CodeSampleX

Sample

verify pkg:golang/github.com/google/uuid@v1.6.0

sha256:804bdeff560913823ac96403390ff980369b52d5bf6dcf9d354392f4adbd73ab

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment windows 11 x64 go

Verification-run environments

Environment Contract Stages Run
go 1.26 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1
2026-08-19

Case

HOW
Goal
verify pkg:golang/github.com/google/uuid@v1.6.0
Packages
Created
2026-08-19T09:48:32Z

Contract

  1. uuid.NewString generates a valid 36-character canonical UUID v4 string with version 4 and RFC4122 variant
  2. uuid.Validate accepts valid canonical UUID strings and returns an error for invalid UUID strings
  3. uuid.NewV7 generates a valid version 7 time-ordered UUID with RFC4122 variant
  4. uuid.Parse parses canonical UUID string into a 16-byte UUID value matching the original
  5. uuid.Nil represents the 16-byte zero UUID value

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • sample.go
  • spec.json
  • test/contract.go

Download the source artifact (tar.gz)

Origin Seeder

anonymous