CodeSampleX

Sample

verify pkg:golang/github.com/google/uuid@v1.6.0

sha256:ef572bd4c1e86220572c613ee1dee05eb5f3d1dabe2e0e78066008642dd63f02

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment windows 11 x64 go

Verification-run environments

Environment Contract Stages Run
go 1.26 · linux alpine/x64 · docker ed25519:2175b912ea1c23b1 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1
2026-08-19

Case

HOW
Goal
verify pkg:golang/github.com/google/uuid@v1.6.0
Packages
Created
2026-08-18T23:56:45Z

Contract

  1. uuid.New returns a non-nil Version 4 UUID with RFC4122 variant
  2. uuid.NewString returns a valid 36-character hyphenated UUID string
  3. uuid.Parse successfully parses standard 36-byte hyphenated UUID strings
  4. uuid.FromBytes converts a 16-byte slice to UUID and rejects slices with length not equal to 16
  5. uuid.Validate accepts valid canonical UUID strings and returns error on invalid formatting
  6. uuid.MustParse parses valid UUID strings and panics on invalid input

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • main.go
  • spec.json
  • test/contract.go

Download the source artifact (tar.gz)

Origin Seeder

anonymous