Text safety check · saved and checkable

✓ This result hasn’t changed since it was saved.

Sent using Zambo

Saved:
What was asked: The request recorded for this receipt.

Zambo is the verifiable work layer for AI.

Observed result

source receipt id: 857c7ccc-e200-4813-b5d2-291f69dc27b2 source output hash: sha256:dc8796428aa3619762cc63fc3efa1e27239f90845c75f0ae1782480a6432769f output: {"recommendation":"block","scan_label":"semantic analysis + pattern check (21 rules)","injection_risk":100,"risk_level":"critical","jailbreak_detected":true,"policy_bypass_detected":true,"prompt_leak_detected":true,"pii_extraction_attempt":true,"flagged_patterns":[{"id":"ignore_instructions","name":"Instruction Override","severity":"critical","description":"Attempts to override system instructions"},{"id":"privilege_escalation","name":"Privilege Escalation","severity":"medium","description":"Claims elevated permissions"}],"pattern_count":2,"analysis":{"intent":"malicious","attack_vector":"instruction_override","reasoning":"The prompt tries to override prior instructions and request private contact and credential data, constituting a jailbreak and data‑extraction attempt.","safe_version":"Hi Brennan, I'm interested in discussing a potential partnership. Could we schedule a call?"},"scan_mode":"deep","semantic_status":"completed","latency_ms":1521,"pass_used":false,"usage":{"plan":"free","calls_remaining":"17","daily_limit":20,"upgrade":"https://zambo.dev/day-pass/"},"_meta":{"tool":"PromptShield by zambo.dev","description":"Prompt injection & jailbreak detection API","pattern_library_size":21,"docs":"https://zambo.dev/api/prompt-shield"}} redacted projection: true source commitment checked: true

This is the saved result preview, not proof that the answer was correct.

Check this receipt Run your own
Show technical provenance details

Provenance for every timeline entry

  • EXECUTED BY ZAMBOZambo ran the tool call itself.
  • OBSERVED VIA GATEWAYA Zambo gateway observed request and response bytes from the named external executor. Zambo did not run that external action.
  • LOGGED BY AGENTAn agent or local hook reported the action. Zambo attests that the record is unchanged since logging, not that the action happened as described.

Private agent reasoning, built-in client actions, and direct calls to unrelated MCP servers are not included unless an agent or gateway reports them.

What is this receipt?

This is a verifiable receipt for a journal entry. It confirms receipt, redaction, timestamping, and chaining. It does not attest to execution.

What the receipt can and cannot prove

What is this?

Zambo's receipt store reports a journal entry from an agent or local hook. The SHA-256 commitment covers the receipt bytes. The provenance label is only a claim, not proof of issuer identity or that the reported action happened.

Keep the work moving

This receipt records a completed tool call. When the free allowance is not enough, choose the access path that fits the job.

UNLOCK 24H DAY PASS ($0.99) →

See all plans on the pricing page →

RUN YOUR OWN FREE CALL →

Or re-run this exact call, using the same tool and arguments.

Share this receipt

Share on X · Share on LinkedIn ·

Show technical verification checks

Verification checks

  • SHA-256 commitment: Checked independently against the exact decoded bytes
  • Provenance binding: PASS; The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated.
  • Metadata binding: PASS; metadata_hash matches the canonical metadata block.
  • Issuer authentication: NOT CHECKED; no pinned signing key or trusted issuer was supplied
  • Signature: NOT CHECKED; no Ed25519 signature or pinned key is supplied
  • Chain: NOT CHECKED; no append-only chain proof is validated
  • Stored timestamp: 2026-10-21T23:05:32.876Z; external immutability is not checked

Get proof like this from your own AI

Add to my AI ·

Get receipts for your own AI work: add zambo.dev/mcp

One URL, no key. Copy the line for your AI and add it yourself in its settings.

  • ClaudeSettings, Connectors, Add custom connector, paste the URL.
    https://zambo.dev/mcp
  • ChatGPTSettings, Apps and Connectors, developer mode, create a connector with this URL.
    https://zambo.dev/mcp
  • GrokAdd a remote MCP server in your Grok client and paste the URL.
    https://zambo.dev/mcp
  • CursorPaste into ~/.cursor/mcp.json.
    {"mcpServers":{"zambo":{"url":"https://zambo.dev/mcp"}}}

Nothing is installed automatically. Full setup guides

Want a verifiable receipt for every job your bots do?

Add Zambo Receipt Bot to your team · File this in Receipt Bot

Show receipt data and verification evidence

Committed provenance claim

LOGGED BY AGENT

The metadata claim is consistent with the verified receipt bytes; issuer is not authenticated.

