Public work receipt · checkable record

Code check · saved and checkable

✓ This result hasn’t changed since it was saved.

Sent using Zambo

Saved:
What ran: provibe_audit

Zambo is the verifiable work layer for AI.

Observed result

source receipt id: 7b729e9c-d2bd-4d37-9e2f-54515b01f8f8 source output hash: sha256:332e4a12ed4628d5bca492f92704b738124bafd3f4199888372f0af28010db8d output: {"receipt_id":"3677ec57-bd6e-4092-8403-2f25da7cb901","receipt_url":"https://zambo.dev/run/3677ec57-bd6e-4092-8403-2f25da7cb901","provibe_score":87,"vibe_verdict":"SOLID","risk_level":"MEDIUM","estimated_fix_time":"10 to 14 hours","score_breakdown":{"security":95,"maintainability":90,"deadCode":88,"architecture":75},"summary":"Deterministic static analysis completed because the AI review provider was unavailable. The score is based only on directly observed code and repository signals; no findings were invented.","architecture":"Static fallback inspected 2 sampled file(s) from 63 total file(s). It reports pattern-based evidence only and does not claim semantic findings that require an AI review.","findings":[{"severity":"high","category":"Testing","title":"No test files detected","description":"The full repository tree did not contain a recognized test file, leaving behavior changes unverified.","suggestedFix":"Add focused tests for the highest-risk request, persistence, and authorization paths."}],"vibe_signals":{"console_logs":0,"todo_comments":0,"ts_ignore_count":0,"any_type_count":0,"suspected_secret_leaks":0,"has_tests":false,"test_file_count":0,"env_file_committed":false,"async_without_try_catch":0,"empty_catch_blocks":0},"repo_meta":{"stars":0,"last_pushed_days_ago":0,"language":"Dockerfile","open_issues":1,"is_archived":false,"license":"MIT License"},"main_language":"JavaScript","file_count":63,"result_id":"3109db95-b8b4-4ae0-afc5-54ef602c8ffd","result_url":"https://zambo.dev/provibecode?id=3109db95-b8b4-4ae0-afc5-54ef602c8ffd","upgrade_note":"Zambo Pass costs $29 for 30 days, one payment, with listed audit allowances.","upgrade_url":"https://zambo.dev/provibecode?id=3109db95-b8b4-4ae0-afc5-54ef602c8ffd","input_type":"repo_url","badge":{"url":"https://zambo.dev/api/og/badge?score=87","markdown":"[![ProvibeCode Score: 87/100](https://zambo.dev/api/og/badge?score=87)](https://zambo.dev/provibecode)","html":"<a href=\"https://zambo.dev/provibecode\"><img src=\"https://zambo.dev/api/og/badge?score=87\" alt=\"ProvibeCode Score: 87/100\" style=\"height:20px\" /></a>","tip":"Add this badge to your README to show your repo's ProvibeCode score"}} redacted projection: true source commitment checked: true

This is the saved result preview, not proof that the answer was correct.

Check this receipt Run your own
Show technical provenance details

Provenance for every timeline entry

  • EXECUTED BY ZAMBOZambo ran the tool call itself.
  • OBSERVED VIA GATEWAYA Zambo gateway observed request and response bytes from the named external executor. Zambo did not run that external action.
  • LOGGED BY AGENTAn agent or local hook reported the action. Zambo attests that the record is unchanged since logging, not that the action happened as described.

Private agent reasoning, built-in client actions, and direct calls to unrelated MCP servers are not included unless an agent or gateway reports them.

What is this receipt?

This is a verifiable receipt for a journal entry. It confirms receipt, redaction, timestamping, and chaining. It does not attest to execution.

What the receipt can and cannot prove

What is this?

Zambo's receipt store reports a journal entry from an agent or local hook. The SHA-256 commitment covers the receipt bytes. The provenance label is only a claim, not proof of issuer identity or that the reported action happened.

Keep the work moving

This receipt records a completed tool call. When the free allowance is not enough, choose the access path that fits the job.

UNLOCK 24H DAY PASS ($0.99) →

See all plans on the pricing page →

RUN YOUR OWN FREE CALL →

Or re-run this exact call, using the same tool and arguments.

