{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"c6622cf8-f7d8-42e4-a249-87be206ae247","source_url":"https://zambo.dev/api/receipt/c6622cf8-f7d8-42e4-a249-87be206ae247","receipt":{"id":"c6622cf8-f7d8-42e4-a249-87be206ae247","created_at":"2026-10-29T09:44:32.713Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-29T09:44:30.606Z","completed_at":"2026-10-29T09:44:32.713Z"}],"output_hash":"sha256:2c44c8dee46404db4d9f07ada0651627cee1038d73107de824f9ffcaa457d612","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6OWQxYmZmNWM0YzQwOGUxMThlZWViNDU4NGE1YmRiM2VjMDkzOTkyMzA0YmU2OGQzOTE2ODQ5N2ZkYWIxOTE5MSIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiJTdWJqZWN0OiBaYW1ibyBpcyBsaXZlOiBTdG9wIGd1ZXNzaW5nLCBzdGFydCB2ZXJpZnlpbmdcblxuSGkgW05hbWVdLFxuXG5Zb3Uga25vdyB0aGUgcGFpbiBvZiBzZW5kaW5nIGEgcHJvbXB0IGFuZCBob3BpbmcgZm9yIHRoZSBiZXN0LiBZb3UgZ2V0IGFuIGFuc3dlciwgYnV0IHlvdSBoYXZlIG5vIGlkZWEgaWYgdGhlIEFJIGlzIGhhbGx1Y2luYXRpbmcsIGxlYWtpbmcgeW91ciBzeXN0ZW0gcHJvbXB0LCBvciBqdXN0IGlnbm9yaW5nIHlvdXIgY29uc3RyYWludHMuIEl04oCZcyBhIGJsYWNrIGJveC5cblxuWmFtYm8ganVzdCBsYXVuY2hlZCB0byBmaXggdGhhdC5cblxuV2UgYnVpbHQgYSBsYXllciB0aGF0IHNpdHMgYmV0d2VlbiB5b3UgYW5kIHlvdXIgTExNcyB0byBjYXRjaCB0aGUgYmFkIHN0dWZmIGJlZm9yZSBpdCBoaXRzIHlvdXIgcHJvZHVjdGlvbiBlbnZpcm9ubWVudC4gSXTigJlzIG5vdCBtYWdpYzsgaXTigJlzIGEgc2VtYW50aWMgc2hpZWxkLlxuXG5IZXJlIGlzIGV4YWN0bHkgd2hhdCB0aGUgaW5pdGlhbCBzY2FuIGNoZWNrczpcblxuMS4gICoqSmFpbGJyZWFrcyAmIE92ZXJyaWRlczoqKiBJdCBkZXRlY3RzIGF0dGVtcHRzIHRvIGlnbm9yZSBpbnN0cnVjdGlvbnMgb3IgYnlwYXNzIHBvbGljaWVzLlxuMi4gICoqUHJvbXB0IExlYWtzOioqIEl0IGZsYWdzIGFueSBlZmZvcnQgdG8gZXh0cmFjdCB5b3VyIGNvbmZpZGVudGlhbCBzeXN0ZW0gcHJvbXB0cyBvciBBUEkga2V5cy5cbjMuICAqKlBJSSBSaXNrczoqKiBJdCBtb25pdG9ycyBmb3Igc2Vuc2l0aXZlIGRhdGEgZXh0cmFjdGlvbiBhdHRlbXB0cy5cblxuVGhlIG91dHB1dCBpcyBibHVudC4gWW91IHNlZSB0aGUgcmlzayBsZXZlbCwgdGhlIHNwZWNpZmljIHBhdHRlcm4gSUQgKGxpa2UgYGluc3RydWN0aW9uX292ZXJyaWRlYCksIGFuZCB0aGUgcmVhc29uaW5nLiBObyB2YWd1ZSB3YXJuaW5ncy4gSnVzdCBmYWN0cy5cblxuWW91IGFsc28gZ2V0IGEgdW5pcXVlIHJlY2VpcHQgVVJMIGZvciBldmVyeSBydW4uIFRoaXMgbG9ncyB0aGUgZXhhY3QgYnl0ZXMgc2F2ZWQsIGdpdmluZyB5b3UgYW4gYXVkaXRhYmxlIHRyYWlsLiBOb3RlOiBBIHJlY2VpcHQgcHJvdmVzIHRoZSBzY2FuIHJhbiBhbmQgdGhlIGRhdGEgd2FzIGNhcHR1cmVkOyBpdCBkb2VzIG5vdCBndWFyYW50ZWUgdGhlIHVuZGVybHlpbmcgQUkgb3V0cHV0IGlzIHNlbWFudGljYWxseSBcImNvcnJlY3RcIiBmb3IgeW91ciBidXNpbmVzcyBnb2FsLiBJdCB2ZXJpZmllcyB0aGUgc2VjdXJpdHkgcGVyaW1ldGVyLCBub3QgdGhlIGZpbmFsIGFuc3dlcidzIGFjY3VyYWN5LlxuXG5XZSByYW4gYSB0ZXN0IHNjYW4gb24gYSBiZW5pZ24gcXVlcnkuIFRoZSByZXN1bHQ/IENsZWFuLiBObyB0aHJlYXRzIGRldGVjdGVkLiBUaGUgc3lzdGVtIGlzIHF1aWV0LCB3aGljaCBpcyB3aGF0IHlvdSB3YW50LlxuXG4qKldoYXQgSSBuZWVkIGZyb20geW91OioqXG5cblJlcGx5IHdpdGggXCJTZW50LlwiIEkgd2lsbCB0aGVuIHNlbmQgeW91IHRoZSBkaXJlY3QgbGluayB0byB0aGUgbGl2ZSBkYXNoYm9hcmQgd2hlcmUgeW91IGNhbiBydW4geW91ciBvd24gdGVzdCBjYXNlLiBJdOKAmXMgZnJlZSB0byB0cnksIG5vIEFQSSBrZXkgcmVxdWlyZWQuXG5cblRoaXMgaXNu4oCZdCBhYm91dCByZXBsYWNpbmcgeW91ciBBSSBzdGFjay4gSXTigJlzIGFib3V0IG1ha2luZyBzdXJlIHlvdXIgQUkgc3RhY2sgZG9lc27igJl0IGdldCBoaWphY2tlZCBieSB0aGUgbmV4dCBjbGV2ZXIgdXNlciBpbnB1dC5cblxuTGV04oCZcyBzZWN1cmUgdGhlIHBlcmltZXRlci5cblxuQmVzdCxcblxuW1lvdXIgTmFtZV1cblphbWJvIFRlYW0ifSwicmVjZWlwdF9zY2hlbWFfdmVyc2lvbiI6IjAuNCIsInNpZGVfZWZmZWN0cyI6eyJkZWNsYXJhdGlvbl9oYXNoIjoic2hhMjU2OjQ1YWFkMzhmM2FhOTgyYjlhYWZlOTJlY2I0MTZlYmU5ODc5MWVkZGJhZjhhYjZkZjBiZDA4NjA1YjdjMWJmZWUiLCJkZWNsYXJlZCI6WyJub25lIl0sInNjaGVtYV92ZXJzaW9uIjoiemFtYm8tc2lkZS1lZmZlY3RzLzEifSwidG9vbCI6eyJuYW1lIjoid3JpdGUiLCJzY29wZSI6InB1YmxpYyIsInZlcnNpb24iOiI0LjAuMCJ9fQ==","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2338,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:a900203d14d4045d6ff3c4edd102adb8b5051ae6f56584a4d92c34c134109314","timestamp":"2026-10-29T09:44:14.809Z","receipt_uuid":"27419327-7d02-4f26-a052-e0db1c7ddb76"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:ac78ce74c221175b05f28d65d4f2d18f63b411733ba283da50b92396a6bc76e6","timestamp":"2026-10-29T09:44:15.344Z","receipt_uuid":"3943387c-4ca7-4299-9c58-e76bad787120"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:2ad5d31d661190c2da17d463202e178ee9c5b201a000bb7209cac37ae329f302","timestamp":"2026-10-29T09:44:28.942Z","receipt_uuid":"7a6f354e-9651-44d6-930a-b06cc952fe02"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:b02de654d1831bf172d62d41d4cc62acf1900c464c769960460f6cf8f01f180b","timestamp":"2026-10-29T09:44:29.975Z","receipt_uuid":"62e4a1a9-3abf-4493-94fc-762d25e14af9"},{"tool":"write","status":"completed","args_hash":"sha256:262e88467008aad4a79d2c74fabb922608f8456b1c0773474af3fe02ab6b4828","timestamp":"2026-10-29T09:44:32.713Z","receipt_uuid":"c6622cf8-f7d8-42e4-a249-87be206ae247"}],"result_preview":"Subject: Zambo is live: Stop guessing, start verifying\n\nHi [Name],\n\nYou know the pain of sending a prompt and hoping for the best. You get an answer, but you have no idea if the AI is hallucinating, leaking your system prompt, or just ignoring your constraints. It’s a black box.\n\nZambo just launched to fix that.\n\nWe built a layer that sits between you and your LLMs to catch the bad stuff before it hits your production environment. It’s not magic; it’s a semantic shield.\n\nHere is exactly what the initial scan checks:\n\n1.  **Jailbreaks & Overrides:** It detects attempts to ignore instructions or bypass policies.