v0.118.6
release identity stays bound
published 2026-09-05 · 8 assets
The published release preserves its tag and source commit while updating OCI and release metadata. Authoring guidance distinguishes draft checks from child execution and follows the cleanup contract. SDK and editor delivery remain separate.
the artifacts
8 assets, each with its recorded digest
The sha256 beside each artifact is the digest GitHub recorded when the release train uploaded it: re-derivable by anyone, fabricated by no one. Verify a download against it, or against the SHA256SUMS asset the train signs.
- multiple.intoto.jsonl24 KB · sha256 5a2c4ec98cd07f3f…
- nika-linux-arm64-0.118.6.tar.gz15.8 MB · sha256 a5536563174f08b0…
- nika-linux-x64-0.118.6.tar.gz17.1 MB · sha256 1dc96f049d698a92…
- nika-macos-arm64-0.118.6.tar.gz14.2 MB · sha256 b003070d2a5d68d1…
- nika-macos-x64-0.118.6.tar.gz16.1 MB · sha256 fb6a0215082d9068…
- SHA256SUMS1 KB · sha256 bc407c87dbd0f5bc…
- supernovae-st-nika-check-wasm-0.118.6.tgz1.3 MB · sha256 7d847c843641315a…
- supernovae-st-nika-check-wasm-0.118.6.tgz.sha2561 KB · sha256 d9c67871490a05bd…
verify a download
Two lines, no trust
The digest below is this release's own record for nika-macos-arm64-0.118.6.tar.gz. Paste both lines where the file landed: a silent OK is the proof, anything else is a refusal.
echo "b003070d2a5d68d15d0638d73b9060c312f34161e877b5892193024bde18ddcf nika-macos-arm64-0.118.6.tar.gz" | shasum -a 256 -c -the delta
What moved since v0.116.2
vendored from the public release record · re-vendored at the train cadence