{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"e2d6b364-8954-45d6-89f2-0d2fda2a59f1","source_url":"https://zambo.dev/api/receipt/e2d6b364-8954-45d6-89f2-0d2fda2a59f1","receipt":{"id":"e2d6b364-8954-45d6-89f2-0d2fda2a59f1","created_at":"2026-10-16T12:41:13.525Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T12:41:12.291Z","completed_at":"2026-10-16T12:41:13.525Z"}],"output_hash":"sha256:5e7f6284d438443c59263b276d1d2292247bd72d42d7176e9266877a35bbfc15","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2556,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:123d9aedf3aeb34a4491b94e5490a34564f5a12955aa06c4413aaee4e6f32e57","timestamp":"2026-10-16T12:41:08.075Z","receipt_uuid":"68a71176-09ad-4f0d-88d7-053d8fc4de63"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:614bce5b494836719a4d194a2e402ae73c9eb379694d7a902a9e0db0ebfba3f7","timestamp":"2026-10-16T12:41:09.311Z","receipt_uuid":"0691349c-d587-4462-a289-aabcc1b3ea0a"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:c7282facc4a0e5288650e8c2fb5996c6b2e0c0b66a97b224aeccf606a7b2e74a","timestamp":"2026-10-16T12:41:11.741Z","receipt_uuid":"2f22fa7f-7d31-42db-8ea0-ee26674266e2"},{"tool":"write","status":"completed","args_hash":"sha256:1d46c5f81698e6b5be5699e72112d828376cd181921ac665c9ada499f236011e","timestamp":"2026-10-16T12:41:13.525Z","receipt_uuid":"e2d6b364-8954-45d6-89f2-0d2fda2a59f1"}],"result_preview":"Subject: Zambo is live: Stop guessing, start verifying\n\nYou’re likely tired of AI outputs that look plausible but fail under scrutiny. You need proof, not promises.\n\nZambo is now available. It’s not a magic box; it’s a verification layer. We built this because \"it works on my machine\" isn’t a security posture.\n\nHere’s exactly what Zambo does:\n\n1.  **Detects Injection Attacks:** It scans prompts for jailbreaks, policy bypasses, and system prompt leaks before they reach your model.\n2.  **Flags Critical Risks:** It identifies high-severity patterns like instruction overrides and malicious intent.\n3.  **Provides Audit Trails:** Every scan generates a receipt. This proves the bytes analyzed. It documents the risk assessment. It does not prove your AI is perfect. It proves you checked.\n\nWe are not selling \"trust.\" We are selling visibility.\n\n**The Reality Check**\nYour competitors are deploying AI agents without guardrails. One successful jailbreak exposes your system prompts, your keys, and your user data. Zambo intercepts this. It’s a deep-scan API that runs in milliseconds.\n\n**What’s Included**\n*   **PromptShield API:** Real-time detection of 18 known attack patterns.\n*   **Risk Scoring:** Critical, High, Medium, Low classifications.\n*   **Receipt Generation:** Immutable logs for compliance and debugging.\n\n**The CTA**\nWe don’t want your credit card yet. We want your worst-case scenario.\n\nSend us one prompt you suspect is vulnerable. We’ll run it through the deep-scan mode. You get the full risk breakdown, the flagged patterns, and the receipt. No account required. No sales call. Just data.\n\nReply to this email with your test prompt. We’ll respond within the hour with the scan results.\n\nThis is how you build safe AI. Not by hoping for the best, but by checking the worst.\n\nBest,\n\n[Your Name]\nZambo Team\n[Link to Zambo Documentation]\n\n*Note: This email contains no personal data. The receipt link in our internal testing is for demonstration of the log format only.*","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:21d370b3f08c5c4346aa2988a68343703992409d4242d81e057718e78ea2208d","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:056fc43161f2bf9c527763e4dbae71a7d718854bc6f07af0fddbcc1d8fa2382a","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:3cdf88e6e160b129ff4068e810525baf869ea4245f2a51b88cebfd75ff53515e","anchor":{"event_id":"6ac6be070c9591f17c93ab723148c4ea2634e5bc083a3a0a4f69b292892ba586","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-16T12:41:14.108Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T12:41:13.525Z","evidence_url":null,"receipt_uuid":"e2d6b364-8954-45d6-89f2-0d2fda2a59f1","output_sha256":"sha256:5e7f6284d438443c59263b276d1d2292247bd72d42d7176e9266877a35bbfc15","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T12:41:13.525Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:5e7f6284d438443c59263b276d1d2292247bd72d42d7176e9266877a35bbfc15\",\"receipt_uuid\":\"e2d6b364-8954-45d6-89f2-0d2fda2a59f1\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T12:41:13.525Z","detail":"The receipt store reports 2026-10-16T12:41:13.525Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:5e7f6284d438443c59263b276d1d2292247bd72d42d7176e9266877a35bbfc15","computed_hash":"sha256:5e7f6284d438443c59263b276d1d2292247bd72d42d7176e9266877a35bbfc15","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}