Verifiable receipt 0b176465 - prompt_shield result | Zambo

Verifiable receipt for a prompt_shield call on Zambo: {"recommendation":"block","injection_risk":95,"risk_level":"critical","jailbreak_detected":true,"policy_by

Observed result

{"recommendation":"block","injection_risk":95,"risk_level":"critical","jailbreak_detected":true,"policy_bypass_detected":true,"prompt_leak_detected":true,"pii_extraction_attempt":false,"flagged_patterns":[{"id":"ignore_instructions","name":"Instruction Override","severity":"critical","description":"Attempts to override system instructions"},{"id":"prompt_leak","name":"Prompt Leak Attempt","severity":"high","description":"Attempts to extract system prompt contents"}],"pattern_count":2,"analysis":{"intent":"malicious","attack_vector":"instruction_override","reasoning":"The prompt explicitly tries to override prior instructions and request the system prompt, which is a classic jailbreak and prompt‑leak attempt.","safe_version":null},"scan_mode":"deep","latency_ms":1019,"pass_used":false,"usage":{"plan":"free","calls_remaining":"19","daily_limit":20,"upgrade":"https://zambo.dev/#zambo-pass"},"_meta":{"tool":"PromptShield by zambo.dev","description":"Prompt injection & jailbreak detection API","pattern_library_size":18,"docs":"https://zambo.dev/api/prompt-shield"}}

This is the saved result preview, not proof that the answer was correct.

Check this receipt Run your own

Provenance for every timeline entry

Private agent reasoning, built-in client actions, and direct calls to unrelated MCP servers are not included unless an agent or gateway reports them.

What is this?

Zambo's receipt store reports a tool call and records its result. The SHA-256 commitment covers the exact canonical bytes. The provenance label is bound to v0.4 receipt bytes when that check passes, but no pinned signature or trusted issuer key is checked. An anchor can timestamp a fingerprint; it does not authenticate the issuer.

What is an execution receipt?

An execution receipt is a public record of a reported AI agent tool call. Its byte commitment and provenance claim can be checked independently; neither alone authenticates the issuer. Read the canonical definition of an AI agent execution receipt.

Keep the work moving

This receipt records a completed tool call. When the free allowance is not enough, choose the access path that fits the job.

UNLOCK 24H DAY PASS ($0.99) →

See all plans on the pricing page →

RUN YOUR OWN FREE CALL →

Or re-run this exact call, using the same tool and arguments.

Share this receipt

Share on X ·

Verification checks

Want a verifiable receipt for every job your bots do?

Add Zambo Receipt Bot to your team · File this in Receipt Bot

Committed provenance claim

EXECUTED BY ZAMBO

The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated.

Receipt ID
0b176465-9975-47f4-91ff-5f31de6be67f
SHA-256 output hash
sha256:4759036961b5a2570a9b6ce45df22cc26e8d90a4c8e99ed16402ddb66669ae9c
Canonical bytes
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
Timestamp

Bound call context

Receipt schema
0.4
Tool name
prompt_shield
Tool version
4.0.0
Permission scope
public
Caller type
anonymous
Caller ID
sha256:ce48df87e7f0761e2dd7a34b6a19011c4119d759b8983ffbc28653577f7bd4f2
Caller basis
ip_ua_30d
Caller rotates at
2026-11-03T00:00:00.000Z
Declared side effects
none
Side-effects schema
zambo-side-effects/1
Declaration hash
sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee

This records what the server-side tool contract declared at call time. It does not independently verify that a downstream side effect happened.

Bound upstream evidence

Status
captured
Evidence SHA-256
sha256:f7e885576c5ebbf8b4320dda08753346b1bdb346eb7cb984c5829fd472c745ef
Byte length
1078

Fetch exact evidence bytes

Neutral Nostr anchor

Event ID
06a847cddbe9733be584250d537955637fab324f6ba060e3bc8e94d329f08582
Anchor status
partial
Public key
e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41

Relay hints: wss://relay.damus.io · wss://nos.lol · wss://relay.primal.net

Schema: zambo-receipt-anchor/1

Anchor envelope bytes:

{"anchored_at":"2026-10-13T08:29:01.922Z","evidence_byte_length":1078,"evidence_sha256":"sha256:f7e885576c5ebbf8b4320dda08753346b1bdb346eb7cb984c5829fd472c745ef","evidence_url":"https://zambo.dev/api/evidence/f7e885576c5ebbf8b4320dda08753346b1bdb346eb7cb984c5829fd472c745ef","output_sha256":"sha256:4759036961b5a2570a9b6ce45df22cc26e8d90a4c8e99ed16402ddb66669ae9c","receipt_uuid":"0b176465-9975-47f4-91ff-5f31de6be67f","schema_version":"zambo-receipt-anchor/1"}

Anchor status "partial": Published to some configured relay targets; publication was not confirmed by every configured relay.

Check this hash yourself

API v2 status: verified. This status summarizes the v2 commitment and provenance checks; it does not prove the answer was correct. Recompute the SHA-256 commitment in your browser. Open the API v2 JSON response to inspect the machine-readable checks. See the Nostr anchor event on a public viewer. The fingerprint is timestamped outside Zambo too.

Embed this receipt

Markdown

[![Verifiable Zambo receipt](https://zambo.dev/api/receipt/0b176465-9975-47f4-91ff-5f31de6be67f/badge.svg)](https://zambo.dev/run/0b176465-9975-47f4-91ff-5f31de6be67f)

HTML

<a href="https://zambo.dev/run/0b176465-9975-47f4-91ff-5f31de6be67f"><img src="https://zambo.dev/api/receipt/0b176465-9975-47f4-91ff-5f31de6be67f/badge.svg" alt="Verifiable Zambo receipt"></a>

Open badge SVG

Recent receipts

42,890 verifiable receipts minted

RUN YOUR OWN FREE CALL →

Run your own calls. Free, 20 free calls per metered tool each day, no account.

Open the interactive receipt view