{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"d5b85c9e-14a6-4f9c-ad7f-a2974d1120be","source_url":"https://zambo.dev/api/receipt/d5b85c9e-14a6-4f9c-ad7f-a2974d1120be","receipt":{"id":"d5b85c9e-14a6-4f9c-ad7f-a2974d1120be","created_at":"2026-10-19T18:09:56.204Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T18:09:55.136Z","completed_at":"2026-10-19T18:09:56.204Z"}],"output_hash":"sha256:9aee085f78e08bfe5601b8a0f36e9db07bc2e03a9aac574122fffee508d6d165","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2234,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:7eb834cc39cf86f331bc5e208caaf144e7de4a9f59d93017382848f069b0ec35","timestamp":"2026-10-19T18:09:51.359Z","receipt_uuid":"f7f9c780-6c01-4a69-a5b0-78e9fe01e546"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:76d49050b622cfa536a52b24b841502844fd1ac8862c14a1c8bb294658b0a757","timestamp":"2026-10-19T18:09:52.566Z","receipt_uuid":"b48b6232-7c50-4e69-a1e1-85a80f48f31e"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:92461dd49211940c61db573a51bb009d72305356d7fdb7b1462438e2b18a7cd8","timestamp":"2026-10-19T18:09:54.576Z","receipt_uuid":"7fb41ef1-73fa-482f-a01a-d1f6988c02b5"},{"tool":"write","status":"completed","args_hash":"sha256:ed04401e8e340655c79420490e750bd85cbe064eb8e52bedbbf67984179de269","timestamp":"2026-10-19T18:09:56.204Z","receipt_uuid":"d5b85c9e-14a6-4f9c-ad7f-a2974d1120be"}],"result_preview":"Subject: Your prompt shield caught a critical injection (receipt attached)\n\nWe just ran a deep semantic analysis on a recent interaction, and the results were stark. The system flagged a critical risk with a 95% injection score, identifying a specific jailbreak attempt designed to override instructions and extract private information.\n\nThis isn’t a glitch. It’s a targeted attack vector that relies on semantic pattern matching to bypass standard filters. The scan detected one flagged pattern: an instruction override with critical severity. The intent was malicious, aiming for data extraction via a prompt leak.\n\nHere is the proof: `https://zambo.dev/run/b48b6232-7c50-4e69-a1e1-85a80f48f31e`\n\nThis receipt confirms the bytes were saved and the detection engine fired as intended. It proves the system identified the threat. It does not prove your downstream data is safe if you rely on static rules. Dynamic, semantic analysis is the only way to catch evolving attack patterns like the one just blocked.\n\nWe have also identified a relevant tool in your stack, `substrate_breakthroughs`, which offers read-only research feeds for AI breakthroughs. This tool is fully executable in chat and currently on the free tier. It aligns with your need for source-backed insights without the risk of outbound leakage.\n\n**Next Step:**\nReview the receipt link above. If you want to ensure your other AI endpoints have this level of semantic defense, let’s schedule a 10-minute technical audit. We will map your current detection rules against the 18-pattern library to find gaps before the next critical hit.\n\nReply with \"Audit\" and your preferred time slot.\n\nBest,\n\n[Your Name]\nZambo Team\nhttps://zambo.dev","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:a1c3ba652a4a303b1ec17ca90e85176c64b4285d5e01bc565e13d10f65e526dd","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:59bd1dab9f5bf49c4e0cb2726001bfbe0d817afb83b11ca806b96e3e7d60738a","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:4f057808c7f40cfadd64b89c7ef15d54861ee7b1ba8404ccf785dbbf8f30c191","anchor":{"event_id":"b336397265c358797c4c81e0ca9399528fbf4d6ebfdac9d273be3d0ff0526887","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-19T18:09:56.779Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T18:09:56.204Z","evidence_url":null,"receipt_uuid":"d5b85c9e-14a6-4f9c-ad7f-a2974d1120be","output_sha256":"sha256:9aee085f78e08bfe5601b8a0f36e9db07bc2e03a9aac574122fffee508d6d165","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T18:09:56.204Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:9aee085f78e08bfe5601b8a0f36e9db07bc2e03a9aac574122fffee508d6d165\",\"receipt_uuid\":\"d5b85c9e-14a6-4f9c-ad7f-a2974d1120be\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T18:09:56.204Z","detail":"The receipt store reports 2026-10-19T18:09:56.204Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:9aee085f78e08bfe5601b8a0f36e9db07bc2e03a9aac574122fffee508d6d165","computed_hash":"sha256:9aee085f78e08bfe5601b8a0f36e9db07bc2e03a9aac574122fffee508d6d165","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}