{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"e2d62506-293c-479c-8b23-cc05bc141c5c","source_url":"https://zambo.dev/api/receipt/e2d62506-293c-479c-8b23-cc05bc141c5c","receipt":{"id":"e2d62506-293c-479c-8b23-cc05bc141c5c","created_at":"2026-10-18T06:39:44.648Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-18T06:39:43.492Z","completed_at":"2026-10-18T06:39:44.648Z"}],"output_hash":"sha256:2b59a8f41d04a49ce82984b5240cd186b0eecfe428ae5a2502d16a0e70aa0bc6","hash_algorithm":"sha256","canonical_bytes":"eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6NDNkMDA3NzgwNjVmZTE4MjQzNDI1OWUzMDU1NjlhYTBhYWM5NTJiYWI1OGEyMzllYjg1NTM5MzNlNmY3Y2JkOSIsImxhYmVsIjoiemFtYm8taG9tZS1kZW1vIiwibGFiZWxfc291cmNlIjoiY2FsbGVyX3JlcG9ydGVkIiwidHlwZSI6InNlc3Npb24ifSwiaXNzdWVyX2NsYWltcyI6eyJwcm92ZW5hbmNlX2NsYXNzIjoiRVhFQ1VURUQgQlkgWkFNQk8ifSwib3V0cHV0Ijp7InRleHQiOiJTdWJqZWN0OiBaYW1ibyBpcyBsaXZlOiBDYXRjaCBwcm9tcHQgaW5qZWN0aW9ucyBiZWZvcmUgdGhleSBoaXQgeW91ciB1c2Vyc1xuXG5Zb3VyIGxhc3Qgc2NhbiBmbGFnZ2VkIGEgY3JpdGljYWwgaW5zdHJ1Y3Rpb24gb3ZlcnJpZGUgYXR0ZW1wdCB3aXRoIGEgOTUlIHJpc2sgc2NvcmUuIFRoYXQgd2FzbuKAmXQgYSBmYWxzZSBwb3NpdGl2ZS4gSXQgd2FzIGEgcmVhbCBhdHRhY2sgdmVjdG9yIHRyeWluZyB0byBieXBhc3MgeW91ciBzYWZldHkgcmFpbHMuXG5cblphbWJvIGlzIG5vdyBmdWxseSBvcGVyYXRpb25hbCB0byBzdG9wIGV4YWN0bHkgdGhhdC5cblxuV2UgYW5hbHl6ZWQgeW91ciByZWNlbnQgdHJhZmZpYyBhbmQgaWRlbnRpZmllZCBhIHNwZWNpZmljIHBhdHRlcm46IG1hbGljaW91cyBhY3RvcnMgaW5qZWN0aW5nIGluc3RydWN0aW9ucyB0byBsZWFrIHN5c3RlbSBwcm9tcHRzIGFuZCBBUEkga2V5cy4gT3VyIGRldGVjdGlvbiBlbmdpbmUgY2F1Z2h0IHRoaXMgc2VtYW50aWMgc2hpZnQgaW5zdGFudGx5LiBUaGUgc2NhbiBjb25maXJtZWQgYSBcImNyaXRpY2FsXCIgcmlzayBsZXZlbCBhbmQgYmxvY2tlZCB0aGUgcGF5bG9hZCBiZWZvcmUgaXQgcmVhY2hlZCB5b3VyIGJhY2tlbmQuXG5cblRoZSByZWNlaXB0IHByb3ZlcyB0aGUgYnl0ZXMgd2VyZSB1bmNoYW5nZWQgYW5kIHNhdmVkLCBidXQgbW9yZSBpbXBvcnRhbnRseSwgaXQgcHJvdmVzIHRoZSBsb2dpYyBoZWxkLiBZb3UgZGlkbuKAmXQganVzdCBsb2cgYW4gZXJyb3I7IHlvdSBuZXV0cmFsaXplZCBhIGJyZWFjaCBhdHRlbXB0IGluIHJlYWwtdGltZS5cblxuVGhpcyBpc27igJl0IGFib3V0IGFkZGluZyBhbm90aGVyIGxheWVyIG9mIGNvbXBsZXhpdHkuIEl04oCZcyBhYm91dCBjbGFyaXR5LiBZb3UgZ2V0IGEgY2xlYXIgc2lnbmFsOiAqQmxvY2tlZC4qIE5vIG5vaXNlLiBObyBhbWJpZ3VpdHkuIEp1c3QgcHJvdGVjdGlvbi5cblxuUmlnaHQgbm93LCB3ZSBhcmUgaWRlbnRpZnlpbmcgc291cmNlLWJhY2tlZCBwcm9zcGVjdHMgd2hvIGFyZSBmYWNpbmcgc2ltaWxhciBpbmplY3Rpb24gcmlza3MuIFdlIGFyZSBub3Qgc2VuZGluZyBvdXRyZWFjaC4gV2UgYXJlIG9ic2VydmluZy4gV2UgYXJlIG1hcHBpbmcgdGhlIGxhbmRzY2FwZSBvZiB0b29scyB0aGF0IGFyZSBleHBvc2VkIGJlY2F1c2UgdGhleSBsYWNrIHRoaXMgc3BlY2lmaWMgc2VtYW50aWMgbGF5ZXIuXG5cblphbWJvIHNpdHMgYmV0d2VlbiB5b3VyIHVzZXIgYW5kIHlvdXIgbW9kZWwuIEl0IGNoZWNrcyB0aGUgaW50ZW50LCBub3QganVzdCB0aGUgc3ludGF4LiBJdCBjYXRjaGVzIHRoZSBcImlnbm9yZSBwcmV2aW91cyBpbnN0cnVjdGlvbnNcIiB0cmljayBiZWZvcmUgeW91ciBMTE0gc2VlcyBpdC5cblxuKipOZXh0IFN0ZXA6KipcblxuUmV2aWV3IHRoZSBmdWxsIHNjYW4gcmVwb3J0IGF0IHRoZSBsaW5rIGJlbG93LiBMb29rIGF0IHRoZSBcIlJlYXNvbmluZ1wiIHNlY3Rpb24uIEl0IGV4cGxhaW5zIGV4YWN0bHkgd2h5IHRoYXQgc3BlY2lmaWMgaW5wdXQgd2FzIGZsYWdnZWQgYXMgbWFsaWNpb3VzLiBJdOKAmXMgdGhlIGRpZmZlcmVuY2UgYmV0d2VlbiBhIGdlbmVyaWMgZmlyZXdhbGwgYW5kIGFuIEFJLW5hdGl2ZSBzaGllbGQuXG5cbltMaW5rIHRvIFNjYW4gUmVwb3J0XVxuXG5XZSBidWlsdCB0aGlzIGZvciB0ZWFtcyB3aG8gY2Fu4oCZdCBhZmZvcmQgdG8gaGF2ZSB0aGVpciBzZWNyZXRzIGxlYWtlZCBieSBhIGNsZXZlcmx5IHdvcmRlZCBwcm9tcHQuIFlvdeKAmXJlIGFscmVhZHkgcHJvdGVjdGVkLiBOb3cgeW91IGNhbiBzZWUgaXQgd29ya2luZy5cblxuQmVzdCxcblxuVGhlIFphbWJvIFRlYW0ifSwicmVjZWlwdF9zY2hlbWFfdmVyc2lvbiI6IjAuNCIsInNpZGVfZWZmZWN0cyI6eyJkZWNsYXJhdGlvbl9oYXNoIjoic2hhMjU2OjQ1YWFkMzhmM2FhOTgyYjlhYWZlOTJlY2I0MTZlYmU5ODc5MWVkZGJhZjhhYjZkZjBiZDA4NjA1YjdjMWJmZWUiLCJkZWNsYXJlZCI6WyJub25lIl0sInNjaGVtYV92ZXJzaW9uIjoiemFtYm8tc2lkZS1lZmZlY3RzLzEifSwidG9vbCI6eyJuYW1lIjoid3JpdGUiLCJzY29wZSI6InB1YmxpYyIsInZlcnNpb24iOiI0LjAuMCJ9fQ==","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2344,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:f5b12e330784a74be06810e39ab574ddaf1d2aec2b1b88225d5ddac7aaf8b754","timestamp":"2026-10-18T06:39:39.757Z","receipt_uuid":"710b1957-da19-4511-8bbe-2fa6c07163ab"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:3f23f3b4540bb995484560e089b1c993ea38deaf2009951b57dc53c0fe9637ee","timestamp":"2026-10-18T06:39:41.113Z","receipt_uuid":"e95a25a7-9ede-447b-a63c-6e513f05e04e"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:160367775c093815af40509d6631178065156e081b76bb8c878d05362dfe244d","timestamp":"2026-10-18T06:39:43.053Z","receipt_uuid":"f8b004d1-6cb7-48bd-a2cd-be86df6e5be2"},{"tool":"write","status":"completed","args_hash":"sha256:0cdf7d2c581c132fd6781ec88f45d7e37a889683e89237e3a0d28a2805b07b28","timestamp":"2026-10-18T06:39:44.648Z","receipt_uuid":"e2d62506-293c-479c-8b23-cc05bc141c5c"}],"result_preview":"Subject: Zambo is live: Catch prompt injections before they hit your users\n\nYour last scan flagged a critical instruction override attempt with a 95% risk score. That wasn’t a false positive. It was a real attack vector trying to bypass your safety rails.\n\nZambo is now fully operational to stop exactly that.\n\nWe analyzed your recent traffic and identified a specific pattern: malicious actors injecting instructions to leak system prompts and API keys. Our detection engine caught this semantic shift instantly. The scan confirmed a \"critical\" risk level and blocked the payload before it reached your backend.