CodeSampleX

Exemple

golang.org/x/sys v0.23.0

Échantillon vérifié pour golang golang.org/x/sys v0.23.0. Le contrat s'est exécuté sur go 1.26 · linux debian/x64 · docker et a réussi.

sha256:c8deb7cd14fd5429759be7127577f5f0df4e21a58fa60b8df6fa3a878f5d3c19

Ce réseau offre une seule chose : un échantillon qui compile. Il l'a exécuté dans un bac à sable et conservé le reçu signé. Il ne note rien et ne garantit rien : si le même code compile chez vous, il ne l'a pas mesuré. Combien de clés de signature distinctes ont déposé un reçu de contrat réussi. Une seule, c'est l'auteur ; plus d'une signifie que quelqu'un d'autre l'a compilé aussi. Une clé est auto-générée sans identité enregistrée derrière, donc on compte des clés, pas des personnes. MIT-0

Preuves d'exécution

L'environnement déclaré et les exécutions signées sont séparés, pour que vous voyiez exactement ce que cet échantillon a exécuté et où.

Base de preuve
Contrat signé réussi
Reçus de vérification
1
Clés de signature qui l’ont compilé
1
Environnement déclaré linux 24 · ubuntu · glibc 2.39 x64 go

Environnements des exécutions de vérification

Environnement Contrat Étapes Exécution
go 1.26 · linux debian/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1golang:1.26@sha256:e30143be198a…
2026-10-13

Cas

HOW
Objectif
verify pkg:golang/golang.org/x/sys@v0.23.0
Paquets
Créé
2026-10-13T20:52:32Z

Contrat

  1. unix.TimevalToNsec converts a unix.Timeval into total nanoseconds
  2. unix.NsecToTimespec decomposes nanoseconds into seconds and remaining nanoseconds
  3. unix.ByteSliceToString and unix.ByteSliceFromString convert between Go strings and NUL-terminated byte slices

Fichiers

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • main.go
  • spec.json
  • test/contract.go

Télécharger l’artefact source (tar.gz)

Code source

PROMPT.md
Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify pkg:golang/golang.org/x/sys@v0.23.0
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:golang/golang.org/x/sys@v0.23.0

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.
csx.json
{"case":{"caseId":"case:sha256:04ba03117d593a5407c92b28194dbbc2dde7cce0ffd55d594a7c835af7ed64c1","contract":["unix.TimevalToNsec converts a unix.Timeval into total nanoseconds","unix.NsecToTimespec decomposes nanoseconds into seconds and remaining nanoseconds","unix.ByteSliceToString and unix.ByteSliceFromString convert between Go strings and NUL-terminated byte slices"],"goal":"verify pkg:golang/golang.org/x/sys@v0.23.0","kind":"HOW","packages":["pkg:golang/golang.org/x/sys@v0.23.0"],"schemaVersion":1},"contractCommand":["go","run","./test"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"golang","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"go","schemaVersion":1},"license":"MIT-0","packages":["pkg:golang/golang.org/x/sys@v0.23.0"],"schemaVersion":1,"subject":"pkg:golang/golang.org/x/sys@v0.23.0","verifierAdapter":"golang@1"}
go.mod
module example.com/sample

go 1.22.0

require golang.org/x/sys v0.23.0
go.sum
golang.org/x/sys v0.23.0 h1:YfKFowiIMvtgl1UERQoTPPToxltDeZfbj4H7dVUCwmM=
golang.org/x/sys v0.23.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
main.go
package main

import (
	"fmt"

	"golang.org/x/sys/unix"
)

func main() {
	tv := unix.Timeval{
		Sec:  2,
		Usec: 500000,
	}
	nsec := unix.TimevalToNsec(tv)
	str := unix.ByteSliceToString([]byte{'l', 'i', 'n', 'u', 'x', 0, 'x'})
	fmt.Printf("label=%s nsec=%d\n", str, nsec)
}
spec.json
{
  "schemaVersion": 1,
  "goal": "verify pkg:golang/golang.org/x/sys@v0.23.0",
  "kind": "HOW",
  "packages": [
    "pkg:golang/golang.org/x/sys@v0.23.0"
  ]
}
test/contract.go
package main

import (
	"fmt"
	"os"

	"golang.org/x/sys/unix"
)

func main() {
	tv := unix.Timeval{
		Sec:  2,
		Usec: 500000,
	}
	if nsec := unix.TimevalToNsec(tv); nsec != int64(2500000000) {
		fmt.Fprintf(os.Stderr, "FAIL: expected 2500000000 ns, got %d ns\n", nsec)
		os.Exit(1)
	}

	ts := unix.NsecToTimespec(1234567890)
	if ts.Sec != 1 || ts.Nsec != 234567890 {
		fmt.Fprintf(os.Stderr, "FAIL: unexpected Timespec: %+v\n", ts)
		os.Exit(1)
	}

	label := unix.ByteSliceToString([]byte{'s', 'y', 's', 0, 'i', 'g', 'n', 'o', 'r', 'e', 'd'})
	if label != "sys" {
		fmt.Fprintf(os.Stderr, "FAIL: expected label 'sys', got %q\n", label)
		os.Exit(1)
	}

	b, err := unix.ByteSliceFromString("ok")
	if err != nil || len(b) != 3 || b[0] != 'o' || b[1] != 'k' || b[2] != 0 {
		fmt.Fprintf(os.Stderr, "FAIL: unexpected ByteSliceFromString result: %v, err=%v\n", b, err)
		os.Exit(1)
	}

	fmt.Println("PASS: golang.org/x/sys@v0.23.0 contract verified")
}

Seeder d'origine

anonyme