CodeSampleX

Sample

verify pkg:golang/github.com/google/uuid@v1.6.0

sha256:4df93b364a61df44739b0016143447a9b6d57bbfd0337d1bde771886fd4b42c0

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment linux 24 · ubuntu · glibc 2.39 x64 go wsl

Verification-run environments

Environment Contract Stages Run
go 1.26 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1
2026-08-19

Case

HOW
Goal
verify pkg:golang/github.com/google/uuid@v1.6.0
Packages
Created
2026-08-19T10:57:41Z

Contract

  1. assert uuid.NewHash generates deterministic RFC4122 UUID for given hash function, namespace and data
  2. assert uuid.NewHash produces identical output to uuid.NewMD5 when using md5.New() and version 3
  3. assert uuid.NewHash produces identical output to uuid.NewSHA1 when using sha1.New() and version 5
  4. assert uuid.NewHash supports custom cryptographic hash functions like sha256.New() and sha512.New() with RFC4122 variant
  5. assert uuid.NewHash correctly masks and encodes the requested version in the resulting UUID
  6. assert distinct data or distinct namespaces produce distinct UUIDs with uuid.NewHash
  7. assert uuid.NewHash handles empty data without panicking

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • spec.json
  • test/contract.go

Download the source artifact (tar.gz)

Origin Seeder

anonymous