CodeSampleX

Beispiel

golang.org/x/sys v0.24.0

Verifiziertes Beispiel für golang golang.org/x/sys v0.24.0. Der Vertrag lief auf go 1.26 · linux debian/x64 · docker und bestand.

sha256:8cccd7343439b259994649383354b39baf9fdfb6a4e802a61210afd212aa7d78

Dieses Netzwerk bietet eine Sache: ein Sample, das baut. Es hat es in einer Sandbox ausgeführt und die signierte Quittung behalten. Es bewertet nichts und garantiert nichts — ob derselbe Code bei Ihnen baut, hat es nicht gemessen. Wie viele verschiedene Signaturschlüssel eine bestandene Vertragsquittung eingereicht haben. Einer ist der Autor allein; mehr als einer heißt, jemand anderes hat es auch gebaut. Ein Schlüssel wird selbst erzeugt und hat keine registrierte Identität dahinter — gezählt werden Schlüssel, nicht Personen. MIT-0

Ausführungsbelege

Die deklarierte Umgebung und die signierten Läufe stehen getrennt, damit Sie genau sehen, was dieses Sample ausgeführt hat und wo.

Beleggrundlage
Signierter Vertrag bestanden
Verifizierungsbelege
1
Signaturschlüssel, die es gebaut haben
1
Deklarierte Umgebung linux 24 · ubuntu · glibc 2.39 x64 go

Umgebungen der Verifizierungsläufe

Umgebung Contract Stufen Lauf
go 1.26 · linux debian/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1golang:1.26@sha256:e30143be198a…
2026-10-16

Fall

HOW
Ziel
verify pkg:golang/golang.org/x/sys@v0.24.0
Pakete
Erstellt
2026-10-16T11:21:30Z

Contract

  1. unix.Getpid returns a strictly positive process ID matching os.Getpid
  2. unix.Uname populates a unix.Utsname struct with non-empty Sysname, Release, and Machine fields readable via unix.ByteSliceToString
  3. unix.ByteSliceFromString and unix.BytePtrFromString append a trailing NUL terminator and return unix.EINVAL when given a string containing an embedded NUL byte
  4. unix.Pipe creates a connected file descriptor pair over which unix.Write and unix.Read transfer exact byte payloads before unix.Close

Dateien

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • spec.json
  • test/contract.go

Quellartefakt herunterladen (tar.gz)

Quelltext

PROMPT.md
Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify pkg:golang/golang.org/x/sys@v0.24.0
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:golang/golang.org/x/sys@v0.24.0

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.
csx.json
{"case":{"caseId":"case:sha256:e7ed83ad8b0f53f6ff36a76f2e92a1de45d6e01117235317f78da4858163d6d6","contract":["unix.Getpid returns a strictly positive process ID matching os.Getpid","unix.Uname populates a unix.Utsname struct with non-empty Sysname, Release, and Machine fields readable via unix.ByteSliceToString","unix.ByteSliceFromString and unix.BytePtrFromString append a trailing NUL terminator and return unix.EINVAL when given a string containing an embedded NUL byte","unix.Pipe creates a connected file descriptor pair over which unix.Write and unix.Read transfer exact byte payloads before unix.Close"],"goal":"verify pkg:golang/golang.org/x/sys@v0.24.0","kind":"HOW","packages":["pkg:golang/golang.org/x/sys@v0.24.0"],"schemaVersion":1},"contractCommand":["go","run","./test"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"golang","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"go","schemaVersion":1},"license":"MIT-0","packages":["pkg:golang/golang.org/x/sys@v0.24.0"],"schemaVersion":1,"subject":"pkg:golang/golang.org/x/sys@v0.24.0","verifierAdapter":"golang@1"}
go.mod
module sample

go 1.21

require golang.org/x/sys v0.24.0
go.sum
golang.org/x/sys v0.24.0 h1:Twjiwq9dn6R1fQcyiK+wQyHWfaz/BJB+YIpzU/Cv3Xg=
golang.org/x/sys v0.24.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
spec.json
{
  "schemaVersion": 1,
  "goal": "verify pkg:golang/golang.org/x/sys@v0.24.0",
  "kind": "HOW",
  "packages": [
    "pkg:golang/golang.org/x/sys@v0.24.0"
  ]
}
test/contract.go
package main

import (
	"bytes"
	"errors"
	"fmt"
	"os"

	"golang.org/x/sys/unix"
)

func fail(format string, args ...any) {
	fmt.Fprintf(os.Stderr, format+"\n", args...)
	os.Exit(1)
}

func main() {
	// 1. Verify unix.Getpid matches os.Getpid and is strictly positive.
	pid := unix.Getpid()
	if pid <= 0 || pid != os.Getpid() {
		fail("unix.Getpid() = %d, want positive pid matching os.Getpid() = %d", pid, os.Getpid())
	}

	// 2. Verify unix.Uname and unix.ByteSliceToString.
	var uts unix.Utsname
	if err := unix.Uname(&uts); err != nil {
		fail("unix.Uname failed: %v", err)
	}
	sysname := unix.ByteSliceToString(uts.Sysname[:])
	release := unix.ByteSliceToString(uts.Release[:])
	machine := unix.ByteSliceToString(uts.Machine[:])
	if sysname == "" || release == "" || machine == "" {
		fail("expected non-empty Utsname fields, got sysname=%q release=%q machine=%q", sysname, release, machine)
	}

	// 3. Verify unix.ByteSliceFromString and unix.BytePtrFromString with valid and NUL-containing inputs.
	cslice, err := unix.ByteSliceFromString("hello")
	if err != nil {
		fail("unix.ByteSliceFromString failed: %v", err)
	}
	if !bytes.Equal(cslice, []byte{'h', 'e', 'l', 'l', 'o', 0}) {
		fail("unexpected byte slice: %v", cslice)
	}
	if got := unix.ByteSliceToString(cslice); got != "hello" {
		fail("unix.ByteSliceToString roundtrip = %q, want %q", got, "hello")
	}
	if _, err := unix.ByteSliceFromString("bad\x00string"); !errors.Is(err, unix.EINVAL) {
		fail("expected unix.EINVAL for embedded NUL in ByteSliceFromString, got %v", err)
	}
	if _, err := unix.BytePtrFromString("bad\x00string"); !errors.Is(err, unix.EINVAL) {
		fail("expected unix.EINVAL for embedded NUL in BytePtrFromString, got %v", err)
	}

	// 4. Verify unix.Pipe, unix.Write, unix.Read, and unix.Close roundtrip.
	var fds [2]int
	if err := unix.Pipe(fds[:]); err != nil {
		fail("unix.Pipe failed: %v", err)
	}
	msg := []byte("x-sys-contract-payload")
	n, err := unix.Write(fds[1], msg)
	if err != nil || n != len(msg) {
		fail("unix.Write = (%d, %v), want (%d, nil)", n, err, len(msg))
	}
	if err := unix.Close(fds[1]); err != nil {
		fail("unix.Close(write fd) failed: %v", err)
	}
	buf := make([]byte, 64)
	rn, err := unix.Read(fds[0], buf)
	if err != nil || !bytes.Equal(buf[:rn], msg) {
		fail("unix.Read = (%q, %v), want (%q, nil)", buf[:rn], err, msg)
	}
	if err := unix.Close(fds[0]); err != nil {
		fail("unix.Close(read fd) failed: %v", err)
	}
}

Ursprungs-Seeder

anonym