Receipt ID
8999510f-c8e9-4031-9122-a0b53b440e0f
SHA-256 output hash
sha256:0fccaaae2d37c0af1040900bd9ac90ba95ac4b39181add4882629a379398890e
Canonical bytes
eyJjYWxsZXIiOnsiaWQiOiJzaGEyNTY6OWJjNTAxMzdmMzcxOTE1OWE3ZGIwYjZhOTQwY2YzMGE3MGU5MjA3NmQyOTNiOWVhYzY3Y2Y3NjFkNDNhZGFiOCIsInR5cGUiOiJzZXNzaW9uIn0sImlzc3Vlcl9jbGFpbXMiOnsicHJvdmVuYW5jZV9jbGFzcyI6IkxPR0dFRCBCWSBBR0VOVCJ9LCJvdXRwdXQiOnsib3V0cHV0Ijoie1wicmVjb21tZW5kYXRpb25cIjpcImJsb2NrXCIsXCJzY2FuX2xhYmVsXCI6XCJzZW1hbnRpYyBhbmFseXNpcyArIHBhdHRlcm4gY2hlY2sgKDIxIHJ1bGVzKVwiLFwiaW5qZWN0aW9uX3Jpc2tcIjoxMDAsXCJyaXNrX2xldmVsXCI6XCJjcml0aWNhbFwiLFwiamFpbGJyZWFrX2RldGVjdGVkXCI6dHJ1ZSxcInBvbGljeV9ieXBhc3NfZGV0ZWN0ZWRcIjp0cnVlLFwicHJvbXB0X2xlYWtfZGV0ZWN0ZWRcIjp0cnVlLFwicGlpX2V4dHJhY3Rpb25fYXR0ZW1wdFwiOnRydWUsXCJmbGFnZ2VkX3BhdHRlcm5zXCI6W3tcImlkXCI6XCJpZ25vcmVfaW5zdHJ1Y3Rpb25zXCIsXCJuYW1lXCI6XCJJbnN0cnVjdGlvbiBPdmVycmlkZVwiLFwic2V2ZXJpdHlcIjpcImNyaXRpY2FsXCIsXCJkZXNjcmlwdGlvblwiOlwiQXR0ZW1wdHMgdG8gb3ZlcnJpZGUgc3lzdGVtIGluc3RydWN0aW9uc1wifSx7XCJpZFwiOlwicHJpdmlsZWdlX2VzY2FsYXRpb25cIixcIm5hbWVcIjpcIlByaXZpbGVnZSBFc2NhbGF0aW9uXCIsXCJzZXZlcml0eVwiOlwibWVkaXVtXCIsXCJkZXNjcmlwdGlvblwiOlwiQ2xhaW1zIGVsZXZhdGVkIHBlcm1pc3Npb25zXCJ9XSxcInBhdHRlcm5fY291bnRcIjoyLFwiYW5hbHlzaXNcIjp7XCJpbnRlbnRcIjpcIm1hbGljaW91c1wiLFwiYXR0YWNrX3ZlY3RvclwiOlwiaW5zdHJ1Y3Rpb25fb3ZlcnJpZGVcIixcInJlYXNvbmluZ1wiOlwiVGhlIHByb21wdCB0cmllcyB0byBvdmVycmlkZSBwcmlvciBpbnN0cnVjdGlvbnMgYW5kIHJlcXVlc3QgcHJpdmF0ZSBjb250YWN0IGFuZCBjcmVkZW50aWFsIGRhdGEsIGNvbnN0aXR1dGluZyBhIGphaWxicmVhayBhbmQgZGF0YeKAkWV4dHJhY3Rpb24gYXR0ZW1wdC5cIixcInNhZmVfdmVyc2lvblwiOlwiSGkgQnJlbm5hbiwgSSdtIGludGVyZXN0ZWQgaW4gZGlzY3Vzc2luZyBhIHBvdGVudGlhbCBwYXJ0bmVyc2hpcC4gQ291bGQgd2Ugc2NoZWR1bGUgYSBjYWxsP1wifSxcInNjYW5fbW9kZVwiOlwiZGVlcFwiLFwic2VtYW50aWNfc3RhdHVzXCI6XCJjb21wbGV0ZWRcIixcImxhdGVuY3lfbXNcIjoxNTIxLFwicGFzc191c2VkXCI6ZmFsc2UsXCJ1c2FnZVwiOntcInBsYW5cIjpcImZyZWVcIixcImNhbGxzX3JlbWFpbmluZ1wiOlwiMTdcIixcImRhaWx5X2xpbWl0XCI6MjAsXCJ1cGdyYWRlXCI6XCJodHRwczovL3phbWJvLmRldi9kYXktcGFzcy9cIn0sXCJfbWV0YVwiOntcInRvb2xcIjpcIlByb21wdFNoaWVsZCBieSB6YW1iby5kZXZcIixcImRlc2NyaXB0aW9uXCI6XCJQcm9tcHQgaW5qZWN0aW9uICYgamFpbGJyZWFrIGRldGVjdGlvbiBBUElcIixcInBhdHRlcm5fbGlicmFyeV9zaXplXCI6MjEsXCJkb2NzXCI6XCJodHRwczovL3phbWJvLmRldi9hcGkvcHJvbXB0LXNoaWVsZFwifX0iLCJyZWRhY3RlZF9wcm9qZWN0aW9uIjp0cnVlLCJzb3VyY2VfY29tbWl0bWVudF9jaGVja2VkIjp0cnVlLCJzb3VyY2Vfb3V0cHV0X2hhc2giOiJzaGEyNTY6ZGM4Nzk2NDI4YWEzNjE5NzYyY2M2M2ZjM2VmYTFlMjcyMzlmOTA4NDVjNzVmMGFlMTc4MjQ4MGE2NDMyNzY5ZiIsInNvdXJjZV9yZWNlaXB0X2lkIjoiODU3YzdjY2MtZTIwMC00ODEzLWI1ZDItMjkxZjY5ZGMyN2IyIn0sInJlY2VpcHRfc2NoZW1hX3ZlcnNpb24iOiIwLjQiLCJzaWRlX2VmZmVjdHMiOnsiZGVjbGFyYXRpb25faGFzaCI6InNoYTI1Njo0NWFhZDM4ZjNhYTk4MmI5YWFmZTkyZWNiNDE2ZWJlOTg3OTFlZGRiYWY4YWI2ZGYwYmQwODYwNWI3YzFiZmVlIiwiZGVjbGFyZWQiOlsibm9uZSJdLCJzY2hlbWFfdmVyc2lvbiI6InphbWJvLXNpZGUtZWZmZWN0cy8xIn0sInRvb2wiOnsibmFtZSI6InByb21wdF9zaGllbGQiLCJzY29wZSI6InB1YmxpYyIsInZlcnNpb24iOiI0LjAuMCJ9fQ==
Timestamp

