{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"c2a5937d-42fe-4e1e-828a-7252e980644c","source_url":"https://zambo.dev/api/receipt/c2a5937d-42fe-4e1e-828a-7252e980644c","receipt":{"id":"c2a5937d-42fe-4e1e-828a-7252e980644c","created_at":"2026-11-10T07:39:20.127Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-10T07:39:18.285Z","completed_at":"2026-11-10T07:39:20.127Z"}],"output_hash":"sha256:085d052fc4c86671592dfcc6968ebb126f0d7e59eebfba3693c1d49c8fe8c0e7","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":3056,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:522651d5e116a4ff102ac10a8ecd15a1e9c00e9dd6752587710f33d43087e279","timestamp":"2026-11-10T07:39:03.006Z","receipt_uuid":"17fc68c7-1087-4a57-80cf-9124aafbce48"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:d6ff8965d1cd47ecad7781625ef087c6a5d96a63b3c62b522a82f168abc46479","timestamp":"2026-11-10T07:39:03.097Z","receipt_uuid":"7189dff6-1235-4cd9-b35b-05b4ae8bf817"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:bed707e5f66f74d9312fa4b109c152c9c1b8ab21dfc864ad44056c99758806a1","timestamp":"2026-11-10T07:39:04.748Z","receipt_uuid":"3da0056e-9b21-456c-b02b-03500cd298f9"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b88013d61ce61fc99c2750b58f4825b3f5975e1408cd628b1c4a7c476690e95f","timestamp":"2026-11-10T07:39:16.876Z","receipt_uuid":"ac4cce4f-bd35-4c90-b39d-d452cbfea10d"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:d285c61a5ece00b18a19f2682c050127ce38a0cb359450f8ea96105743385114","timestamp":"2026-11-10T07:39:17.867Z","receipt_uuid":"d7a316e6-5a34-40f6-8218-be94be283b0c"},{"tool":"write","status":"completed","args_hash":"sha256:03deb0524cd1fe51462587060a459775fbf6f855d75e172bbb6e614b3885f937","timestamp":"2026-11-10T07:39:20.127Z","receipt_uuid":"c2a5937d-42fe-4e1e-828a-7252e980644c"}],"result_preview":"Subject: Zambo is live: automated prompt security and lead research\n\nHi [Name],\n\nZambo is officially live. We built it to solve two specific problems: securing AI workflows from malicious inputs and generating verifiable, source-backed lead data without hallucinations.\n\nThe platform currently operates two core modules. First, PromptShield performs deep semantic analysis and pattern checks against 21 security rules. It identifies critical risks like instruction overrides, jailbreaks, and prompt leaks with high accuracy. It provides a detailed risk assessment, including injection risk levels and specific flagged patterns, ensuring your AI systems remain robust against adversarial attacks. The system returns a comprehensive receipt documenting the scan status, latency, and specific vulnerabilities detected, allowing for precise auditing.\n\nSecond, LeadSignal generates qualified prospects for local service businesses. It requires a trade type and city to return five leads with contact information in under 60 seconds. The tool strictly adheres to research-only protocols; it does not send outreach and does not invent contacts. If no source-backed leads are available for a specific query, such as web design in Austin, TX, it returns a clear \"no results\" status rather than fabricating data. This integrity ensures that any prospect you receive is verifiable.\n\nBoth modules operate on transparent receipt systems. Every action generates a unique URL that proves the execution parameters and results. For PromptShield, this receipt confirms the security scan details. For LeadSignal, it confirms the search parameters and the resulting lead count. These receipts serve as immutable logs of your operations, proving that saved bytes remain unchanged and that results are derived from actual data sources, not generative guesses.\n\nWe are launching with a free tier that allows for initial testing. PromptShield is included in the base access, while LeadSignal offers three free searches per day per IP without authentication requirements. This allows you to validate the security depth and lead quality immediately without commitment.\n\nTo get started, access the dashboard to run your first security scan or lead search. You will receive a receipt for each action, which you can share with your team or clients as proof of due diligence. The focus is on reliability and verifiable output.\n\nLet me know if you want to run a test scan or a lead search to see the receipts in action.\n\nBest,\n\n[Your Name]\n[Your Title]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:85a4ef7b32740833309cfcb18d035ae1c32b9496d0e0870076a3377db38af690","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:f0274d5aca04cc717a858465c3ddcc269aa1905a35d75c3e08a629d9b971bf54","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:4cbf18a72b225970f3575afdbf470e8b1b869b0675247cd629d7f19eab532368","anchor":{"event_id":"1dc884923acb07b353ff1130d03b17c65537dc13bd5dcbaa59becdf723819d67","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-10T07:39:20.694Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-10T07:39:20.127Z","evidence_url":null,"receipt_uuid":"c2a5937d-42fe-4e1e-828a-7252e980644c","output_sha256":"sha256:085d052fc4c86671592dfcc6968ebb126f0d7e59eebfba3693c1d49c8fe8c0e7","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-10T07:39:20.127Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:085d052fc4c86671592dfcc6968ebb126f0d7e59eebfba3693c1d49c8fe8c0e7\",\"receipt_uuid\":\"c2a5937d-42fe-4e1e-828a-7252e980644c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-10T07:39:20.127Z","detail":"The receipt store reports 2026-11-10T07:39:20.127Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:dac783e4e92dca7fe00882a1174e477f4b3bacd20d1b082b0506461ddfd9bab8"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:085d052fc4c86671592dfcc6968ebb126f0d7e59eebfba3693c1d49c8fe8c0e7","computed_hash":"sha256:085d052fc4c86671592dfcc6968ebb126f0d7e59eebfba3693c1d49c8fe8c0e7","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}