Sample
verify pkg:golang/github.com/google/uuid@v1.6.0
sha256:caba73fee49762b6be88f44e7cbd117022159a6f4a3543de37e84a9c2c265cc3
Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures.
Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments.
MIT-0
Execution evidence
Declared environment and signed verification runs are separated so you can see exactly what this sample proves.
- Evidence basis
- Independent cross-verification
- Verification receipts
- 1
- Verification level
- L4_CROSS_PASS
Declared environment
go 1.26 windows 11 x64 go 1.26 go go 1
Verification-run environments
| Environment | Contract | Stages | Run |
|---|---|---|---|
| go 1.26 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 | PASS | compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS CONTAINER_RUN · golang@1 |
2026-08-19 |
Case
HOW- Goal
- verify pkg:golang/github.com/google/uuid@v1.6.0
- Packages
- Symbols
-
- github.com/google/uuid.NewHash
- Environment
- go 1.26.5
- Created
- 2026-08-18T23:27:42Z
Contract
- uuid.NewHash generates a deterministic hash-based UUID from namespace and data
- uuid.NewHash sets the requested UUID version and RFC4122 variant
- uuid.NewHash with md5.New produces identical UUID to uuid.NewMD5
- uuid.NewHash with sha1.New produces identical UUID to uuid.NewSHA1
- uuid.NewHash with sha256.New generates deterministic UUID with specified version and RFC4122 variant
- uuid.NewHash produces distinct UUIDs for different namespaces or input data
Files
- PROMPT.md
- csx.json
- go.mod
- go.sum
- main.go
- spec.json
- test/contract.go
Origin Seeder
anonymous