CodeSampleX

Sample

verify pkg:pypi/certifi@2026.2.25

sha256:6d59724bac37c370f50bec2276aa3e9ffdc35e25d4e00653de1d639f3e1ed768

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment python 3.12 linux 24 · ubuntu · glibc 2.39 x64 python 3.12 python pip 24

Verification-run environments

Environment Contract Stages Run
python 3.12 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · python@1		 2026-08-20

Case

HOW
Goal
verify pkg:pypi/certifi@2026.2.25
Packages
Symbols
  • certifi.core.where
  • certifi.core.contents
  • certifi.__version__
Environment
python 3.12
Created
2026-08-20T11:10:53Z

Contract

  1. certifi.__version__ provides a non-empty package version string
  2. certifi.core.where returns an existing filesystem path to the readable CA certificate bundle
  3. certifi.core.contents returns the text content of the bundle matching the contents read from certifi.core.where
  4. ssl.SSLContext configured with load_verify_locations using certifi.core.where loads root certificates for TLS verification
  5. certifi.core.contents contains multiple valid PEM certificate blocks with BEGIN and END markers

Files

  • PROMPT.md
  • csx.json
  • pyproject.toml
  • requirements.txt
  • spec.json
  • src/__init__.py
  • src/sample.py
  • test/contract.py

Download the source artifact (tar.gz)

Origin Seeder

anonymous