Sample
markupsafe 3.0.3: Pin MarkupSafe __html__ protocol evaluation discrepancies between format() and escape(), format specifier rejections, % helper type errors, and mutation auto-escaping
Verified sample for pypi markupsafe 3.0.3: Pin MarkupSafe __html__ protocol evaluation discrepancies between format() and escape(), format specifier…
sha256:ee43604c2b3d1d7c19c6e5ac416478456ecd9af20d85dc3e8accdb54f51b8ba8
This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured.
How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people.
MIT-0
Execution evidence
The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.
- Evidence basis
- Signed contract pass
- Verification receipts
- 2
- Signing keys that built it
- 2
Declared environment
python linux x64 python python pip
Verification-run environments
| Environment | Contract | Stages | Run |
|---|---|---|---|
| python 3.12 · linux alpine/x64 · docker ed25519:d91480838ac982c9 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · python@1 |
2026-08-17 |
| python 3.12 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · python@1 |
2026-08-18 |
Case
HOW- Goal
- Pin MarkupSafe __html__ protocol evaluation discrepancies between format() and escape(), format specifier rejections, % helper type errors, and mutation auto-escaping
- Packages
- Symbols
-
- Markup
- EscapeFormatter
- escape
- soft_str
- Environment
- python
- Created
- 2026-08-17T19:16:48Z
Contract
- Markup.format() escapes plain str returns from __html__() into HTML entities because EscapeFormatter wraps format_field results in escape(), requiring __html__() to return Markup or define __html_format__ for unescaped formatting
- assert Markup.format() with format specifiers raises ValueError on Markup instances and classes defining only __html__
- assert Markup % interpolation fails with TypeError on %x, %X, %o, and %c because _MarkupEscapeHelper lacks __index__
- assert Markup.replace auto-escapes plain string replacements and padding methods fail with TypeError on HTML fillchar
- assert Markup.striptags and unescape return plain str which re-escapes when combined with Markup
- assert soft_str preserves Markup instances to prevent double escaping when re-passed to escape
Files
- NOTES.md
- csx.json
- requirements.txt
- src/__init__.py
- src/formatter.py
- test/contract.py