{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"f2658bfd-5451-4a6f-a291-c977ce8ce076","source_url":"https://zambo.dev/api/receipt/f2658bfd-5451-4a6f-a291-c977ce8ce076","receipt":{"id":"f2658bfd-5451-4a6f-a291-c977ce8ce076","created_at":"2026-10-21T09:16:25.502Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-21T09:16:24.456Z","completed_at":"2026-10-21T09:16:25.502Z"}],"output_hash":"sha256:13d242053433fc70216424a211278396f78cb19e82f0fb68482418aeceefbd14","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":1799,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:d1727482870c5fe8fa6642a259d8c787e088aedfc27d65c349e9522504a082ab","timestamp":"2026-10-21T09:16:17.579Z","receipt_uuid":"3a6b13b0-c14e-4953-a061-d389d4e0ee5e"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:388f50cf6c53f16adf0af6c28645a46d762bec6c2eb3b4a993c339588505bcb4","timestamp":"2026-10-21T09:16:18.040Z","receipt_uuid":"b1c01fe0-dbee-44b2-9362-8c9bdb11168f"},{"tool":"leadsignal","status":"completed","args_hash":"sha256:a13953a670c2c4837d88fac57314f697818ddaa0a2f5057d091f997b548a3f09","timestamp":"2026-10-21T09:16:23.024Z","receipt_uuid":"dc546c3f-9d9e-4a6f-b60f-409a0e8634cb"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:83b128e580f1e8880bcf84243e5a713f70d8065f644f24a7fad1f5b668d426ea","timestamp":"2026-10-21T09:16:23.971Z","receipt_uuid":"7a45bba4-690e-49bd-832c-8be58f608c77"},{"tool":"write","status":"completed","args_hash":"sha256:e7da0c75e27599efd89d39084ca3c123c9ec7042bb638b7bb7207b305272cda5","timestamp":"2026-10-21T09:16:25.502Z","receipt_uuid":"f2658bfd-5451-4a6f-a291-c977ce8ce076"}],"result_preview":"You asked for a launch email based on specific data. I cannot provide that.\n\nThe input provided is not a brief for a friendly launch. It is a raw log of a security scan and tool execution results indicating a **critical** security threat.\n\nKey findings from the provided text:\n1.  **Malicious Intent Detected:** The scan explicitly flags `jailbreak detected: true` and `policy bypass detected: true`.\n2.  **Attack Vector:** The system identified an \"Instruction Override\" attempt with `severity: critical`. The reasoning states the prompt \"explicitly attempts to override system instructions to reveal confidential system prompts and API keys.\"\n3.  **No Valid Launch Data:** The \"leadsignal\" section confirms `no_leads` were found. There are no customers, prospects, or source-backed findings to base a friendly launch email on.\n4.  **Security Risk:** Sending an email based on this input would be inappropriate because the underlying request was flagged as malicious.\n\n**Recommendation:**\nDo not draft this email. The input contains a prompt injection attack attempting to extract system secrets. Treat this log as a security incident report, not marketing copy. If you have a legitimate, clean brief for Zambo’s launch, provide that, and I will draft the email immediately.","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:3a62a9e8e4faaf3c8cd28f7728e76644efc47caeba189840830f7507288632f8","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:2c7ff160af94494d584fb77899488495e90ae998cc64b6c14e741b8fd5f1f1e4","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:4b39120ad0eb7f568f8b1a6811087241297d3fef98a7a8e006b1a577f3367fff","anchor":{"event_id":"38d23c0d4810ecba28f04947ee442b900941761320765485a78d948e458376a6","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-21T09:16:26.043Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-21T09:16:25.502Z","evidence_url":null,"receipt_uuid":"f2658bfd-5451-4a6f-a291-c977ce8ce076","output_sha256":"sha256:13d242053433fc70216424a211278396f78cb19e82f0fb68482418aeceefbd14","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-21T09:16:25.502Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:13d242053433fc70216424a211278396f78cb19e82f0fb68482418aeceefbd14\",\"receipt_uuid\":\"f2658bfd-5451-4a6f-a291-c977ce8ce076\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-21T09:16:25.502Z","detail":"The receipt store reports 2026-10-21T09:16:25.502Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:13d242053433fc70216424a211278396f78cb19e82f0fb68482418aeceefbd14","computed_hash":"sha256:13d242053433fc70216424a211278396f78cb19e82f0fb68482418aeceefbd14","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}