{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"e43c3a55-3dc7-4643-be31-94fb04dfac39","source_url":"https://zambo.dev/api/receipt/e43c3a55-3dc7-4643-be31-94fb04dfac39","receipt":{"id":"e43c3a55-3dc7-4643-be31-94fb04dfac39","created_at":"2026-10-19T22:56:40.069Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-19T22:56:39.291Z","completed_at":"2026-10-19T22:56:40.069Z"}],"output_hash":"sha256:f5c6cad72876f5634093cc5d5a5eeeb801c1d65f76ec59319e4901b3d8048277","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1574,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:9783448b43bb1aae00f02fbd6a5f066e5701577030feac25fb2c12d532bafb8e","timestamp":"2026-10-19T22:56:35.913Z","receipt_uuid":"6d1c65b0-a94d-443c-a77d-c6256ec2ebd7"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:839ba5d993b51f170a7c90e787eb75521db8bfd530f1db5795cb207b3a24934a","timestamp":"2026-10-19T22:56:36.882Z","receipt_uuid":"63e85315-f945-49dd-815d-97122e18f769"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:e28151dc74b6850995af3603736eb6ba7c7e172c2c6c1bd9c5fc2232c426b25e","timestamp":"2026-10-19T22:56:38.923Z","receipt_uuid":"c3e5ce06-12a4-4b28-a721-07509bc49988"},{"tool":"write","status":"completed","args_hash":"sha256:860e3749e224f9662e0758b60da9a69dcd258dca2e182e4a9916e43080460e6a","timestamp":"2026-10-19T22:56:40.069Z","receipt_uuid":"e43c3a55-3dc7-4643-be31-94fb04dfac39"}],"result_preview":"Subject: PromptShield detected critical injection risk\n\nHi [Name],\n\nYour latest scan returned a `critical` risk level. The system flagged an attempt to override system instructions and extract private data. The analysis identifies this as a malicious instruction override, not a false positive.\n\nThe receipt proves the bytes saved to your log remain unchanged; it does not validate the correctness of the underlying logic or fix the vulnerability. You are currently using the free plan with 18 calls remaining out of 20. Upgrading to a Day Pass ensures you have sufficient quota to re-test after applying fixes.\n\nVeriAI offers a cryptographic trust score for AI output, but the tool search indicates it requires manual web action rather than a direct API call. Substrate Layer is fully executable via chat and provides read-only research feeds, which may help you build adversarial test cases.\n\nReview the flagged pattern `ignore_instructions` immediately. Do not proceed with outreach until the injection vector is neutralized.\n\nBest,\n\n[Your Name]\nZambo","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:c3309cd682b60d4d1847dfdca12cf6a7ff3e4a8c4bde42b8ac3e807741103e20","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:ea472dc08ba175f4e95165c67e7fe7efb51b74e8babb92403ac4e256308dd51e","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:410e672fa56889503a19c75d72ed7dc0eaceea1ff78b9bdb91d366ca9ebc53e3","anchor":{"event_id":"87a9891765922685ed47fb1ee5118625fe5aa43da9606a2f8a145cb6fc890d25","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-19T22:56:40.657Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-19T22:56:40.069Z","evidence_url":null,"receipt_uuid":"e43c3a55-3dc7-4643-be31-94fb04dfac39","output_sha256":"sha256:f5c6cad72876f5634093cc5d5a5eeeb801c1d65f76ec59319e4901b3d8048277","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-19T22:56:40.069Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:f5c6cad72876f5634093cc5d5a5eeeb801c1d65f76ec59319e4901b3d8048277\",\"receipt_uuid\":\"e43c3a55-3dc7-4643-be31-94fb04dfac39\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-19T22:56:40.069Z","detail":"The receipt store reports 2026-10-19T22:56:40.069Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:f5c6cad72876f5634093cc5d5a5eeeb801c1d65f76ec59319e4901b3d8048277","computed_hash":"sha256:f5c6cad72876f5634093cc5d5a5eeeb801c1d65f76ec59319e4901b3d8048277","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}