{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"ec521eaf-cd26-4749-b7c1-756a9d96115c","source_url":"https://zambo.dev/api/receipt/ec521eaf-cd26-4749-b7c1-756a9d96115c","receipt":{"id":"ec521eaf-cd26-4749-b7c1-756a9d96115c","created_at":"2026-11-09T16:30:21.352Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-11-09T16:30:19.998Z","completed_at":"2026-11-09T16:30:21.352Z"}],"output_hash":"sha256:8cbcc26c556bf4e43973c9dd33bb3b9d9c408d36fd5aec140dfeec105b7ac3b3","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2237,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:6831fd1b7d4db56688b02f82685f9037b4898ec6a599af1e513c9e3a5320631c","timestamp":"2026-11-09T16:30:04.355Z","receipt_uuid":"09aaaa06-48c7-4a04-b538-8d54d8b36268"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:d2f0d7d05307576d5057453d4ae55a84d5198fa809fd362617a01918ede2dbad","timestamp":"2026-11-09T16:30:04.935Z","receipt_uuid":"d995dc61-072c-44af-9cf8-cfe9be8d321f"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:b346505d54b3862b27b4cc4afc7c15bb36b0ba250d6954e09b67165a3c5c0679","timestamp":"2026-11-09T16:30:18.283Z","receipt_uuid":"7b552b42-8f6c-49b4-a2d9-f665f2b8f1cb"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:a7f078c2a29f1897756a3ab633230e04b788342474158375abec687fde2b8e03","timestamp":"2026-11-09T16:30:19.148Z","receipt_uuid":"b21276b3-1a35-4fe8-971e-f3fb824c1906"},{"tool":"write","status":"completed","args_hash":"sha256:67fca7e808bc230e81ccc0e56edabedf368682dccf560962ad1247f4c9775089","timestamp":"2026-11-09T16:30:21.352Z","receipt_uuid":"ec521eaf-cd26-4749-b7c1-756a9d96115c"}],"result_preview":"Subject: Zambo is live: Your first scan is complete\n\nYour initial security scan for the \"lead generation\" prompt returned a critical alert.\n\nThe system flagged high-risk injection attempts, specifically \"Instruction Override\" and \"Prompt Leak\" vectors, with a 100% injection risk score. This confirms your input contained aggressive jailbreak patterns designed to bypass safety protocols.\n\nHere is what that means for you:\n\n1.  **The Threat is Real:** The scanner didn’t just guess. It identified specific semantic patterns that match known attack vectors. This is the exact type of malicious input that breaks weaker AI tools.\n2.  **Zambo Protects Your Workflow:** By intercepting this at the semantic analysis stage, Zambo prevents your business logic from being compromised by adversarial prompts. You get a clear risk report, not a silent failure.\n3.  **Research Completed:** We also ran a lead signal check for web design prospects in Austin, TX. The result was zero source-backed leads. This is a feature, not a bug. Zambo does not hallucinate contacts. It only returns verified, source-backed data. If there’s no data, you get a clean \"no results\" status, saving you time from chasing ghosts.\n\n**Your Next Step:**\n\nReview the full receipt for your scan. It contains the detailed breakdown of the flagged patterns and the semantic reasoning behind the \"critical\" risk level.\n\n[View Full Scan Receipt](https://zambo.dev/run/d995dc61-072c-44af-9cf8-cfe9be8d321f)\n\nThis is the basis of Zambo’s value: rigorous, transparent, and resistant to manipulation. We don’t promise magic; we provide verifiable security and accurate data.\n\nLet’s keep your AI stack secure.\n\nBest,\n\nThe Zambo Team","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:f873488749d0d4ebc586429245bb241698aed618eeb1162a65c797782a64add6","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:d2f066bb41d0295b6ed7ff7d32772112585103f0dc07fbf0ea158f685655bb3a","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"empty","result_source":null,"evidence_source":null,"external_evidence":[],"provenance":{"result_source":null,"evidence_source":null,"evidence_status":"empty","evidence_captures":[]},"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:c1402224b0a5219c831f357b86cef20fd08713ff890ec1236fad9fa91a39a9f3","anchor":{"event_id":"e90b1e386d579066c846fdadc9ea29e80cccad53cfb6843543d5b4340adea913","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.primal.net"],"status":"published","published_at":"2026-11-09T16:30:21.973Z","published_at_semantics":"Relay confirmation time (accepted acknowledgement or exact-event read-back); not the signed event's created_at.","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-11-09T16:30:21.352Z","evidence_url":null,"receipt_uuid":"ec521eaf-cd26-4749-b7c1-756a9d96115c","output_sha256":"sha256:8cbcc26c556bf4e43973c9dd33bb3b9d9c408d36fd5aec140dfeec105b7ac3b3","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-11-09T16:30:21.352Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:8cbcc26c556bf4e43973c9dd33bb3b9d9c408d36fd5aec140dfeec105b7ac3b3\",\"receipt_uuid\":\"ec521eaf-cd26-4749-b7c1-756a9d96115c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-11-09T16:30:21.352Z","detail":"The receipt store reports 2026-11-09T16:30:21.352Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP","quota_identity":{"meter_key":"sha256:9eb1dbcbfd0e2337b417e3894a70ebc38daae5f254a19c8f5f0b4d9820c556fd"}}},"evidence_status":"empty","verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:8cbcc26c556bf4e43973c9dd33bb3b9d9c408d36fd5aec140dfeec105b7ac3b3","computed_hash":"sha256:8cbcc26c556bf4e43973c9dd33bb3b9d9c408d36fd5aec140dfeec105b7ac3b3","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}