CodeSampleX

Sample

verify dotenv in pkg:pypi/python-dotenv@1.2.2

sha256:fc3cf2123de6021175473b94edf236778821d43880b0deeccd6f79db4e236434

This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people. MIT-0

Execution evidence

The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.

Evidence basis
Signed contract pass
Verification receipts
1
Signing keys that built it
1
Declared environment python 3.12 linux 24 · alpine · musl x64 python 3.12 python pip 24

Verification-run environments

Environment Contract Stages Run
python 3.12 · linux alpine/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · python@1
2026-08-20

Case

HOW
Goal
verify dotenv in pkg:pypi/python-dotenv@1.2.2
Packages
Symbols
  • dotenv
Environment
python 3.12
Created
2026-08-20T14:50:49Z

Contract

  1. assert DotEnv class parses stream input into dictionary via dict() and retrieves keys via get()
  2. assert DotEnv.set_as_environment_variables populates os.environ and returns True when variables are set
  3. assert load_dotenv and dotenv_values accept io.StringIO stream inputs directly without disk access
  4. assert find_dotenv raises OSError when raise_error_if_not_found=True and target file does not exist
  5. assert set_key formats values according to quote_mode (always, never, auto) and export flag
  6. assert parse_stream yields Binding objects with parsed key, value, and original line metadata

Files

  • PROMPT.md
  • csx.json
  • pyproject.toml
  • requirements.txt
  • spec.json
  • test/contract.py

Download the source artifact (tar.gz)

Origin Seeder

anonymous