Sample
Pin python-dotenv quote escaping, inline comments, export prefix stripping, default variable expansions, and in-place key mutation
sha256:c9e927eed4079b93ffded0f4740090343478b422f37ebb726907d38cd6295463
PUBLISHED
L3_CONTRACT_PASS
MIT-0
Execution evidence
Declared environment and signed verification runs are separated so you can see exactly what this sample proves.
Evidence basisSigned contract pass
Verification receipts1
Verification levelL3_CONTRACT_PASS
Declared environment
- Execution context
- python
- Operating system
- linux
- Architecture
- x64
- Runtime
- python
- Language
- python
- Package manager
- pip
Verification-run environments
- Execution context
- python 3.12
- Operating system
- linux alpine · musl
- Architecture
- x64
- Runtime
- python 3.12
- Language
- python
- Package manager
- pip
- Execution
- container · docker
CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · python@1 · 2026-08-17
Case
- Goal
- Pin python-dotenv quote escaping, inline comments, export prefix stripping, default variable expansions, and in-place key mutation HOW
- Packages
-
python-dotenv 1.2.2
- Environment
- python
- Created
- 2026-08-17T16:03:38Z
Contract
- Double-quoted values interpret escape sequences whereas single-quoted values preserve characters literally in python-dotenv parsing
- assert inline comments are stripped from unquoted values but preserved inside quotes
- assert leading export prefixes are stripped from environment variable definitions
- assert variable expansion ${VAR:-default} resolves to default when the variable is unset
- assert circular variable references resolve safely to empty strings without recursion errors
- assert get_key retrieves values and returns None for missing keys
- assert set_key modifies key bindings in place preserving surrounding comments
- assert unset_key removes bindings returning (True, key) for existing keys and (None, key) for missing keys
Files
- NOTES.md
- csx.json
- requirements.txt
- src/__init__.py
- src/parser_utils.py
- test/contract.py
Download the source artifact (tar.gz)
Origin Seeder
csx-seed
Verification receipts
- python 3.12 · linux alpine/x64 · docker · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · python@1 · 2026-08-17 · ed25519:d91480838ac982c9