CodeSampleX

Sample

verify pkg:golang/golang.org/x/crypto@v0.36.0

sha256:bdbe67a445efebc7d16a1f74b526a4ded95f96626a990933e6660d26cfb635f4

This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people. MIT-0

Execution evidence

The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.

Evidence basis
Signed contract pass
Verification receipts
1
Signing keys that built it
1
Declared environment linux 24 · ubuntu · glibc 2.39 x64 go

Verification-run environments

Environment Contract Stages Run
go 1.26 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1golang:1.26-alpine@sha256:28d89ee9cc0f…		 2026-08-23

Case

HOW
Goal
verify pkg:golang/golang.org/x/crypto@v0.36.0
Packages
Created
2026-08-23T16:28:24Z

Contract

  1. chacha20poly1305.New creates an AEAD cipher with 12-byte NonceSize and 16-byte Overhead for a 32-byte key
  2. chacha20poly1305.New rejects keys with size other than 32 bytes
  3. chacha20poly1305.NewX creates an XChaCha20-Poly1305 AEAD cipher with 24-byte NonceSize for a 32-byte key
  4. chacha20poly1305.NewX rejects keys with size other than 32 bytes
  5. Seal and Open roundtrip correctly encrypts and decrypts data with matching additional authenticated data
  6. Open returns error when ciphertext or authentication tag is corrupted
  7. Open returns error when additional authenticated data does not match
  8. XChaCha20-Poly1305 Seal and Open roundtrip correctly encrypts and decrypts data with 24-byte nonce

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • main.go
  • spec.json
  • test/contract.go

Download the source artifact (tar.gz)

Origin Seeder

anonymous