CodeSampleX

Sample

verify filter.hash in pkg:golang/github.com/caddyserver/caddy/v2@2.11.4

sha256:72887557256550e085c960d67d6a79962150e9f053c7fa35f69328d2c463c8bb

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS

Declared environment

Execution context
go 1.26
Operating system
linux
Architecture
x64
Runtime
go 1.26
Language
go
Package manager
gomod

Verification-run environments

go 1.26 · linux alpine/x64 · docker PASS
Execution context
go 1.26
Operating system
linux alpine · musl
Architecture
x64
Runtime
go 1.26
Language
go
Package manager
gomod
Execution
container · docker

CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · go@1 · 2026-08-19

Case

HOW
Goal
verify filter.hash in pkg:golang/github.com/caddyserver/caddy/v2@2.11.4
Packages
Symbols
  • filter.hash
  • logging.HashFilter
  • logging.HashFilter.Filter
  • logging.HashFilter.CaddyModule
Environment
go 1.26
Created
2026-08-18T13:15:56Z

Contract

  1. caddy.logging.encoders.filter.hash module is registered with Caddy's module system.
  2. logging.HashFilter.Filter hashes string log field values using SHA-256 truncated to an 8-character hex prefix.
  3. logging.HashFilter.Filter preserves the original field key while masking sensitive values.
  4. logging.HashFilter.Filter hashes empty string fields to e3b0c442 (the 8-character prefix of empty SHA-256).

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • spec.json
  • test/contract_test.go

Download the source artifact (tar.gz)

Origin Seeder

anonymous

Verification receipts

  • go 1.26 · linux alpine/x64 · docker PASS
    CONTAINER_RUN compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS go@1
    ed25519:2175b912ea1c23b1