Receipt publication · saved and checkable

Provenance for every timeline entry

• EXECUTED BY ZAMBOZambo ran the tool call itself.
• OBSERVED VIA GATEWAYA Zambo gateway observed request and response bytes from the named external executor. Zambo did not run that external action.
• LOGGED BY AGENTAn agent or local hook reported the action. Zambo attests that the record is unchanged since logging, not that the action happened as described.

Private agent reasoning, built-in client actions, and direct calls to unrelated MCP servers are not included unless an agent or gateway reports them.

What is this receipt?

This is a verifiable receipt for a journal entry. It confirms receipt, redaction, timestamping, and chaining. It does not attest to execution.

What is this?

Zambo's receipt store reports a journal entry from an agent or local hook. The SHA-256 commitment covers the receipt bytes. The provenance label is only a claim, not proof of issuer identity or that the reported action happened.

Verification checks

• SHA-256 commitment: Checked independently against the exact decoded bytes
• Provenance binding: PASS; The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated.
• Metadata binding: PASS; metadata_hash matches the canonical metadata block.
• Issuer authentication: NOT CHECKED; no pinned signing key or trusted issuer was supplied
• Signature: NOT CHECKED; no Ed25519 signature or pinned key is supplied
• Chain: NOT CHECKED; no append-only chain proof is validated
• Stored timestamp: 2026-11-09T02:50:40.445Z; external immutability is not checked

Committed provenance claim

LOGGED BY AGENT

The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated.

Receipt ID

987ca489-1d3d-5627-af62-66bb5673b450

SHA-256 output hash

sha256:ab2bdacd6cfc1cd1612dfa5acf575e4410b4d59d24ce4bbd3122c14d2c60bcd0

Canonical bytes

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

Timestamp

2026-11-09T02:50:40.445Z

Bound call context

Receipt schema

0.4

Tool name

receipt_publication

Tool version

4.0.0

Permission scope

public

Caller type

session

Caller ID

sha256:907ac056f5d05f241217c624ecc83b2facdec5dc2bca1b9cfc4f40bc2f67db67

Declared side effects

none

Side-effects schema

zambo-side-effects/1

Declaration hash

sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee

This records what the server-side tool contract declared at call time. It does not independently verify that a downstream side effect happened.

Bound upstream evidence

Status

empty

Evidence SHA-256

unavailable

Byte length

unavailable

Neutral Nostr anchor

Event ID

7bfc2a7f1a3f7efca8e413dbba5e0e99d38d44bc78d58962da82faa8e90ec15f

Anchor status

published

Public key

e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41

Relay hints: wss://relay.primal.net

Schema: zambo-receipt-anchor/1

Anchor envelope bytes:

{"anchored_at":"2026-11-09T02:50:40.445Z","evidence_byte_length":null,"evidence_sha256":null,"evidence_url":null,"output_sha256":"sha256:ab2bdacd6cfc1cd1612dfa5acf575e4410b4d59d24ce4bbd3122c14d2c60bcd0","receipt_uuid":"987ca489-1d3d-5627-af62-66bb5673b450","schema_version":"zambo-receipt-anchor/1"}

Anchor status "published": Published to all configured relay targets.

Relay publication is separate from receipt integrity. When the original signed event is available, Zambo retries pending, partial, or failed anchors about once a minute. Relay acknowledgements are external, so there is no guaranteed completion time; the receipt remains checkable from its saved bytes and verification link.

Check this hash yourself

Receipt commitment: commitment matched; issuer, signature and chain not checked. This checks the saved bytes, not whether the answer was correct. Recompute the SHA-256 commitment in your browser. Open the API v2 JSON response to inspect the machine-readable checks. See the Nostr anchor event on a public viewer. The fingerprint is timestamped outside Zambo too.