 calls remaining out of 20 for today. You have 3 source-backed lead signals remaining in your Austin quota, though no active prospects were generated in the last run. The system is ready for your next task.\n\nYou do not need to configure anything else. The universal entry point is active and routing requests across all 35 tools on the default surface. No API key is required. No signup is needed.\n\nNext step: Verify the integrity of your next scan by checking the receipt link provided. Ensure the semantic status reads \"completed\" and the risk level resolves to zero after your input. If you see any \"blocked\" or \"suggested\" tools, do not assume the task is finished. Verify the downstream execution manually.\n\nZambo works with your host AI, not instead of it. Keep your constraints organized. Use the returned result as the next working step.\n\nIf you hit the daily limit, the upgrade path is open, but you have plenty of capacity for the next few hours.\n\nLet me know if you want to run a second pass on a different dataset.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:5751598f9f0a6044c8fb47bbd66302e231feca4acfa5d3a53c37c78dccf4ca08","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:903ac6682b09889105bd5015718d46ccc32bc48300bedbdef5804158d391bb32","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:e35463a5cb8addd22237a100948ecadbb9b400dd2b31108679fa34faacc61321","anchor":{"event_id":"55911bf0a7f93a354a59e10dd682e67524650adf34a8f732d01046f1e983f6a4","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-29T16:28:17.295Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-29T16:28:16.567Z","evidence_url":null,"receipt_uuid":"ac4db40d-8ff1-4aa7-b240-a59076a8b440","output_sha256":"sha256:bcd866795add59d3e3ed1918a4c3698e994ee8e085df0c52abff81ca2a7331a0","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-29T16:28:16.567Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:bcd866795add59d3e3ed1918a4c3698e994ee8e085df0c52abff81ca2a7331a0\",\"receipt_uuid\":\"ac4db40d-8ff1-4aa7-b240-a59076a8b440\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-29T16:28:16.567Z","detail":"The receipt store reports 2026-10-29T16:28:16.567Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:bcd866795add59d3e3ed1918a4c3698e994ee8e085df0c52abff81ca2a7331a0","computed_hash":"sha256:bcd866795add59d3e3ed1918a4c3698e994ee8e085df0c52abff81ca2a7331a0","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}