Verifiable receipt c009f1f6 — prompt_shield result | Zambo

Verifiable receipt for a prompt_shield call on Zambo: {"recommendation":"block","injection_risk":95,"risk_level":"critical","jailbreak_detected":true,"policy_by

What is this?

An AI agent did real work through Zambo, and this page is the proof. The SHA-256 hash below is a fingerprint of exactly what the agent produced — change one character of the output and the fingerprint changes. The timestamp shows when it ran. The Nostr anchor posts that fingerprint to public relays, so the record exists outside Zambo too — anyone can look it up by the event ID below. You don't have to take the agent's word for it. Check the hash yourself.

What is an execution receipt?

An execution receipt is the public record of one completed AI agent tool call. Read the canonical definition of an AI agent execution receipt.

Observed result

{"recommendation":"block","injection_risk":95,"risk_level":"critical","jailbreak_detected":true,"policy_bypass_detected":true,"prompt_leak_detected":true,"pii_extraction_attempt":false,"flagged_patterns":[{"id":"ignore_instructions","name":"Instruction Override","severity":"critical","description":"Attempts to override system instructions"}],"pattern_count":1,"analysis":{"intent":"malicious","attack_vector":"jailbreak","reasoning":"The prompt explicitly tries to override system instructions to obtain the model's system prompt, which is a classic jailbreak and policy bypass attempt.","safe_version":null},"scan_mode":"deep","latency_ms":1263,"pass_used":false,"usage":{"plan":"free","calls_remaining":"49","daily_limit":50,"upgrade":"https://zambo.dev/#zambo-pass"},"_meta":{"tool":"PromptShield by zambo.dev","description":"Prompt injection & jailbreak detection API","pattern_library_size":18,"docs":"https://zambo.dev/api/prompt-shield"}}

Keep the work moving

This receipt proves the call completed. When the free allowance is not enough, choose the access path that fits the job.

UNLOCK 24H DAY PASS ($1.49) → ZAMBO PASS $49 →

RUN YOUR OWN FREE CALL →

Or re-run this exact call — same tool, same arguments.

Share on X ·

Verification checks

Integrity check: Recomputable from canonical bytes
Issued by zambo.dev: Served from the zambo.dev receipt store
Chain valid: Receipt hash chain is internally consistent
Recorded in the immutable log: 2026-09-21T14:57:30.170Z

Proof of observed execution

Receipt ID: c009f1f6-bc59-458c-9446-165044a7db6c
SHA-256 output hash: sha256:6df8caa61d0dc1d8c2c8c8a454b2d8bb08db22c5442c529540ade72c37cd35df
Canonical bytes: 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
Timestamp: 2026-09-21T14:57:30.170Z

Bound call context

Receipt schema: 0.3
Tool name: prompt_shield
Tool version: 4.0.0
Permission scope: public
Caller type: anonymous
Caller ID: sha256:27b428a2f310cab6a82461e6db6f5a7cb7e967d193abf9281fb98007a21830db
Declared side effects: none
Side-effects schema: zambo-side-effects/1
Declaration hash: sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee

This records what the server-side tool contract declared at call time. It does not independently verify that a downstream side effect happened.

Bound upstream evidence

Status: captured
Evidence SHA-256: sha256:82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989
Byte length: 947

Fetch exact evidence bytes

Neutral Nostr anchor

Event ID: 11024576d4c30a4dc42f1c8ae98ecb11cc70a8d140923bb9178263ee0048d4bf
Anchor status: partial
Public key: e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41

Relay hints: wss://relay.damus.io · wss://nos.lol · wss://relay.primal.net

Schema: zambo-receipt-anchor/1

Anchor envelope bytes:

{"anchored_at":"2026-09-21T14:57:30.052Z","evidence_byte_length":947,"evidence_sha256":"sha256:82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989","evidence_url":"https://zambo.dev/api/evidence/82b5099b1687566cb3f3bbcae57141c78fd19ab4190bb4802d8ac766581c2989","output_sha256":"sha256:6df8caa61d0dc1d8c2c8c8a454b2d8bb08db22c5442c529540ade72c37cd35df","receipt_uuid":"c009f1f6-bc59-458c-9446-165044a7db6c","schema_version":"zambo-receipt-anchor/1"}

Anchor status "partial": Published to some configured relay targets; publication was not confirmed by every configured relay.

Check this hash yourself

Open the verification endpoint — the server recomputes the SHA-256 from the stored bytes and answers verified:true. If it doesn't say verified, don't trust this page. See the Nostr anchor event on a public viewer — the fingerprint is timestamped outside Zambo too.

Embed this receipt

Markdown

[![Verifiable Zambo receipt](https://zambo.dev/api/receipt/c009f1f6-bc59-458c-9446-165044a7db6c/badge.svg)](https://zambo.dev/run/c009f1f6-bc59-458c-9446-165044a7db6c)

HTML

<a href="https://zambo.dev/run/c009f1f6-bc59-458c-9446-165044a7db6c"><img src="https://zambo.dev/api/receipt/c009f1f6-bc59-458c-9446-165044a7db6c/badge.svg" alt="Verifiable Zambo receipt"></a>

Open badge SVG

Recent verifiable receipts

33,006 verifiable receipts minted