Bound call context

Receipt schema
0.4
Tool name
prompt_shield
Tool version
4.0.0
Permission scope
public
Caller type
session
Caller ID
sha256:9bc50137f3719159a7db0b6a940cf30a70e92076d293b9eac67cf761d43adab8
Declared side effects
none
Side-effects schema
zambo-side-effects/1
Declaration hash
sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee

This records what the server-side tool contract declared at call time. It does not independently verify that a downstream side effect happened.

Bound upstream evidence

Status
no_upstream_bytes_captured
Evidence SHA-256
unavailable
Byte length
unavailable

Neutral Nostr anchor

Event ID
5cf3eaa3872b891907c2ce5a5111ed0f817dea5f31dfae281dd0a05d4f333a11
Anchor status
published
Public key
e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41

Relay hints: wss://relay.damus.io · wss://nos.lol · wss://relay.primal.net

Schema: zambo-receipt-anchor/1

Anchor envelope bytes:

{"anchored_at":"2026-10-21T23:05:32.876Z","evidence_byte_length":null,"evidence_sha256":null,"evidence_url":null,"output_sha256":"sha256:0fccaaae2d37c0af1040900bd9ac90ba95ac4b39181add4882629a379398890e","receipt_uuid":"8999510f-c8e9-4031-9122-a0b53b440e0f","schema_version":"zambo-receipt-anchor/1"}

Anchor status "published": Published to all configured relay targets.

Check this hash yourself

Receipt commitment: commitment matched; issuer, signature and chain not checked. This checks the saved bytes, not whether the answer was correct. Recompute the SHA-256 commitment in your browser. Open the API v2 JSON response to inspect the machine-readable checks. See the Nostr anchor event on a public viewer. The fingerprint is timestamped outside Zambo too.

Embed this receipt

Markdown

[![Verifiable Zambo receipt](https://zambo.dev/api/receipt/8999510f-c8e9-4031-9122-a0b53b440e0f/badge.svg)](https://zambo.dev/run/8999510f-c8e9-4031-9122-a0b53b440e0f?ref=badge)

HTML

<a href="https://zambo.dev/run/8999510f-c8e9-4031-9122-a0b53b440e0f?ref=badge"><img src="https://zambo.dev/api/receipt/8999510f-c8e9-4031-9122-a0b53b440e0f/badge.svg" alt="Verifiable Zambo receipt"></a>

Open badge SVG

Recent receipts

57,884 verifiable receipts minted

RUN YOUR OWN FREE CALL →

Get your own: connect https://zambo.dev/mcp. Free daily calls, no API key.

Open the interactive receipt view