Sample
verify pkg:maven/org.apache.maven/maven-core@3.9.11
sha256:50d437a63aa637e25da3e9c876406450826db287cbcae91a2a3917ac23c0fc67
Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures.
Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments.
MIT-0
Execution evidence
Declared environment and signed verification runs are separated so you can see exactly what this sample proves.
- Evidence basis
- Independent cross-verification
- Verification receipts
- 1
- Verification level
- L4_CROSS_PASS
Declared environment
- Execution context
- java 21
- Operating system
- linux 2023 · glibc
- Architecture
- x64
- Runtime
- java 21
- Language
- java 21
- Package manager
- maven 3
Verification-run environments
- Execution context
- java 21
- Operating system
- linux 2023 · amzn · glibc
- Architecture
- x64
- Runtime
- java 21
- Language
- java 21
- Package manager
- maven 3
- Execution
- container · docker
Case
HOW- Goal
- verify pkg:maven/org.apache.maven/maven-core@3.9.11
- Packages
-
- javax.inject/javax.inject 1
- org.apache.maven.resolver/maven-resolver-api 1.9.22
- org.apache.maven.resolver/maven-resolver-impl 1.9.22
- org.apache.maven.resolver/maven-resolver-spi 1.9.22
- org.apache.maven.resolver/maven-resolver-util 1.9.22
- org.apache.maven.shared/maven-shared-utils 3.4.2
- org.apache.maven/maven-artifact 3.9.11
- org.apache.maven/maven-builder-support 3.9.11
- org.apache.maven/maven-core 3.9.11
- org.apache.maven/maven-model-builder 3.9.11
- org.apache.maven/maven-model 3.9.11
- org.apache.maven/maven-plugin-api 3.9.11
- org.apache.maven/maven-repository-metadata 3.9.11
- org.apache.maven/maven-settings-builder 3.9.11
- org.apache.maven/maven-settings 3.9.11
- org.codehaus.plexus/plexus-component-annotations 2.1.0
- org.codehaus.plexus/plexus-interpolation 1.26
- org.codehaus.plexus/plexus-utils 3.5.1
- org.eclipse.sisu/org.eclipse.sisu.inject 0.3.5
- org.eclipse.sisu/org.eclipse.sisu.plexus 0.3.5
- org.slf4j/slf4j-api 1.7.36
- Symbols
-
- MavenProject
- DefaultMavenExecutionRequest
- DefaultArtifact
- Model
- Environment
- java 21
- Created
- 2026-08-18T12:54:49Z
Contract
- Model builds POM model metadata including groupId, artifactId, dependencies, and build plugins.
- MavenProject initializes project coordinates, packaging, and unique identifier from Model.
- DefaultMavenExecutionRequest configures build goals, base directory, and execution flags.
- DefaultArtifact constructs dependency artifacts with scope, type, and coordinate formatting.
Files
- PROMPT.md
- csx.json
- pom.xml
- spec.json
- src/Contract.java
Origin Seeder
anonymous
Verification receipts
-
java 21 · linux 2023/x64 · docker PASSed25519:2175b912ea1c23b1