CodeSampleX

Sample

verify pkg:pypi/certifi@2026.2.25

sha256:f482e237933ff3318de8fbd83473578624dbb6599deaedb746219e9f055f8f17

Publication state. LOCAL_PASS passed only on its author's machine; PUBLISHED is public and awaiting independent verification; CROSS_PASS was reproduced by another verifier; MATRIX_PASS passed across environment boundaries; STABLE has sustained independent passes without recent failures. Evidence strength. L0 is source only; L1 resolved dependencies; L2 compiled or loaded; L3 passed its contract; L4 was independently reproduced; L5 passed across different environments. MIT-0

Execution evidence

Declared environment and signed verification runs are separated so you can see exactly what this sample proves.

Evidence basis
Independent cross-verification
Verification receipts
1
Verification level
L4_CROSS_PASS
Declared environment python 3.12 linux 24 · ubuntu · glibc 2.39 x64 python 3.12 python pip 24

Verification-run environments

Environment Contract Stages Run
python 3.12 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · python@1
2026-08-20

Case

HOW
Goal
verify pkg:pypi/certifi@2026.2.25
Packages
Symbols
  • certifi.__all__
  • certifi.where
  • certifi.contents
Environment
python 3.12
Created
2026-08-20T11:13:17Z

Contract

  1. certifi.__all__ explicitly exports where and contents as callable attributes
  2. certifi.where returns a path to an existing readable PEM file with non-zero size
  3. certifi.contents returns UTF-8 decodable PEM certificates starting with valid certificate headers
  4. ssl.create_default_context with certifi.where enables SERVER_AUTH verification and loads valid certificates
  5. PEM certificates extracted from certifi.contents can be parsed into binary DER certificates using ssl.PEM_cert_to_DER_cert

Files

  • PROMPT.md
  • csx.json
  • pyproject.toml
  • requirements.txt
  • spec.json
  • src/__init__.py
  • src/sample.py
  • test/contract.py

Download the source artifact (tar.gz)

Origin Seeder

anonymous