The house · Provenance

Root of trust

Every archive we publish is cut reproducibly: the same inputs produce the same bytes, so a hash means something. Below is the SHA-256 of each current archive, written by the same build that produced it. Compare it against your download before you trust it.

Checking it yourself

On macOS or Linux, run shasum -a 256 <file>; on Windows, certutil -hashfile <file> SHA256. The output must match the line above character for character. Every archive also carries its own CHECKSUMS.sha256 covering each file inside it.

If a hash does not match, do not run the contents. Write to dev@cmpsbl.com and we will re-issue.

Published 2026-08-28 alongside server 1.31.0. See the release notes for what changed.