Sample
attrs 26.1.0: Avoid silent set lookup corruption, broken hash contracts, boolean env misparsing, and init method clobbering across attrs build and configuration flags
Verified sample for pypi attrs 26.1.0: Avoid silent set lookup corruption, broken hash contracts, boolean env misparsing, and init method clobbering across…
sha256:589dbdb95f799e315e97d4888839aa4301cb11c0bb3bcd10412257d49c3a257b
This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured.
How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people.
MIT-0
Execution evidence
The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.
- Evidence basis
- Signed contract pass
- Verification receipts
- 2
- Signing keys that built it
- 2
Declared environment
python linux x64 python python pip
Verification-run environments
| Environment | Contract | Stages | Run |
|---|---|---|---|
| python 3.12 · linux alpine/x64 · docker ed25519:d91480838ac982c9 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · python@1 |
2026-08-16 |
| python 3.12 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · python@1 |
2026-08-18 |
Case
HOW- Goal
- Avoid silent set lookup corruption, broken hash contracts, boolean env misparsing, and init method clobbering across attrs build and configuration flags
- Packages
- Symbols
-
- attrs.define
- attrs.field
- attrs.converters.to_bool
- attrs.converters.optional
- attrs.converters.default_if_none
- attrs.validators.gt
- attr.s
- attr.ib
- Environment
- python
- Created
- 2026-08-16T06:23:29Z
Contract
- assert naive bool() converts string 'false', '0', 'off', and 'no' to True, while attrs.converters.to_bool correctly converts them to False
- assert attrs.converters.to_bool raises ValueError on non-boolean strings like 'maybe' and invalid types like 2 or None
- assert default @define generates hash=None making mutable instances unhashable and raising TypeError on hash()
- assert @define(unsafe_hash=True) allows hashing mutable instances, but field mutation silently corrupts set and dict membership lookups
- assert @define(unsafe_hash=True, cache_hash=True) caches the hash permanently, causing equal objects to produce unequal hashes and violate the Python hash contract
- assert @define(eq=False) does not set __hash__ to None and falls back to object identity hashing
- assert @attr.s with auto_detect=False silently overwrites custom __init__ definitions with generated ones
- assert @attrs.define with auto_detect=True preserves custom __init__ but runs converter and validator on __setattr__ assignments inside it
- assert @attrs.define on Exception subclasses defaults to auto_exc=True, using identity equality and preserving BaseException hashability
- assert @attrs.define(auto_exc=False) generates value equality on Exception subclasses and sets __hash__ to None, making them unhashable
- assert @attrs.define(match_args=True) generates __match_args__ for pattern matching, while match_args=False causes positional matching to raise TypeError
- assert field_transformer transforms Attribute definitions at class creation time before code generation
Files
- NOTES.md
- csx.json
- requirements.txt
- src/__init__.py
- src/models.py
- test/contract.py