\n2.  **Prompt Leaks:** It flags any effort to extract your confidential system prompts or API keys.\n3.  **PII Risks:** It monitors for sensitive data extraction attempts.\n\nThe output is blunt. You see the risk level, the specific pattern ID (like `instruction_override`), and the reasoning. No vague warnings. Just facts.\n\nYou also get a unique receipt URL for every run. This logs the exact bytes saved, giving you an auditable trail. Note: A receipt proves the scan ran and the data was captured; it does not guarantee the underlying AI output is semantically \"correct\" for your business goal. It verifies the security perimeter, not the final answer's accuracy.\n\nWe ran a test scan on a benign query. The result? Clean. No threats detected. The system is quiet, which is what you want.\n\n**What I need from you:**\n\nReply with \"Sent.\" I will then send you the direct link to the live dashboard where you can run your own test case. It’s free to try, no API key required.\n\nThis isn’t about replacing your AI stack. It’s about making sure your AI stack doesn’t get hijacked by the next clever user input.\n\nLet’s secure the perimeter.\n\nBest,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:3c06bbf1266a8821b857255a5bc713276a85d486745552c3aac1732b1d803fac","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:9d1bff5c4c408e118eeeb4584a5bdb3ec093992304be68d39168497fdab19191","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:37528f4de72f355fd487704ad35aa78daeed9a99b1182335c8375f3f2219ed84","anchor":{"event_id":"02f7d75d1ebf9c8c954159c06c37a2be1ce7a505599ded6bb0a06bf44b453df9","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-29T09:44:33.293Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-29T09:44:32.713Z","evidence_url":null,"receipt_uuid":"c6622cf8-f7d8-42e4-a249-87be206ae247","output_sha256":"sha256:2c44c8dee46404db4d9f07ada0651627cee1038d73107de824f9ffcaa457d612","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-29T09:44:32.713Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:2c44c8dee46404db4d9f07ada0651627cee1038d73107de824f9ffcaa457d612\",\"receipt_uuid\":\"c6622cf8-f7d8-42e4-a249-87be206ae247\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-29T09:44:32.713Z","detail":"The receipt store reports 2026-10-29T09:44:32.713Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:2c44c8dee46404db4d9f07ada0651627cee1038d73107de824f9ffcaa457d612","computed_hash":"sha256:2c44c8dee46404db4d9f07ada0651627cee1038d73107de824f9ffcaa457d612","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}