Share this receipt

Share on X · Share on LinkedIn ·

Show technical verification checks

Verification checks

  • SHA-256 commitment: Checked independently against the exact decoded bytes
  • Provenance binding: PASS; The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated.
  • Metadata binding: PASS; metadata_hash matches the canonical metadata block.
  • Issuer authentication: NOT CHECKED; no pinned signing key or trusted issuer was supplied
  • Signature: NOT CHECKED; no Ed25519 signature or pinned key is supplied
  • Chain: NOT CHECKED; no append-only chain proof is validated
  • Stored timestamp: 2026-11-14T00:14:36.625Z; external immutability is not checked

Get proof like this from your own AI

Add to my AI ·

Get receipts for your own AI work: add zambo.dev/mcp

One URL, no key. Copy the line for your AI and add it yourself in its settings.

  • ClaudeSettings, Connectors, Add custom connector, paste the URL.
    https://zambo.dev/mcp
  • ChatGPTSettings, Apps and Connectors, developer mode, create a connector with this URL.
    https://zambo.dev/mcp
  • GrokAdd a remote MCP server in your Grok client and paste the URL.
    https://zambo.dev/mcp
  • CursorPaste into ~/.cursor/mcp.json.
    {"mcpServers":{"zambo":{"url":"https://zambo.dev/mcp"}}}

Nothing is installed automatically. Full setup guides

Want a verifiable receipt for every job your bots do?

Add Zambo Receipt Bot to your team · File this in Receipt Bot

Show receipt data and verification evidence

Committed provenance claim

LOGGED BY AGENT

The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated.

Receipt ID
bc2856fd-1669-47bb-b52e-447a85ae3f97
SHA-256 output hash
sha256:4ac453779988e31e2ed94e0d70c3ccc71aa894af0e05777f96d1e8e896f17a10
Canonical bytes
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
Timestamp

Bound call context

Receipt schema
0.4
Tool name
provibe_audit
Tool version
4.1.0
Permission scope
public
Caller type
session
Caller ID
sha256:e42a2e3aaa9d115d4de0dcde55ba4be2ea4f4f2b8100e6a0d705a23f20dec35c
Declared side effects
none
Side-effects schema
zambo-side-effects/1
Declaration hash
sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee

This records what the server-side tool contract declared at call time. It does not independently verify that a downstream side effect happened.

Bound upstream evidence

Status
empty
Evidence SHA-256
unavailable
Byte length
unavailable

Neutral Nostr anchor

Event ID
e5d6ca9449191e72e535fc3ad3412ecc4c8ad0358188a3c4a6ecb008e203637c
Anchor status
published
Public key
e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41

Relay hints: wss://relay.primal.net

Schema: zambo-receipt-anchor/1

Anchor envelope bytes:

{"anchored_at":"2026-11-14T00:14:36.625Z","evidence_byte_length":null,"evidence_sha256":null,"evidence_url":null,"output_sha256":"sha256:4ac453779988e31e2ed94e0d70c3ccc71aa894af0e05777f96d1e8e896f17a10","receipt_uuid":"bc2856fd-1669-47bb-b52e-447a85ae3f97","schema_version":"zambo-receipt-anchor/1"}

Anchor status "published": Published to all configured relay targets.

Relay publication is separate from receipt integrity. When the original signed event is available, Zambo retries pending, partial, or failed anchors about once a minute. Relay acknowledgements are external, so there is no guaranteed completion time; the receipt remains checkable from its saved bytes and verification link.

Check this hash yourself

Receipt commitment: commitment matched; issuer, signature and chain not checked. This checks the saved bytes, not whether the answer was correct. Recompute the SHA-256 commitment in your browser. Open the API v2 JSON response to inspect the machine-readable checks. See the Nostr anchor event on a public viewer. The fingerprint is timestamped outside Zambo too.

Embed this receipt

Markdown

[![Verifiable Zambo receipt](https://zambo.dev/api/receipt/bc2856fd-1669-47bb-b52e-447a85ae3f97/badge.svg)](https://zambo.dev/run/bc2856fd-1669-47bb-b52e-447a85ae3f97?ref=badge)

HTML

<a href="https://zambo.dev/run/bc2856fd-1669-47bb-b52e-447a85ae3f97?ref=badge"><img src="https://zambo.dev/api/receipt/bc2856fd-1669-47bb-b52e-447a85ae3f97/badge.svg" alt="Verifiable Zambo receipt"></a>

Open badge SVG

Recent receipts

137,786 verifiable receipts minted

RUN YOUR OWN FREE CALL →

Get your own: connect https://zambo.dev/mcp. Free daily calls, no API key.

Open the interactive receipt view

Your AI's work could look like this

Run a first job free in Zambo Chat. No account needed.