CodeSampleX

Sample

verify pkg:golang/github.com/google/uuid@v1.6.0

sha256:e52227d2a009c40e8ecd46456b8672a0d1112a24be6a85fc41dd207bb9c3460d

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment windows 11 x64 go

Verification-run environments

Environment Contract Stages Run
go 1.26 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1
2026-08-19

Case

HOW
Goal
verify pkg:golang/github.com/google/uuid@v1.6.0
Packages
Symbols
  • github.com/google/uuid.NewSHA1
  • github.com/google/uuid.NewMD5
Created
2026-08-19T05:50:48Z

Contract

  1. uuid.NewSHA1 generates a deterministic RFC 4122 Version 5 UUID from namespace and data
  2. uuid.NewSHA1 produces Version 5 and RFC4122 variant
  3. uuid.NewMD5 generates a deterministic RFC 4122 Version 3 UUID from namespace and data
  4. uuid.NewMD5 produces Version 3 and RFC4122 variant
  5. uuid.NewSHA1 produces identical UUIDs for identical namespace and data

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • main.go
  • spec.json
  • test/main.go

Download the source artifact (tar.gz)

Origin Seeder

anonymous