Exemplo
github.com/aws/aws-sdk-go v1.37.0
Amostra verificada para golang github.com/aws/aws-sdk-go v1.37.0. O contrato rodou em go 1.26 · linux debian/x64 · docker e passou.
sha256:e9f42f95ecf7e8f8d72fa7388d498de4cd6ac3386153a08317f8d30bc2d92374
Esta rede oferece uma coisa: uma amostra que compila. Ela a executou em um sandbox e guardou o recibo assinado. Não classifica nem garante nada — se o mesmo código compila onde você está, ela não mediu.
Quantas chaves de assinatura distintas enviaram um recibo de contrato aprovado. Uma é só o autor; mais de uma significa que outra pessoa também o compilou. Uma chave é gerada por conta própria e não tem identidade registrada por trás, então conta chaves, não pessoas.
MIT-0
Evidência de execução
O ambiente declarado e as execuções assinadas ficam separados, para você ver exatamente o que esta amostra executou e onde.
- Base da evidência
- Contrato assinado aprovado
- Recibos de verificação
- 1
- Chaves de assinatura que o compilaram
- 1
Ambiente declarado
linux 24 · ubuntu · glibc 2.39 x64 go
Ambientes das execuções de verificação
| Ambiente | Contrato | Etapas | Execução |
|---|---|---|---|
| go 1.26 · linux debian/x64 · docker ed25519:c1973797be207ac4 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · golang@1golang:1.26@sha256:e30143be198a… |
2026-10-23 |
Caso
HOW- Objetivo
- verify pkg:golang/github.com/aws/aws-sdk-go@v1.37.0
- Criado
- 2026-10-23T17:53:33Z
Contrato
- aws.StringValue(aws.String("hello")) == "hello"
- aws.IntValue(aws.Int(42)) == 42
- arn.Parse("arn:aws:s3:::my-bucket/my-key") extracts Service=="s3" and Resource=="my-bucket/my-key"
- credentials.NewStaticCredentials("AKID", "SECRET", "TOKEN").Get() returns the configured static credentials
Arquivos
- PROMPT.md
- csx.json
- go.mod
- go.sum
- spec.json
- test/contract.go
Código-fonte
Clean-room public code sample — generation instructions
Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.
A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.
Goal: verify pkg:golang/github.com/aws/aws-sdk-go@v1.37.0
Kind: HOW
Use EXACTLY these public packages and versions:
- pkg:golang/github.com/aws/aws-sdk-go@v1.37.0
Rules:
- One focused purpose; the smallest project that proves the goal.
- Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
- Pin every dependency with a lockfile so resolution is reproducible.
- No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
- No personal names, emails, company names, or project identifiers of any kind.
- No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
- Keep it under 200 files and 256KB packed.
{"case":{"caseId":"case:sha256:232b5b3305e55e38c0c3b132176bd2a1e8fa4cec35cb75ff270a5d09ac0b640e","contract":["aws.StringValue(aws.String(\"hello\")) == \"hello\"","aws.IntValue(aws.Int(42)) == 42","arn.Parse(\"arn:aws:s3:::my-bucket/my-key\") extracts Service==\"s3\" and Resource==\"my-bucket/my-key\"","credentials.NewStaticCredentials(\"AKID\", \"SECRET\", \"TOKEN\").Get() returns the configured static credentials"],"goal":"verify pkg:golang/github.com/aws/aws-sdk-go@v1.37.0","kind":"HOW","packages":["pkg:golang/github.com/aws/aws-sdk-go@v1.37.0"],"schemaVersion":1},"contractCommand":["go","run","./test"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"golang","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"go","schemaVersion":1},"license":"MIT-0","packages":["pkg:golang/github.com/aws/aws-sdk-go@v1.37.0"],"schemaVersion":1,"subject":"pkg:golang/github.com/aws/aws-sdk-go@v1.37.0","verifierAdapter":"golang@1"}
module example.com/sample
go 1.21
require github.com/aws/aws-sdk-go v1.37.0
github.com/aws/aws-sdk-go v1.37.0 h1:GzFnhOIsrGyQ69s7VgqtrG2BG8v7X7vwB3Xpbd/DBBk=
github.com/aws/aws-sdk-go v1.37.0/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U=
github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
{
"schemaVersion": 1,
"goal": "verify pkg:golang/github.com/aws/aws-sdk-go@v1.37.0",
"kind": "HOW",
"packages": [
"pkg:golang/github.com/aws/aws-sdk-go@v1.37.0"
]
}
package main
import (
"fmt"
"os"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/arn"
"github.com/aws/aws-sdk-go/aws/credentials"
)
func main() {
s := aws.String("hello")
if aws.StringValue(s) != "hello" {
fmt.Fprintln(os.Stderr, "unexpected string value")
os.Exit(1)
}
if aws.IntValue(aws.Int(42)) != 42 {
fmt.Fprintln(os.Stderr, "unexpected int value")
os.Exit(1)
}
parsed, err := arn.Parse("arn:aws:s3:::my-bucket/my-key")
if err != nil {
fmt.Fprintln(os.Stderr, "failed to parse arn:", err)
os.Exit(1)
}
if parsed.Service != "s3" || parsed.Resource != "my-bucket/my-key" {
fmt.Fprintln(os.Stderr, "unexpected parsed arn fields")
os.Exit(1)
}
creds := credentials.NewStaticCredentials("AKID", "SECRET", "TOKEN")
val, err := creds.Get()
if err != nil {
fmt.Fprintln(os.Stderr, "failed to get credentials:", err)
os.Exit(1)
}
if val.AccessKeyID != "AKID" || val.SecretAccessKey != "SECRET" || val.SessionToken != "TOKEN" {
fmt.Fprintln(os.Stderr, "unexpected credential values")
os.Exit(1)
}
}
Seeder de origem
anônimo