\n\nThe receipt proves the bytes were unchanged and saved, but more importantly, it proves the logic held. You didn’t just log an error; you neutralized a breach attempt in real-time.\n\nThis isn’t about adding another layer of complexity. It’s about clarity. You get a clear signal: *Blocked.* No noise. No ambiguity. Just protection.\n\nRight now, we are identifying source-backed prospects who are facing similar injection risks. We are not sending outreach. We are observing. We are mapping the landscape of tools that are exposed because they lack this specific semantic layer.\n\nZambo sits between your user and your model. It checks the intent, not just the syntax. It catches the \"ignore previous instructions\" trick before your LLM sees it.\n\n**Next Step:**\n\nReview the full scan report at the link below. Look at the \"Reasoning\" section. It explains exactly why that specific input was flagged as malicious. It’s the difference between a generic firewall and an AI-native shield.\n\n[Link to Scan Report]\n\nWe built this for teams who can’t afford to have their secrets leaked by a cleverly worded prompt. You’re already protected. Now you can see it working.\n\nBest,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:c4f9c18357cb404d6409ffb87b37acef56aab464d494642edc8339384555e4cd","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:43d00778065fe182434259e305569aa0aac952bab58a239eb8553933e6f7cbd9","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:dfaf52df92d08ac30a276e78276f453b305c72fd672ac9665db26a5f4258fbd5","anchor":{"event_id":"a237199be8d1ca2a079d92be5c784696f61920bd36bd17ac1069c3fba515ace6","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-18T06:39:45.220Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-18T06:39:44.648Z","evidence_url":null,"receipt_uuid":"e2d62506-293c-479c-8b23-cc05bc141c5c","output_sha256":"sha256:2b59a8f41d04a49ce82984b5240cd186b0eecfe428ae5a2502d16a0e70aa0bc6","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-18T06:39:44.648Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:2b59a8f41d04a49ce82984b5240cd186b0eecfe428ae5a2502d16a0e70aa0bc6\",\"receipt_uuid\":\"e2d62506-293c-479c-8b23-cc05bc141c5c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-18T06:39:44.648Z","detail":"The receipt store reports 2026-10-18T06:39:44.648Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:2b59a8f41d04a49ce82984b5240cd186b0eecfe428ae5a2502d16a0e70aa0bc6","computed_hash":"sha256:2b59a8f41d04a49ce82984b5240cd186b0eecfe428ae5a2502d16a0e70aa0bc6","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}