CodeSampleX

Sample

verify pkg:golang/github.com/google/uuid@v1.6.0

sha256:b8a3579ed7efa4ac98a57c4658965675d2c4cb4adba12c78825bdbed08aad7f4

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment windows 11 x64 go

Verification-run environments

Environment Contract Stages Run
go 1.26 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1
2026-08-19

Case

HOW
Goal
verify pkg:golang/github.com/google/uuid@v1.6.0
Packages
Symbols
  • github.com/google/uuid.NewSHA1
  • github.com/google/uuid.NewMD5
  • github.com/google/uuid.FromBytes
Created
2026-08-19T08:58:01Z

Contract

  1. uuid.NewSHA1 generates a valid version 5 UUID from namespace and data
  2. uuid.NewMD5 generates a valid version 3 UUID from namespace and data
  3. uuid.FromBytes constructs UUID from valid 16-byte slice
  4. uuid.FromBytes returns error for invalid byte slice length

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • spec.json
  • test/contract.go
  • uuid_sample.go

Download the source artifact (tar.gz)

Origin Seeder

anonymous