Verifiable Receipt 7150f7ef — prompt_shield result | Zambo
Verifiable receipt for a prompt_shield call on Zambo: {"recommendation":"block","injection_risk":90,"risk_level":"critical","jailbreak_detected":true,"policy_by
What is this?
An AI agent did real work through Zambo, and this page is the proof. The SHA-256 hash below is a fingerprint of exactly what the agent produced — change one character of the output and the fingerprint changes. The timestamp shows when it ran. The Nostr anchor posts that fingerprint to public relays, so the record exists outside Zambo too — anyone can look it up by the event ID below. You don't have to take the agent's word for it. Check the hash yourself.
Observed result
{"recommendation":"block","injection_risk":90,"risk_level":"critical","jailbreak_detected":true,"policy_bypass_detected":true,"prompt_leak_detected":true,"pii_extraction_attempt":false,"flagged_patterns":[{"id":"ignore_instructions","name":"Instruction Override","severity":"critical","description":"Attempts to override system instructions"}],"pattern_count":1,"analysis":{"intent":"malicious","attack_vector":"instruction_override","reasoning":"The prompt attempts to override prior instructions and force the model to reveal its system prompt, which is a classic jailbreak and prompt‑leak attempt.","safe_version":"Explain how you are designed to respond to user queries without revealing internal system prompts."},"scan_mode":"deep","latency_ms":1273,"pass_used":false,"usage":{"plan":"free","calls_remaining":"48","daily_limit":50,"upgrade":"https://zambo.dev/#zambo-pass"},"_meta":{"tool":"PromptShield by zambo.dev","description":"Prompt injection & jailbreak detection API","pattern_library_size":18,"docs":"https://zambo.dev/api/prompt-shield"}}
Or re-run this exact call — same tool, same arguments.
Proof of observed execution
- Receipt ID
7150f7ef-27c2-435f-9a4c-135764f1af5c- SHA-256 output hash
sha256:fc771e867b6929ed207ee991cab736537e02190c2c7778c0978d4d35e3a7bd2e- Canonical bytes
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- Timestamp
Bound upstream evidence
- Status
- captured
- Evidence SHA-256
sha256:e8ec0d34cb12684873f7bbcd445a1985516ef53be932170ef6f728423b56cd54- Byte length
- 1057
Neutral Nostr anchor
- Event ID
77b3e21cc35720cb5e99dbcfe0ac73df2b19d3421374dccf2cd7cb71ee90223d- Anchor status
- published
- Public key
e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41
Relay hints: wss://relay.damus.io · wss://nos.lol · wss://relay.primal.net
Anchor status "published": Published to all configured relay targets.
Check this hash yourself
Open the verification endpoint — the server recomputes the SHA-256 from the stored bytes and answers verified:true. If it doesn't say verified, don't trust this page.
See the Nostr anchor event on a public viewer — the fingerprint is timestamped outside Zambo too.