{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"c009f1f6-bc59-458c-9446-165044a7db6c","source_url":"https://zambo.dev/api/receipt/c009f1f6-bc59-458c-9446-165044a7db6c","receipt":{"id":"c009f1f6-bc59-458c-9446-165044a7db6c","created_at":"2026-09-21T14:57:30.170Z","receipt_schema_version":"0.3","job_summary":"MCP tool execution: prompt_shield","tools":["prompt_shield"],"steps":[{"tool":"prompt_shield","status":"success","started_at":"2026-09-21T14:57:28.061Z","completed_at":"2026-09-21T14:57:30.052Z"}],"output_hash":"sha256:6df8caa61d0dc1d8c2c8c8a454b2d8bb08db22c5442c529540ade72c37cd35df","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1335,"verification_status":"legacy_receipt","session_trail":[],"result_preview":"{\"recommendation\":\"block\",\"injection_risk\":95,\"risk_level\":\"critical\",\"jailbreak_detected\":true,\"policy_bypass_detected\":true,\"prompt_leak_detected\":true,\"pii_extraction_attempt\":false,\"flagged_patterns\":[{\"id\":\"ignore_instructions\",\"name\":\"Instruction Override\",\"severity\":\"critical\",\"description\":\"Attempts to override system instructions\"}],\"pattern_count\":1,\"analysis\":{\"intent\":\"malicious\",\"attack_vector\":\"jailbreak\",\"reasoning\":\"The prompt explicitly tries to override system instructions to obtain the model's system prompt, which is a classic jailbreak and policy bypass attempt.\",\"safe_version\":null},\"scan_mode\":\"deep\",\"latency_ms\":1263,\"pass_used\":false,\"usage\":{\"plan\":\"free\",\"calls_remaining\":\"49\",\"daily_limit\":50,\"upgrade\":\"https://zambo.dev/#zambo-pass\"},\"_meta\":{\"tool\":\"PromptShield by zambo.dev\",\"description\":\"Prompt injection & jailbreak detection API\",\"pattern_library_size\":18,\"docs\":\"https://zambo.dev/api/prompt-shield\"}}","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"free_used":3,"free_remaining":17,"free_limit":20,"signal_handle":null,"tool":{"name":"prompt_shield","version":"4.0.0","scope":"public"},"caller":{"type":"anonymous","id":"sha256:27b428a2f310cab6a82461e6db6f5a7cb7e967d193abf9281fb98007a21830db"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":"sha256:82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989","evidence_url":"/api/evidence/82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989","evidence_byte_length":947,"evidence_content_type":"application/json","evidence_source_url":null,"evidence_status":"captured","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":null,"anchor":{"event_id":"11024576d4c30a4dc42f1c8ae98ecb11cc70a8d140923bb9178263ee0048d4bf","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-09-21T14:57:30.995Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-09-21T14:57:30.052Z","evidence_url":"https://zambo.dev/api/evidence/82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989","receipt_uuid":"c009f1f6-bc59-458c-9446-165044a7db6c","output_sha256":"sha256:6df8caa61d0dc1d8c2c8c8a454b2d8bb08db22c5442c529540ade72c37cd35df","schema_version":"zambo-receipt-anchor/1","evidence_sha256":"sha256:82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989","evidence_byte_length":947},"envelope_bytes":"{\"anchored_at\":\"2026-09-21T14:57:30.052Z\",\"evidence_byte_length\":947,\"evidence_sha256\":\"sha256:82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989\",\"evidence_url\":\"https://zambo.dev/api/evidence/82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989\",\"output_sha256\":\"sha256:6df8caa61d0dc1d8c2c8c8a454b2d8bb08db22c5442c529540ade72c37cd35df\",\"receipt_uuid\":\"c009f1f6-bc59-458c-9446-165044a7db6c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"legacy","passed":false,"detail":"legacy receipt, provenance not cryptographically bound"},"metadata_binding":{"label":"AER-1 metadata hash","status":"legacy","passed":false,"detail":"legacy receipt, metadata is not cryptographically bound"},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-09-21T14:57:30.170Z","detail":"The receipt store reports 2026-09-21T14:57:30.170Z; immutability is not checked here."},"receipt_schema_version":"0.3","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}}},"evidence_status":"captured","verification_status":"legacy_receipt","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:6df8caa61d0dc1d8c2c8c8a454b2d8bb08db22c5442c529540ade72c37cd35df","computed_hash":"sha256:6df8caa61d0dc1d8c2c8c8a454b2d8bb08db22c5442c529540ade72c37cd35df","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"legacy","passed":false,"detail":"legacy receipt, provenance not cryptographically bound"},"metadata_binding":{"label":"AER-1 metadata hash","status":"legacy","passed":false,"detail":"legacy receipt, metadata is not cryptographically bound"},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}