v0.115.0
the resident HTTP boundary becomes machine-visible
published 2026-08-26 · 8 assets
The OpenAPI record names live POST statuses, failed jobs and refused captures carry typed NIKA codes, token files fail closed with a pasteable mint, and downloadable binaries include the access-harness lane. The checker adds one-obvious-way hints while keeping warnings distinct from admission failure.
the artifacts
8 assets, each with its recorded digest
The sha256 beside each artifact is the digest GitHub recorded when the release train uploaded it: re-derivable by anyone, fabricated by no one. Verify a download against it, or against the SHA256SUMS asset the train signs.
- multiple.intoto.jsonl23 KB · sha256 299745b097781568…
- nika-linux-arm64-0.115.0.tar.gz14.7 MB · sha256 4444d123fd1e824d…
- nika-linux-x64-0.115.0.tar.gz15.9 MB · sha256 0b15db01c88cfa6b…
- nika-macos-arm64-0.115.0.tar.gz13.2 MB · sha256 b1bafc6102602c6f…
- nika-macos-x64-0.115.0.tar.gz14.9 MB · sha256 4ac9fd8972de01ab…
- SHA256SUMS1 KB · sha256 a80bac12b206520f…
- supernovae-st-nika-check-wasm-0.115.0.tgz1.3 MB · sha256 af0c3bc6f302904e…
- supernovae-st-nika-check-wasm-0.115.0.tgz.sha2561 KB · sha256 525e1e17587ef273…
verify a download
Two lines, no trust
The digest below is this release's own record for nika-macos-arm64-0.115.0.tar.gz. Paste both lines where the file landed: a silent OK is the proof, anything else is a refusal.
echo "b1bafc6102602c6f8b33f27e802453481fe5316e089e940369f27b65d5bafc99 nika-macos-arm64-0.115.0.tar.gz" | shasum -a 256 -c -the delta
What moved since v0.114.0
vendored from the public release record · re-vendored at the train cadence