{"api_version":2,"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","id":"fb0b3966-3c56-454a-a876-ddb6d344006c","source_url":"https://zambo.dev/api/receipt/fb0b3966-3c56-454a-a876-ddb6d344006c","receipt":{"id":"fb0b3966-3c56-454a-a876-ddb6d344006c","created_at":"2026-10-16T01:28:44.317Z","receipt_schema_version":"0.4","job_summary":"MCP tool execution: write","tools":["write"],"steps":[{"tool":"write","status":"success","started_at":"2026-10-16T01:28:42.880Z","completed_at":"2026-10-16T01:28:44.317Z"}],"output_hash":"sha256:029d521d2b8b0719aaec2f076606b894e89125e49f701a828708ecb283befee2","hash_algorithm":"sha256","canonical_bytes":"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","canonical_bytes_withheld_for_privacy":false,"canonical_byte_length":2286,"verification_status":"verified","session_trail":[{"tool":"capability_search","status":"completed","args_hash":"sha256:6a318fdaac14f5daa82d7654e29b69a7ce0c417ce35b40bae9303142dd7cc460","timestamp":"2026-10-16T01:28:33.741Z","receipt_uuid":"2868c9b0-5ccf-4ffb-9b0d-64bedb1fb974"},{"tool":"ghost_audit_site","status":"completed","args_hash":"sha256:630e8f62177ac0447db6066c58772f0c4a87948116ed3b6d8889cb267e8953f4","timestamp":"2026-10-16T01:28:34.878Z","receipt_uuid":"7a5cc78e-a832-4357-99bb-0409a1bb5b53"},{"tool":"prompt_shield","status":"completed","args_hash":"sha256:dc9ef61c02c87b27c97044c13d0babb97e2b1eacfc71823ca48d34b3a712ac29","timestamp":"2026-10-16T01:28:34.982Z","receipt_uuid":"be41b948-c446-4c03-8aee-b9159dffebce"},{"tool":"continuity_get_recent","status":"completed","args_hash":"sha256:3aedf8da7ef2bb864ee7580103a05fbd0775e2febe48dce7b4fc1c1e3e700c20","timestamp":"2026-10-16T01:28:42.427Z","receipt_uuid":"a012af2b-470f-4273-b125-97d88be24749"},{"tool":"write","status":"completed","args_hash":"sha256:8af55e55e3a69917ced335d3315af3411e2f051aca6af80cd0f2443b6cffc1c0","timestamp":"2026-10-16T01:28:44.317Z","receipt_uuid":"fb0b3966-3c56-454a-a876-ddb6d344006c"}],"result_preview":"Subject: Zambo is live: PromptShield, Ghost Audit, and Substrate Breakthroughs\n\nYou are building AI products. The risk is that your models accept malicious inputs, your site has invisible technical debt, or your research is static. Zambo addresses these three gaps today.\n\n**1. PromptShield**\nThis API detects jailbreaks, instruction overrides, and PII extraction attempts. It flags injection risks with a confidence score and provides a safe, sanitized version of the prompt. It runs in under 1.3 seconds. If a user tries to bypass your system instructions, PromptShield blocks the attempt and logs the attack vector.\n\n**2. Ghost Audit**\nThis tool scans your website for technical and creative gaps. It runs ten stages, from infrastructure and SEO to AI layer and competition. It provides a live stream of findings and a full markdown report. It identifies what is missing before your competitors do.\n\n**3. Substrate Breakthroughs**\nThis is a read-only research feed. It generates adversarial research insights from a \"living\" AI system. It provides fresh, executable breakthroughs for your product roadmap. It is fully executable in chat and requires no human web action.\n\n**What this is not**\nThese are not finished customers. These are capabilities. A receipt proves the code executed; it does not prove the outcome is correct for your specific use case. You must validate the results against your own data.\n\n**Next Step**\nReview the capabilities. If you want to test PromptShield against your current input handling, or run a Ghost Audit on your live site, reply with \"Test.\" I will send you the isolated API keys and sandbox environment.\n\nNo sales pitch. No onboarding call. Just the tools.