{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"dae6bbbd-d333-4c00-bef0-79b1fd224975","source_url":"https://zambo.dev/api/receipt/dae6bbbd-d333-4c00-bef0-79b1fd224975","receipt":{"id":"dae6bbbd-d333-4c00-bef0-79b1fd224975","created_at":"2026-11-04T11:43:10.710Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-04T11:43:08.791Z","completed_at":"2026-11-04T11:43:10.710Z"}],"output_hash":"sha256:4534bd636acd4a5c209fd9807877974539f4e9926546fa90b43b7a16cfc91d44","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2337,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:4e4ae25b6bd8fdaf355a6cb64778284d223c6c40baf5a7b3ba74ecbad7508cf6","timestamp":"2026-11-04T11:42:54.181Z","receipt_uuid":"6c5c8801-982c-45fe-8c51-42db8c259e3b"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:7f443d778856520775ea28e12c082837f068f8fbb13cfbd93ef2b2562ad15ee9","timestamp":"2026-11-04T11:42:55.545Z","receipt_uuid":"4af2e0d6-1e89-4d57-8a2e-7fcd5bb477d3"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:89a13e25bdd29d57b4bba1828403466e3bb85c9c5ae71ef4e08933a3d0436356","timestamp":"2026-11-04T11:43:07.801Z","receipt_uuid":"82c6eceb-5663-4a96-8572-8703be068268"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:a04d0f14436ac0eedaca58bf3213aeefdfed91a9927a31d8d31d0cadce4a9457","timestamp":"2026-11-04T11:43:08.495Z","receipt_uuid":"9172beca-11f3-4fc9-97f1-6a794114d824"},{"tool":"write","status":"completed","args_hash":"sha256:528c07c9c04a83a0d981a44bb0e66f22e9e57a8e3e62cd76e36db19eba241970","timestamp":"2026-11-04T11:43:10.710Z","receipt_uuid":"dae6bbbd-d333-4c00-bef0-79b1fd224975"}],"result_preview":"Subject: Zambo is live (and the scan results are brutal)\n\nYour launch check flagged a critical security incident before we ever touched the copy.\n\nThe automated scanner marked the initial prompt as malicious—100% injection risk, critical jailbreak detected. It flagged attempts to override system instructions and leak internal prompts.\n\nThis isn’t a glitch. It’s a feature working exactly as designed.\n\nZambo’s semantic analysis caught the payload in 1,305ms. It blocked the execution. It isolated the intent. It protected the underlying stack from extracting your API keys or system logic.\n\nHere is the hard truth from the launch checks:\n\n1.  **Security is locked.** The scanner identified two critical patterns: Instruction Override and Prompt Leak Attempt. Both were blocked. The system remains intact.\n2.  **Lead generation is quiet.** We queried Austin, TX for web design prospects. Zero results. The tool is live, but the market data for that specific niche/city combo is currently empty.\n3.  **Proof of integrity.** The receipt at the bottom proves the bytes saved are unchanged. It verifies the scan ran, the block executed, and the data integrity holds. It does not prove the code is perfect. It proves the guardrails are active.\n\nWe are not sending this to anyone yet.\n\n**Your move:**\n\nReview the scan report linked below. Confirm you understand the injection vector attempted. Then, tell me: do we adjust the safety threshold, or do we proceed with the next trade/city test?\n\nThe tool is ready. The market is waiting. The security layer just saved us from a breach in the first minute of testing.\n\nReceipt: https://zambo.dev/run/4af2e0d6-1e89-4d57-8a2e-7fcd5bb477d3\n\nLead Scan Receipt: https://zambo.dev/run/82c6eceb-5663-4a96-8572-8703be068268\n\nStay sharp,\n\n[Your Name]\nZambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:499a97037f745b1a667df1cb0a68575602d00262f628fcd5d06cd683ae6d09f3","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:debeb16a6c311577b5284b96b1ee18f3f5c12cdbaa312d6c332ab093876a9a29","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:5b9f8e02c7a21cce4ae0626a7bb41ff3de9ff0cde415bad937dd3e85371ab4b9","anchor":{"event_id":"3e1e6c10543b46bdc9aae7f0f2c580dd3c4f39714df4547c23d69560043b8054","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-11-04T11:43:12.176Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-04T11:43:10.710Z","evidence_url":null,"receipt_uuid":"dae6bbbd-d333-4c00-bef0-79b1fd224975","output_sha256":"sha256:4534bd636acd4a5c209fd9807877974539f4e9926546fa90b43b7a16cfc91d44","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-04T11:43:10.710Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:4534bd636acd4a5c209fd9807877974539f4e9926546fa90b43b7a16cfc91d44\",\"receipt_uuid\":\"dae6bbbd-d333-4c00-bef0-79b1fd224975\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-04T11:43:10.710Z","detail":"The receipt store reports 2026-11-04T11:43:10.710Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:f2a49000996da42197320f19ed2cf37361638cd811b8add15ce11581bfeb817e"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:4534bd636acd4a5c209fd9807877974539f4e9926546fa90b43b7a16cfc91d44","computed_hash":"sha256:4534bd636acd4a5c209fd9807877974539f4e9926546fa90b43b7a16cfc91d44","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}