{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"c0013749-efab-4053-a4ed-b53716d04a36","source_url":"https://zambo.dev/api/receipt/c0013749-efab-4053-a4ed-b53716d04a36","receipt":{"id":"c0013749-efab-4053-a4ed-b53716d04a36","created_at":"2026-11-13T12:13:14.869Z","receipt_schema_version":"0.4","job_summary":"query: prompt shield","tools":["capability_search"],"steps":[{"tool":"capability_search","status":"success","started_at":"2026-11-13T12:13:14.867Z","completed_at":"2026-11-13T12:13:14.869Z"}],"output_hash":"sha256:2c16ca3fe45764f9d47a7676de0a90640b9c17381cc0f5e858bf721ab5da96a0","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2509,"verification_status":"verified","session_trail":[],"result_preview":"{\"query\":\"prompt shield\",\"tools\":[{\"rank\":1,\"name\":\"prompt_shield\",\"description\":\"Check text for known prompt-injection indicators. Results include the active scan_mode and scan_label, plus the pattern-library size when the scan reports it; labels and counts come from the live result rather than a fixed catalog claim. A safe recommendation only means no warning signs were found in that mode, not a safety guarantee. Semantic analysis is reported only if it actually completes. Returns injection_risk 0 to 100 and recommendation safe/review/block. One free first call per tool each UTC day, plus 3 shared continuation calls.\",\"input_hints\":{\"type\":\"object\",\"properties\":{\"prompt\":{\"type\":\"string\",\"description\":\"The user input or prompt to validate for injection/jailbreak (max 16K chars)\",\"minLength\":1,\"maxLength\":16000},\"system\":{\"type\":\"string\",\"description\":\"Your system prompt - also scanned for prompt leak attempts (optional)\"},\"mode\":{\"type\":\"string\",\"enum\":[\"fast\",\"deep\"],\"description\":\"'fast' = pattern scan only (default), 'deep' = pattern + Groq semantic analysis\"},\"email\":{\"type\":\"string\",\"description\":\"Zambo Pass email for unlimited calls (optional)\"},\"context\":{\"type\":\"string\",\"description\":\"Describe your app for better contextual analysis (optional)\"},\"certificate\":{\"type\":\"boolean\",\"description\":\"If true, freeze this scan as a permanent public certificate and return certificate_url (optional)\"},\"_caller_label\":{\"type\":\"string\",\"maxLength\":80,\"description\":\"Optional self-reported caller label. It is recorded as a claim, not independently verified.\",\"default\":\"zambo-starter\"},\"_caller_handle\":{\"type\":\"string\",\"maxLength\":64,\"description\":\"Opaque anonymous continuity handle returned during initialize. Reuse it across MCP sessions; it is not payment authorization.\"},\"_ref\":{\"type\":\"string\",\"format\":\"uuid\",\"description\":\"Optional handover referral ID from your install link.\"}},\"required\":[\"prompt\"]}}],\"message\":\"These tools are available on the default connection.\"}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:bace847da3219ee3e2e8bf503f28832c50688a253f68dc17088f4c7f06e803b5","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":3,"free_limit":3,"signal_handle":null,"tool":{"name":"capability_search","version":"4.1.0","scope":"public"},"caller":{"type":"anonymous","id":"sha256:fa8b15f9599b8879a17638b94395d2f5c8f7ca8f70faea37995b258edec28104","basis":"ip_ua_30d","rotates_at":"2026-12-03T00:00:00.000Z"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:23cfeed44b06a45b92815b305dadff5f590c9c6027d9fd46c9a51b1397f0881d","anchor":{"event_id":"27f9d76c2beb0324809f31e5aa18237734ff61d43d06907a483159646c3d51b7","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-13T12:13:15.429Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-13T12:13:14.869Z","evidence_url":null,"receipt_uuid":"c0013749-efab-4053-a4ed-b53716d04a36","output_sha256":"sha256:2c16ca3fe45764f9d47a7676de0a90640b9c17381cc0f5e858bf721ab5da96a0","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-13T12:13:14.869Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:2c16ca3fe45764f9d47a7676de0a90640b9c17381cc0f5e858bf721ab5da96a0\",\"receipt_uuid\":\"c0013749-efab-4053-a4ed-b53716d04a36\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-13T12:13:14.869Z","detail":"The receipt store reports 2026-11-13T12:13:14.869Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:e4414906c6b6f0f139a2227a2aa735b219ff059d58ca0afce1f7890f8b97f5b8"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:2c16ca3fe45764f9d47a7676de0a90640b9c17381cc0f5e858bf721ab5da96a0","computed_hash":"sha256:2c16ca3fe45764f9d47a7676de0a90640b9c17381cc0f5e858bf721ab5da96a0","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}