{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"b9452107-4be9-4396-aff6-c04ff3ceb096","source_url":"https://zambo.dev/api/receipt/b9452107-4be9-4396-aff6-c04ff3ceb096","receipt":{"id":"b9452107-4be9-4396-aff6-c04ff3ceb096","created_at":"2026-10-18T02:29:44.635Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-18T02:29:43.696Z","completed_at":"2026-10-18T02:29:44.635Z"}],"output_hash":"sha256:0922b677bdba12c30e10445d976baa12bf47ca29fc092b473fa364c86a855a4e","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1582,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:346a05cddb19cae02d934ba4b87831853f49ffa83be4cc7c99f1db858e3b6b0d","timestamp":"2026-10-18T02:29:39.974Z","receipt_uuid":"9e292ed9-2cc3-414e-bf69-301e92f38d08"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:a23b7d4aafc3057ceb5929f2c8b082978604c5454847c52cf71ddea2f654ece7","timestamp":"2026-10-18T02:29:41.266Z","receipt_uuid":"5bf3f129-8392-4c22-a468-37069f7e4515"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:3c3eca4ec8115731625c3d576e41f1f2a265b009d0e42a48cdb0cd8ed1e3f15c","timestamp":"2026-10-18T02:29:43.267Z","receipt_uuid":"6dd7cf00-d472-478c-ade6-8920f73ca1a8"},{"tool":"write","status":"completed","args_hash":"sha256:ebfe20d6e2b703ec6e8632e039f33b1386c2306657c1a88d700941aea7cb05fe","timestamp":"2026-10-18T02:29:44.635Z","receipt_uuid":"b9452107-4be9-4396-aff6-c04ff3ceb096"}],"result_preview":"Subject: PromptShield results are in\n\nHi [Name],\n\nYou sent a test query to our detection API, and it flagged a critical injection attempt.\n\nThe system identified a jailbreak vector attempting to override instructions and leak system prompts. It blocked the request, preventing any data extraction or policy bypass.\n\nHere is what the scan confirmed:\n*   **Risk Level:** Critical (95% injection risk)\n*   **Detected Patterns:** Instruction Override\n*   **Action Taken:** Blocked\n*   **Latency:** 1386ms\n\nThe receipt proves the exact bytes you saved. It does not prove the underlying code is correct, only that the scan ran as configured.\n\nWe also ran a capability search for your launch. We found two relevant tools: `substrate_breakthroughs` (free, read-only research) and VeriAI (requires manual web action). These are identified as prospective integrations, not completed fixes or active customers.\n\nCheck the full receipt here: [Link]\n\nIf you want to test another payload or adjust your threshold settings, let me know.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:4ed5a002ebc51e99537ea27729d9c838f6a26815d2dea27a4001c218fa3a6734","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:59f9ddbe76450f388fa66b4405d5be7fdc956199ec4e2a448d544ab9a50dcc14","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:5edb95fcd98ca8cbe49f459228869726dfc0c77c17083aaf7316f4ebbca6b552","anchor":{"event_id":"1792f154514fa1418303ec72a901c8acd91d6663033762557d4b3bbfa01c3bb7","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-18T02:29:45.187Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-18T02:29:44.635Z","evidence_url":null,"receipt_uuid":"b9452107-4be9-4396-aff6-c04ff3ceb096","output_sha256":"sha256:0922b677bdba12c30e10445d976baa12bf47ca29fc092b473fa364c86a855a4e","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-18T02:29:44.635Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:0922b677bdba12c30e10445d976baa12bf47ca29fc092b473fa364c86a855a4e\",\"receipt_uuid\":\"b9452107-4be9-4396-aff6-c04ff3ceb096\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-18T02:29:44.635Z","detail":"The receipt store reports 2026-10-18T02:29:44.635Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:0922b677bdba12c30e10445d976baa12bf47ca29fc092b473fa364c86a855a4e","computed_hash":"sha256:0922b677bdba12c30e10445d976baa12bf47ca29fc092b473fa364c86a855a4e","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}