{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"c394f4e0-7fd3-406d-9adc-6ef230fdbd0f","source_url":"https://zambo.dev/api/receipt/c394f4e0-7fd3-406d-9adc-6ef230fdbd0f","receipt":{"id":"c394f4e0-7fd3-406d-9adc-6ef230fdbd0f","created_at":"2026-10-23T04:22:09.741Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-23T04:22:08.792Z","completed_at":"2026-10-23T04:22:09.741Z"}],"output_hash":"sha256:89820338bbeb6de70b89d6dac420a48a8dd3bfd12102692858fc21e8f308aa48","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1797,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:e01744bb6344f9f23163f44830947e3f458a23d0668a12c1819706de0853991c","timestamp":"2026-10-23T04:22:00.625Z","receipt_uuid":"186d4841-483b-42da-b61e-235c799c580b"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:c57702341e1bed108fc0584e15e5c60de9194dd72f7d5078a4a43c53f482fe20","timestamp":"2026-10-23T04:22:01.089Z","receipt_uuid":"d7563972-6f9a-4a78-bdf3-debd31b07d51"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b550294ad7fbea481c5490c222216fd2a96dc8c20d573a35f4ac78bcb5462101","timestamp":"2026-10-23T04:22:07.522Z","receipt_uuid":"62358aa5-39b3-4178-935f-396f791fd867"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:c87db4918c6f10dd868d420a4e4aacf4a0d72623476f32fb48c07f814b41af7b","timestamp":"2026-10-23T04:22:08.313Z","receipt_uuid":"ada4ef91-3ce0-4342-8bdd-b4bf4ce9582b"},{"tool":"write","status":"completed","args_hash":"sha256:05e4d84be3c9cdf40bf434f357510bdb0e761fcea234e878f5c94664ecf6e9a4","timestamp":"2026-10-23T04:22:09.741Z","receipt_uuid":"c394f4e0-7fd3-406d-9adc-6ef230fdbd0f"}],"result_preview":"Subject: Zambo is live\n\nHi [Name],\n\nI’m writing because you work in web design in Austin, and I noticed you’re exploring AI tools.\n\nZambo just launched. It’s a prompt injection shield that scans your inputs before they hit the model. It’s not a generic filter. It uses semantic analysis and pattern checks to catch instruction overrides, prompt leaks, and malicious intents.\n\nRight now, my LeadSignal search for Austin web designers returned zero source-backed contacts. That means I haven’t scraped your data or guessed your details. I’m reaching out directly because I want to show you the tool in action, not just describe it.\n\nHere’s what it does:\n1. Scans prompts for jailbreak attempts and system prompt extraction.\n2. Returns a risk level (critical, high, medium, low).\n3. Provides a receipt URL for every scan, proving what was checked and what was blocked.\n\nThe free tier includes 20 calls per day. No credit card required.\n\nIf you want to see how it handles a tricky prompt, reply with “test” and I’ll send you a sample receipt. Or, if you’re already using AI in your client work, let’s have a 10-minute call to see if it fits your workflow.\n\nNo sales pitch. Just a tool that keeps your clients’ data safe.\n\nBest,\n\n[Your Name]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:9f15fd0288c0bb0917c7abe70fa95b65470c43ee24ed97cbb6c9b9237374da4b","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:b0e1cca3577c829e94deb4540820acd8570922e7739f8105fec879c5ab7e7854","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:a1774bfadd7d4efaf2e29fbeab4f242d8805e2293baf7e606201e4a416fbb5da","anchor":{"event_id":"f9bcc1f071c072831acd3d5ac056aa44303e25beb3fea445132ec7d7bd56b55f","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-23T04:22:10.302Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-23T04:22:09.741Z","evidence_url":null,"receipt_uuid":"c394f4e0-7fd3-406d-9adc-6ef230fdbd0f","output_sha256":"sha256:89820338bbeb6de70b89d6dac420a48a8dd3bfd12102692858fc21e8f308aa48","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-23T04:22:09.741Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:89820338bbeb6de70b89d6dac420a48a8dd3bfd12102692858fc21e8f308aa48\",\"receipt_uuid\":\"c394f4e0-7fd3-406d-9adc-6ef230fdbd0f\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-23T04:22:09.741Z","detail":"The receipt store reports 2026-10-23T04:22:09.741Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:89820338bbeb6de70b89d6dac420a48a8dd3bfd12102692858fc21e8f308aa48","computed_hash":"sha256:89820338bbeb6de70b89d6dac420a48a8dd3bfd12102692858fc21e8f308aa48","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}