{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"ae9ccfc4-ae99-4837-abba-2144d5a8d59c","source_url":"https://zambo.dev/api/receipt/ae9ccfc4-ae99-4837-abba-2144d5a8d59c","receipt":{"id":"ae9ccfc4-ae99-4837-abba-2144d5a8d59c","created_at":"2026-10-30T10:00:38.941Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-30T10:00:37.699Z","completed_at":"2026-10-30T10:00:38.941Z"}],"output_hash":"sha256:171410d7036d72f1afb7642af29f50d842d9738b1a89d8c24e6117924923cbb2","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2468,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:8b24a9b2f92fa9eea69d38a4d5a1487e66531f0c5d0515dc64c36643cec9a986","timestamp":"2026-10-30T10:00:24.009Z","receipt_uuid":"81a44ee4-afd2-467c-bcd2-8c9ea45fb7c4"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:72d6ca2b94f37175c6ea4457c73d3edba840aa363e86b01ce149de8966adbc5b","timestamp":"2026-10-30T10:00:25.898Z","receipt_uuid":"d0a4d8a2-1752-4d5f-8f29-ed8bee8c7fa2"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:6284497757cd75feb679ee4136b4c4da3c107be4ba1bfb89b74d6ba339d39fe8","timestamp":"2026-10-30T10:00:36.271Z","receipt_uuid":"c8266fca-7eb9-4768-a93f-93b2998775d7"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:307206b481a5224527214485212373a2348c1e27220b20fbfd20714b484231d2","timestamp":"2026-10-30T10:00:37.255Z","receipt_uuid":"e62dfcf5-7fb8-41d3-847b-962d71d435a7"},{"tool":"write","status":"completed","args_hash":"sha256:6eacd913b40c8cc596cf9a5fc76465af3b7b5e8a24ab7e6ae99892edf4ee7f91","timestamp":"2026-10-30T10:00:38.941Z","receipt_uuid":"ae9ccfc4-ae99-4837-abba-2144d5a8d59c"}],"result_preview":"**Subject: Zambo Launch: Live Security Scan + Lead Signal Test**\n\nHi [Name],\n\nZambo is live. The platform currently integrates two core workflows: semantic security scanning and source-backed lead generation. Both functions are operational on the free tier.\n\nHere is what the system actually did in a live test:\n\n**1. Security Scan (PromptShield)**\nI ran a malicious prompt injection attempt through the deep scan mode. The system correctly identified the threat.\n*   **Risk Level:** Critical\n*   **Detection:** Instruction Override and Prompt Leak Attempt\n*   **Outcome:** The prompt was blocked. The analysis flagged the intent as malicious and identified the specific attack vector.\n*   **Proof:** The scan completed in under 2.1 seconds. You can verify the unchanged saved bytes via this receipt: [Link to Scan Receipt]\n\n**2. Lead Generation (LeadSignal)**\nI queried the tool for source-backed prospects in Austin, TX, for web design.\n*   **Result:** No source-backed leads found.\n*   **Quota Status:** 3 free calls remaining.\n*   **Proof:** The tool returned a zero-count result with a specific timestamp. This confirms the tool executes queries against live data, even when the answer is \"nothing found.\"\n*   **Proof:** Verify the empty result state here: [Link to Lead Receipt]\n\n**Why this matters:**\nZambo does not guess. It provides receipts for every action. The security scan proves it can detect critical injection risks in real-time. The lead signal proof proves it queries live data without fabricating prospects. If the tool finds no leads, it tells you exactly that, rather than hallucinating a list.\n\n**Next Step:**\nReview the two receipts above. They confirm the platform’s ability to block critical security threats and execute accurate, source-backed data queries. Once you’ve verified these logs, let me know if you are ready to integrate Zambo into your current workflow.\n\nBest,\n\n[Your Name]\n[Your Title]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:fa490c4d1f3d14573ea267cbc0993cea35c8a3caaeb61f98beb26672ede5eaf3","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:c23bcfea269b60b2d8f7c73b37f8f92c4b4e8bafe2fdbc32af4d4676a7d9a7de","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a12f6474aae1e1eff732b10386c9cdc10fe62a82c143c6d976a2e227acedfed7","anchor":{"event_id":"e3fb3eb5fbb6fb66482c57ccaa8f174061d8cb41e41dcf39d67eb961dcdc0d30","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-30T10:00:39.612Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-30T10:00:38.941Z","evidence_url":null,"receipt_uuid":"ae9ccfc4-ae99-4837-abba-2144d5a8d59c","output_sha256":"sha256:171410d7036d72f1afb7642af29f50d842d9738b1a89d8c24e6117924923cbb2","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-30T10:00:38.941Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:171410d7036d72f1afb7642af29f50d842d9738b1a89d8c24e6117924923cbb2\",\"receipt_uuid\":\"ae9ccfc4-ae99-4837-abba-2144d5a8d59c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-30T10:00:38.941Z","detail":"The receipt store reports 2026-10-30T10:00:38.941Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:171410d7036d72f1afb7642af29f50d842d9738b1a89d8c24e6117924923cbb2","computed_hash":"sha256:171410d7036d72f1afb7642af29f50d842d9738b1a89d8c24e6117924923cbb2","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}