CodeSampleX

Sample

attribute.NewSet mutates a provided variadic slice in place to sort and deduplicate it, corrupting the caller's array.

sha256:941874a3f6d0c964a2fd75094a1f5b9eaeb07fac3cb5a2e70c9510c4f1806c94

PUBLISHED L3_CONTRACT_PASS MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basisSigned contract pass
Verification receipts1
Verification levelL3_CONTRACT_PASS

Declared environment

Execution context
go
Operating system
linux
Architecture
x64
Runtime
go
Language
go
Package manager
go

Verification-run environments

Execution context
go 1.26
Operating system
linux alpine · musl
Architecture
x64
Runtime
go 1.26
Language
go
Package manager
go
Execution
container · docker

CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · golang@1 · 2026-08-17

Case

Goal
attribute.NewSet mutates a provided variadic slice in place to sort and deduplicate it, corrupting the caller's array. HOW
Packages
go.opentelemetry.io/otel 1.35.0
Environment
go
Created
2026-08-17T23:37:34Z

Commonly assumed

attribute.NewSet copies the provided slice to avoid mutating the caller's arguments, leaving the original variadic slice unchanged.

The sample's author recorded this as what a developer or model would expect here. The contract below is what actually ran.

Contract

Files

Download the source artifact (tar.gz)

Origin Seeder

csx-seed

Verification receipts