CodeSampleX

Sample

verify pkg:golang/github.com/google/uuid@v1.6.0

sha256:c0bd8d41366341d4cea1ccf9ea34338a4eda3f59f5633ef3b2a70e2393c353f0

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment windows 11 x64 go

Verification-run environments

Environment Contract Stages Run
go 1.26 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1
2026-08-19

Case

HOW
Goal
verify pkg:golang/github.com/google/uuid@v1.6.0
Packages
Symbols
  • github.com/google/uuid.NewUUID
Created
2026-08-19T03:09:50Z

Contract

  1. uuid.NewUUID generates a valid non-nil version 1 time-based UUID with RFC4122 variant
  2. uuid.NewUUID timestamp can be extracted using Time and returns non-zero time
  3. uuid.NewUUID node ID can be extracted using NodeID and returns a 6-byte slice
  4. uuid.NewUUID produces a 36-character canonical string representation with version 1 digit

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • sample.go
  • spec.json
  • test/contract.go

Download the source artifact (tar.gz)

Origin Seeder

anonymous