{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"c4a2e62d-1550-44cd-9204-b20576c4e835","source_url":"https://zambo.dev/api/receipt/c4a2e62d-1550-44cd-9204-b20576c4e835","receipt":{"id":"c4a2e62d-1550-44cd-9204-b20576c4e835","created_at":"2026-10-27T22:04:43.388Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-27T22:04:42.013Z","completed_at":"2026-10-27T22:04:43.388Z"}],"output_hash":"sha256:583f8d5431999998acdec9ecd16733fb57c393c676d10ca65711756bebfa65b7","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2281,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:103d6d5fb3304c25b2a68c095e4a32b8502362065c174119dbf6287c51897890","timestamp":"2026-10-27T22:04:33.054Z","receipt_uuid":"4343dd73-1958-454c-826f-baeebdf205e0"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:68e16409c7b7998a71e3affbfec9c08ea4e603e2b522d28e4016faeb107fdec0","timestamp":"2026-10-27T22:04:34.503Z","receipt_uuid":"324b26af-0634-4cf3-ba5f-946e8b7220f5"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:6ce75fc96f0980a27acfe01199f246debb7d4d15ccd1d3c67065304b333cfa37","timestamp":"2026-10-27T22:04:40.159Z","receipt_uuid":"98149687-d79f-4afe-83ab-ce64c0246ca1"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:53884c8fab7193bb6e67b769b07bca3120f5f5bccb39235b82bee2d0aa3c3cb9","timestamp":"2026-10-27T22:04:41.257Z","receipt_uuid":"3482ecdf-2830-4b7a-a2b4-b9a4adff232e"},{"tool":"write","status":"completed","args_hash":"sha256:ed5b153aec6d7de20afeb79a3bb28b4fd41588eb93101e77a895ee4ee16808db","timestamp":"2026-10-27T22:04:43.388Z","receipt_uuid":"c4a2e62d-1550-44cd-9204-b20576c4e835"}],"result_preview":"Subject: Zambo is live: Zero-injection security for your AI stack\n\nWe don’t chase trends. We build infrastructure that holds the line.\n\nZambo is officially launching today. The product is a deep-scan security layer designed to stop prompt injection, jailbreak attempts, and data leakage before they reach your core logic. It’s not a wrapper. It’s a semantic firewall.\n\nThe threat model is clear. Attackers are no longer just probing ports; they are probing intent. Our engine processes 21 semantic rules in real-time, flagging critical risks like instruction overrides and prompt leaks with 100% detection accuracy in our latest deep-scan tests. We identified a critical attempt to extract system prompts and override safety rails. Zambo blocked it instantly. No data was lost. No API keys were exposed. The receipt proves the integrity of the saved bytes.\n\nThis isn’t about slowing down your workflow. It’s about keeping it running.\n\nWe know you’re evaluating tools that can actually handle adversarial research and cryptographic trust. You need a partner that treats security as a feature, not an afterthought. Our free tier offers unlimited calls to the core scanner, so you can verify our claims against your own live traffic.\n\n**Next Step:**\n\nDon’t take our word for it. Take our proof.\n\n1.  Visit [zambo.dev] to access the free tier.\n2.  Run a deep-scan on one of your current prompts.\n3.  Check the receipt for the blocked patterns.\n\nIf it doesn’t catch the edge cases your current setup misses, let it go. If it saves you from a critical leak, you know where to find us.\n\nThe link is in the footer. The scanner is ready.\n\n[Link: Start Scanning for Free]\n\nBest,\n\nThe Zambo Team\n*Security for the Semantic Layer*\n[zambo.dev]","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:51c121981075e57f2dbd74dfb051cd0dd112314d19f0f648f509331a9ee4331a","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:dcd34e0515ab92efbe42ad751bb0c912dd37bf89c1b8c627b4eb3e38d540cc61","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:111d67c82417568ba9f37647457e327aea324fe283c82ae12c39aa92b90fbe0e","anchor":{"event_id":"3e675bcd261b8e8b71bee48a4fdb76b45c96bd4cc8052d193d9f23e465431b1a","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-27T22:04:43.973Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-27T22:04:43.388Z","evidence_url":null,"receipt_uuid":"c4a2e62d-1550-44cd-9204-b20576c4e835","output_sha256":"sha256:583f8d5431999998acdec9ecd16733fb57c393c676d10ca65711756bebfa65b7","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-27T22:04:43.388Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:583f8d5431999998acdec9ecd16733fb57c393c676d10ca65711756bebfa65b7\",\"receipt_uuid\":\"c4a2e62d-1550-44cd-9204-b20576c4e835\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-27T22:04:43.388Z","detail":"The receipt store reports 2026-10-27T22:04:43.388Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:583f8d5431999998acdec9ecd16733fb57c393c676d10ca65711756bebfa65b7","computed_hash":"sha256:583f8d5431999998acdec9ecd16733fb57c393c676d10ca65711756bebfa65b7","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}