{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"f1e283d2-ca09-4342-b530-85a51d7d90a0","source_url":"https://zambo.dev/api/receipt/f1e283d2-ca09-4342-b530-85a51d7d90a0","receipt":{"id":"f1e283d2-ca09-4342-b530-85a51d7d90a0","created_at":"2026-10-18T18:06:38.531Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-18T18:06:36.974Z","completed_at":"2026-10-18T18:06:38.531Z"}],"output_hash":"sha256:2ad1304ff475eeb2068869cd27ac5feed1ae14d6a338a305382a58d530dbf40f","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2202,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:bbef1101fed35b8fa6f1110ecf685b36867a18b7be6755ed4b085e08e063e60c","timestamp":"2026-10-18T18:06:33.015Z","receipt_uuid":"03c30eaf-f5f0-4c36-b0c2-95210756f4b7"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:794ccaa73215d029819f4a202c78367ecd03daebfa5474d6a9020b0c411a8117","timestamp":"2026-10-18T18:06:34.367Z","receipt_uuid":"c3bed7d3-954a-4c87-adda-9733166557ec"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:699cdf0d539561878cdcc098e3cb473b2f051668a161a68f27cad85e65f82777","timestamp":"2026-10-18T18:06:36.393Z","receipt_uuid":"ba6eb018-25ee-479f-bb61-aaa59232e0d2"},{"tool":"write","status":"completed","args_hash":"sha256:ba5445f39f9d650f8b24a7291dd6995e3f918a4391a25ecacf0a125a24ef1beb","timestamp":"2026-10-18T18:06:38.531Z","receipt_uuid":"f1e283d2-ca09-4342-b530-85a51d7d90a0"}],"result_preview":"Subject: Zambo is live: Critical injection blocking, verified\n\nHi [Name],\n\nZambo just launched. It does one thing: it stops prompt injections before they reach your system.\n\nOur first scan caught a critical attack vector in real-time. The input flagged as an \"Instruction Override\" with a 95% injection risk. Zambo blocked the malicious payload, prevented any PII extraction, and returned a safe, policy-compliant response. The receipt confirms the saved bytes remained unchanged, proving the integrity of the data flow.\n\nThis isn’t theoretical. The scan identified a specific attempt to jailbreak the system and exfiltrate credentials. Zambo intercepted it, logged the semantic analysis, and kept your API keys secure. The tool operates on a deep scan mode, checking against 18 distinct rules to identify both semantic anomalies and pattern-based attacks.\n\nRight now, Zambo offers a free tier with unlimited calls. You can test your own prompts against our library immediately. No setup required. Just send a request to our endpoint and see the detection logs in real-time.\n\nWe are currently researching public source-backed prospects to refine our security models, but the core engine is ready for your use. If you are building with LLMs, your input layer is currently exposed. Zambo closes that gap.\n\nCheck the receipt from the test run: https://zambo.dev/run/c3bed7d3-954a-4c87-adda-9733166557ec\n\nIt shows the exact moment we caught the override attempt. That is the protection you are missing.\n\nTry it on your next deploy. If it doesn’t catch what you throw at it, ignore this email. If it does, you have a problem solved.\n\nBest,\n\nThe Zambo Team\nhttps://zambo.dev","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:eff15b326c56a646c5e2912cfcab8e6d77e2e8e1ad381b822ae24affc55c4b0d","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:0b5a40c44df0b41caeef0b0f8a4cb351f68007f2541ce41ad2d56796e1c4a79f","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:b8acab7a946877c7a09ef85db0994cd802db54db24298915b2bafc6afe80df17","anchor":{"event_id":"eebd035a21e84fe2d313212ab1296462845d7a1a1cbdcc3ba638d07486a4502c","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"published","published_at":"2026-10-18T18:06:39.108Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-18T18:06:38.531Z","evidence_url":null,"receipt_uuid":"f1e283d2-ca09-4342-b530-85a51d7d90a0","output_sha256":"sha256:2ad1304ff475eeb2068869cd27ac5feed1ae14d6a338a305382a58d530dbf40f","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-18T18:06:38.531Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:2ad1304ff475eeb2068869cd27ac5feed1ae14d6a338a305382a58d530dbf40f\",\"receipt_uuid\":\"f1e283d2-ca09-4342-b530-85a51d7d90a0\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-18T18:06:38.531Z","detail":"The receipt store reports 2026-10-18T18:06:38.531Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:2ad1304ff475eeb2068869cd27ac5feed1ae14d6a338a305382a58d530dbf40f","computed_hash":"sha256:2ad1304ff475eeb2068869cd27ac5feed1ae14d6a338a305382a58d530dbf40f","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}