v0.109.2
the nine-key envelope ships
published 2026-08-18 · 8 assets · the catalog this site serves
The envelope is nine keys: nika: is the mark and the name, never a version marker. Values come from three authorities (inputs · const · secrets). The first two 0.109 tags died at the release gates before any asset landed; this is the one a visitor can install. Linux builders now install bubblewrap so a permits: file is judged confined, the same way macOS already was.
the artifacts
8 assets, each with its recorded digest
The sha256 beside each artifact is the digest GitHub recorded when the release train uploaded it: re-derivable by anyone, fabricated by no one. Verify a download against it, or against the SHA256SUMS asset the train signs.
- multiple.intoto.jsonl24 KB · sha256 adc50797d3df2e90…
- nika-linux-arm64-0.109.2.tar.gz13.1 MB · sha256 e44e719a35c018c2…
- nika-linux-x64-0.109.2.tar.gz14.2 MB · sha256 5d74fda732bf72ba…
- nika-macos-arm64-0.109.2.tar.gz11.6 MB · sha256 ca27ede081822b58…
- nika-macos-x64-0.109.2.tar.gz13.2 MB · sha256 0119fcc5fd0aed82…
- SHA256SUMS1 KB · sha256 2e1af6cee0785eb3…
- supernovae-st-nika-check-wasm-0.109.2.tgz1.3 MB · sha256 a648049ac2001ce6…
- supernovae-st-nika-check-wasm-0.109.2.tgz.sha2561 KB · sha256 0edfbadf45daf7a9…
verify a download
Two lines, no trust
The digest below is this release's own record for nika-macos-arm64-0.109.2.tar.gz. Paste both lines where the file landed: a silent OK is the proof, anything else is a refusal.
echo "ca27ede081822b58f2e2998a457a216de61b595f5ac57bfee90b6c5f1cef04e0 nika-macos-arm64-0.109.2.tar.gz" | shasum -a 256 -c -the delta
What moved since v0.108.0
vendored from the public release record · re-vendored at the train cadence