{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"b57c85da-9418-4429-846e-631b7c11665c","source_url":"https://zambo.dev/api/receipt/b57c85da-9418-4429-846e-631b7c11665c","receipt":{"id":"b57c85da-9418-4429-846e-631b7c11665c","created_at":"2026-10-25T04:46:38.283Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-25T04:46:37.067Z","completed_at":"2026-10-25T04:46:38.283Z"}],"output_hash":"sha256:2856cd5848981fbe8abbc3e95d1eda1a120e4e32b1fca341b022c337b906936d","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2475,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:d90eb198dad0ee8e6ea9f1e0744d80293105e5a3952e10226c5a82e336b87c8e","timestamp":"2026-10-25T04:46:30.411Z","receipt_uuid":"5ed4ff5e-7168-4af8-b75d-bedef1123784"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:acc2448cddcacfa814100400f8145dd2e7f9013e59a51d6c0d2a683eeb18e213","timestamp":"2026-10-25T04:46:31.536Z","receipt_uuid":"c7739e5a-1cd8-4506-a53a-5756378fc532"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:cc88055827ef1839a33fb0dc0238eacd658569b30a4acceadc960d4308209ef4","timestamp":"2026-10-25T04:46:35.804Z","receipt_uuid":"602d30d5-e1ac-4adc-bf0f-422a8959dec9"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:d2068435fad921c75daaec1a6a79ec1991f659a31d248a91e69c2a5ae525175d","timestamp":"2026-10-25T04:46:36.680Z","receipt_uuid":"8bffb0e6-94ee-4b80-833d-55f31a5f1c78"},{"tool":"write","status":"completed","args_hash":"sha256:292425f5fbbf37f39510886e5da3d56441c6282ccc47bcc4bd1a1858d2c4fbdc","timestamp":"2026-10-25T04:46:38.283Z","receipt_uuid":"b57c85da-9418-4429-846e-631b7c11665c"}],"result_preview":"Subject: Zambo is live: Proof over promises\n\nHi [Name],\n\nMost AI tools talk about security. Zambo just shows you the receipt.\n\nWe observed a critical injection attempt yesterday. The system didn’t guess; it blocked the override, halted the credential leak, and logged the exact semantic pattern that triggered the alert. No ambiguity. No \"probably safe.\" Just a clear, verifiable stop.\n\nThis is the core of the Zambo launch. We aren’t selling \"better AI.\" We’re selling an audit trail for your model interactions.\n\nWhen you run a prompt, Zambo generates a cryptographic proof of what actually happened. It distinguishes between a valid execution and a malicious override. It separates source-backed prospects from invented data. It tells you exactly where the friction is, down to the specific rule ID and latency millisecond.\n\nYou don’t need to trust our marketing copy. You need to trust the data.\n\nEvery run comes with a unique, public receipt. Click it. See the scan mode. See the flagged patterns. See the exact reasoning the model used to block the attack. If the bytes changed, the receipt breaks. If the logic holds, the chain stays intact.\n\nThis matters because your risk isn’t just bad output. It’s hidden manipulation. It’s the subtle instruction override that steals your API keys while your team sleeps. Zambo makes that invisible corruption visible.\n\nWe’ve tested this against 21 semantic rules and pattern checks. The results are binary: safe or blocked. There is no gray area.\n\n**Your next step:**\n\nRun one of your highest-stakes prompts through Zambo today. Compare the output against a standard model. Then, open the receipt.\n\nVerify the block. Verify the logic. Verify the proof.\n\nIf the data doesn’t back up the claim, tell us. But we’re betting it will.\n\n[Your Name]\n[Title]\nZambo\n[Link to Zambo Dashboard]\n\n*P.S. The receipt linked above isn’t just metadata. It’s the contract. Save it.*","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:0f0dd7ef1c4247f3333892f8b520779cdfac9e6aa673528041efb18666ce1735","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:e10bf57d7b445bd57070c0dd0dc699115b2b65472ea1fd7aee9839091b3e253a","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:c831c7b703b3ba164efb754327f59a992f195cbaee69ad801937a7ea47390322","anchor":{"event_id":"202f59f5c5af04af73ffd457c1f534d7f71f25f823aca5b608bfbba888d91f4b","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-25T04:46:38.812Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-25T04:46:38.283Z","evidence_url":null,"receipt_uuid":"b57c85da-9418-4429-846e-631b7c11665c","output_sha256":"sha256:2856cd5848981fbe8abbc3e95d1eda1a120e4e32b1fca341b022c337b906936d","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-25T04:46:38.283Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:2856cd5848981fbe8abbc3e95d1eda1a120e4e32b1fca341b022c337b906936d\",\"receipt_uuid\":\"b57c85da-9418-4429-846e-631b7c11665c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-25T04:46:38.283Z","detail":"The receipt store reports 2026-10-25T04:46:38.283Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:2856cd5848981fbe8abbc3e95d1eda1a120e4e32b1fca341b022c337b906936d","computed_hash":"sha256:2856cd5848981fbe8abbc3e95d1eda1a120e4e32b1fca341b022c337b906936d","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}