Recordsgolanggolang.org/x/cryptofailure issue
Failure signature
PROJECT_RESOLVE exit 1 ×2
<path>:<n>:<n>: missing go.sum entry for module providing package golang.org/x/sys/cpu (imported by golang.<token>); to add:
Evidence quality: complete · go/module · resolve-diagnostic · outer go run, go test · First recorded: 2026-08-30 · Last seen: 2026-09-04
sha256:3bfb7eb59b1f…
golang.org/x/crypto/blake2b.New256 golang.org/x/crypto/chacha20poly1305.KeySize golang.org/x/crypto/chacha20poly1305.New golang.org/x/crypto/chacha20poly1305.NewX
Where it was measured
PASS means the release recorded a passing observation at PROJECT_RESOLVE and no record of this failure. That is the nearest thing to absence this network can report, not a proof of it.
- v0.56.0 not measured
- v0.55.0 not measured
- v0.54.0 FAIL
- v0.53.0 not measured
- v0.52.0 not measured
- v0.20.0 not measured
- v0.19.0 not measured
- v0.11.1-0.20230711161743-2e82bdd1719d FAIL
- v0.3.0 not measured
Where it reproduced
- os=linux · runtime=go@1.26 ×2 2026-08-30 → 2026-09-04
Nearest known PASS/FAIL boundaries
No release either side of this failure recorded a passing observation at this stage, so where it starts and stops is not established.
Dependency versions across releases
What each release of this package resolved its children to. A child whose version moved is listed first: that is where an upgrade changed something underneath you.
| Library | v0.56.0 | v0.55.0 | v0.54.0 | v0.53.0 | v0.52.0 | v0.20.0 | v0.19.0 | v0.11.1-0.20230711161743-2e82bdd1719d | v0.3.0 |
|---|---|---|---|---|---|---|---|---|---|
| golang.org/x/net | v0.57.0 | v0.57.0 | v0.57.0 | v0.56.0 | v0.55.0 | v0.21.0 | v0.21.0 | v0.10.0 | v0.2.0 |
| golang.org/x/sys | v0.47.0 | v0.47.0 | v0.47.0 | v0.46.0 | v0.45.0 | v0.17.0 | v0.17.0 | v0.47.0 | v0.2.0 |
| golang.org/x/term | v0.45.0 | v0.45.0 | v0.45.0 | v0.44.0 | v0.43.0 | v0.17.0 | v0.17.0 | v0.10.0 | v0.2.0 |
Moved: 3 · unchanged at every release: 0
An edge records that a resolver placed one release beside another on a real machine. It is not a claim that the two work together; that question is answered by samples and contracts, not by presence here.
Evidence gaps
- No release in this window recorded a passing observation at PROJECT_RESOLVE.
- Releases in this window never measured at PROJECT_RESOLVE: 7
- No failure domain was inferred for this failure.
Published answers for the affected releases
- golang.org/x/crypto v0.54.0: hkdf.New This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWhkdf.New MIT-0 · 2026-08-30
- golang.org/x/crypto v0.54.0: scrypt.Key This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWscrypt.Key MIT-0 · 2026-08-30
- golang.org/x/crypto v0.54.0: blake2b.New256 This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWblake2b.New256go 1.26 MIT-0 · 2026-08-30
- golang.org/x/crypto v0.11.1-0.20230711161743-2e82bdd1719d: chacha20poly1305.NewX This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWgolang.org/x/crypto/chacha20poly1305.NewXgo 1.26.6 MIT-0 · 2026-09-04
- golang.org/x/crypto v0.11.1-0.20230711161743-2e82bdd1719d: chacha20poly1305.New This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWgolang.org/x/crypto/chacha20poly1305.Newgo 1.26.6 MIT-0 · 2026-09-04
- golang.org/x/crypto v0.11.1-0.20230711161743-2e82bdd1719d: chacha20poly1305.KeySize This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWgolang.org/x/crypto/chacha20poly1305.KeySize MIT-0 · 2026-09-04