{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"de6cc7d7-0f36-455a-be71-e2c0141ef69a","source_url":"https://zambo.dev/api/receipt/de6cc7d7-0f36-455a-be71-e2c0141ef69a","receipt":{"id":"de6cc7d7-0f36-455a-be71-e2c0141ef69a","created_at":"2026-10-16T16:41:05.822Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T16:41:04.532Z","completed_at":"2026-10-16T16:41:05.822Z"}],"output_hash":"sha256:03143175b3687d3546a3362017a9900fab5ca93f992d96cd0f99ab9371e5bcf2","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2476,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:92607f270fc7663800e692076df70314a8ddcda1640ff4262b5c3d1febb9dd24","timestamp":"2026-10-16T16:40:56.428Z","receipt_uuid":"b183b668-27d8-401a-94e9-15e4d249c605"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:87765728037bc4002dd604dc224017837c69737adfbb79e66bc6e85c9e94f050","timestamp":"2026-10-16T16:40:57.755Z","receipt_uuid":"ccc93165-461d-4034-ba49-ea6c1d01f3e4"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:e9ea8a81a44fc6abcbb17aa09dd4a6d9ea81024f75a9a292e488ec07b4656a68","timestamp":"2026-10-16T16:41:03.992Z","receipt_uuid":"9ea386c7-9cb0-4a91-9fae-342fd3e8d415"},{"tool":"write","status":"completed","args_hash":"sha256:0d2a8e9ea2ff33e0697a2a09a55a31f254b8180c1572d9516b5b53c60aa9cbf8","timestamp":"2026-10-16T16:41:05.822Z","receipt_uuid":"de6cc7d7-0f36-455a-be71-e2c0141ef69a"}],"result_preview":"Subject: Zambo is live: Stop guessing if your AI output is safe\n\nYou’ve seen the logs. The risk is no longer theoretical; it’s a critical 95% injection score on a single line of code.\n\nZambo is now available. We built it to stop the noise before it hits your production environment.\n\nThe platform runs a deep-scan mode that detects policy bypasses, jailbreaks, and instruction overrides in real-time. It doesn’t just flag text; it isolates the attack vector. When a prompt attempts to extract system secrets or override core directives, Zambo blocks the payload instantly.\n\nThis isn’t a security theater tool. It’s a hard gate.\n\nConsider the recent scan data. A request designed to look like a standard API call triggered an `ignore_instructions` pattern. The system identified the intent as malicious, classified the attack vector as `instruction_override`, and blocked the execution. The receipt confirms the bytes were saved unchanged, proving the integrity of the data path.\n\nYou get a clear binary: safe or blocked. No ambiguous warnings. No manual review queues that clog your team’s day.\n\nThe integration is straightforward. Connect your endpoint, set your threshold, and let the shield handle the traffic. You keep your focus on building the product, not cleaning up the prompt.\n\nAccess is open now. The free tier allows unlimited calls for initial testing and validation. For teams needing full-scale protection, the Zambo Pass bundles the advanced detection layers.\n\n**The next step is simple.**\n\nClick the link below to run your first test scan. Use a known malicious prompt from your internal red-team library. Watch Zambo flag it in under two seconds. If it holds, you’re ready. If not, tell us why.\n\nhttps://zambo.dev/api/prompt-shield\n\nWe built this for developers who refuse to choose between speed and safety. The tool is sharp. The documentation is clear. The shield is up.\n\nGo test it.\n\nBest,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:b4a65d385eb0b821e2db3272c37dc57bec0c3d17e87cc8b2afbe816b75fa47ab","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:d69486b938ace8a33da14fce3b688946b0391ebbfc996bf1ad5383437063ce8c","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:e2e2c03881d883e34a33c56613f53d481220a2a41be22553b92922b8817f9ac0","anchor":{"event_id":"5fa6e8e04948334758a94cee89d14440bff7c6f581488ea5462020788b477792","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-16T16:41:06.395Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T16:41:05.822Z","evidence_url":null,"receipt_uuid":"de6cc7d7-0f36-455a-be71-e2c0141ef69a","output_sha256":"sha256:03143175b3687d3546a3362017a9900fab5ca93f992d96cd0f99ab9371e5bcf2","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T16:41:05.822Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:03143175b3687d3546a3362017a9900fab5ca93f992d96cd0f99ab9371e5bcf2\",\"receipt_uuid\":\"de6cc7d7-0f36-455a-be71-e2c0141ef69a\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T16:41:05.822Z","detail":"The receipt store reports 2026-10-16T16:41:05.822Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:03143175b3687d3546a3362017a9900fab5ca93f992d96cd0f99ab9371e5bcf2","computed_hash":"sha256:03143175b3687d3546a3362017a9900fab5ca93f992d96cd0f99ab9371e5bcf2","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}