\n\nBest,\n\n[Your Name]\nZambo Launch Team\nhttps://zambo.dev","result_preview_integrity":"display_only_not_committed","result_preview_truncated":false,"input_hash":"sha256:fdc4ebed58db2fd6dfd592ebfcd1bd9423dd6f9665ae47a133a5d9630024eaf5","input_hash_layout":"zambo-json-sorted-keys-utf8-v1","free_used":0,"free_remaining":0,"free_limit":0,"signal_handle":null,"tool":{"name":"write","version":"4.0.0","scope":"public"},"caller":{"type":"session","id":"sha256:0e44c0068bcca10bc44c5aea18262dd203d8b4cb60185a068665e673e5ea388c","label":"zambo-home-demo","label_source":"caller_reported"},"side_effects":{"declared":["none"],"schema_version":"zambo-side-effects/1","declaration_hash":"sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"},"evidence_sha256":null,"evidence_url":null,"evidence_byte_length":null,"evidence_content_type":null,"evidence_source_url":null,"evidence_status":"no_upstream_bytes_captured","external_evidence":[],"provenance":null,"provenance_class":"EXECUTED BY ZAMBO","metadata_hash":"sha256:c7b216ba16669a2e6b02a3e0e2ef92607f85f38c4301ec7d7eff0ec68ec3459f","anchor":{"event_id":"a18f445289a31982f1cb80d98befd645ff768f0c47918a1806d083450dfa5462","pubkey":"e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41","relays":["wss://relay.damus.io","wss://nos.lol","wss://relay.primal.net"],"status":"partial","published_at":"2026-10-16T01:28:50.351Z","schema_version":"zambo-receipt-anchor/1","envelope":{"anchored_at":"2026-10-16T01:28:44.317Z","evidence_url":null,"receipt_uuid":"fb0b3966-3c56-454a-a876-ddb6d344006c","output_sha256":"sha256:029d521d2b8b0719aaec2f076606b894e89125e49f701a828708ecb283befee2","schema_version":"zambo-receipt-anchor/1","evidence_sha256":null,"evidence_byte_length":null},"envelope_bytes":"{\"anchored_at\":\"2026-10-16T01:28:44.317Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:029d521d2b8b0719aaec2f076606b894e89125e49f701a828708ecb283befee2\",\"receipt_uuid\":\"fb0b3966-3c56-454a-a876-ddb6d344006c\",\"schema_version\":\"zambo-receipt-anchor/1\"}"},"receipt_profile":"zambo-hosted-receipt/1","schema_url":"https://zambo.dev/aer-1/hosted-profile.schema.json","api_version":1,"verification_scope":"separate_sha256_commitment_and_provenance_binding_checks","checks":{"commitment_matches":{"label":"SHA-256 commitment","passed":true,"status":"pass","detail":"The exact decoded canonical bytes match the stored SHA-256 output hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"signature":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"No Ed25519 signature or pinned signing key was checked."},"chain":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"No append-only receipt-chain proof was checked."},"issued_by_zambo_dev":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"immutable_log_timestamp":{"label":"Stored timestamp","passed":true,"timestamp":"2026-10-16T01:28:44.317Z","detail":"The receipt store reports 2026-10-16T01:28:44.317Z; immutability is not checked here."},"receipt_schema_version":"0.4","signature_valid":{"label":"Ed25519 signature (not checked)","passed":false,"status":"not_checked","detail":"Compatibility field only. No Ed25519 signature was checked; use API v2 checks.commitment_matches for the SHA-256 commitment."},"chain_valid":{"label":"Receipt chain (not checked)","passed":false,"status":"not_checked","detail":"This endpoint does not verify an append-only chain."}},"execution_context":{"environment":"zambo.dev hosted MCP"}},"verification_status":"verified","checks":{"commitment_matches":{"status":"pass","passed":true,"expected_hash":"sha256:029d521d2b8b0719aaec2f076606b894e89125e49f701a828708ecb283befee2","computed_hash":"sha256:029d521d2b8b0719aaec2f076606b894e89125e49f701a828708ecb283befee2","detail":"SHA-256 of the exact decoded canonical bytes matches output_hash."},"canonical_payload_matches":{"label":"Canonical payload reconstruction","passed":true,"status":"pass","detail":"The stored output and known call context reconstruct the exact canonical bytes."},"provenance_binding":{"label":"Provenance claim binding","status":"pass","passed":true,"detail":"The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated."},"metadata_binding":{"label":"AER-1 metadata hash","status":"pass","passed":true,"detail":"metadata_hash matches the canonical metadata block."},"issuer_authentication":{"label":"Issuer authentication","passed":false,"status":"not_checked","detail":"A zambo.dev receipt URL does not authenticate the issuer; no pinned signature or trusted issuer key was checked."},"signature":{"status":"not_checked","detail":"No Ed25519 signature or pinned signing key is supplied."},"schema":{"status":"not_checked","detail":"Schema conformance is left to the client using the linked hosted-profile schema."},"chain":{"status":"not_checked","detail":"This endpoint does not verify an append-only receipt chain."}}}