The house · Provenance
Root of trust
Every archive we publish carries a SHA-256 checksum and byte count. Below is the recorded identity of each current archive. Compare it against your download before you trust or run it.
SHPBL-Evaluation-Master-Library-v3.4.0.zip
df9d93f1729c539a7c926275e9bf0053d3fa737da9b8df27c79dbeef3f5195d6
984,719 bytes
CMPSBL-Agent-Kit-r3.4.0-Library-v3.4.0.zip
73d4af86c7ff19bbdc4c34eeba6ae766ca7bfa0d23234f511c55ddbff860d133
969,802 bytes
SHPBL-Governor-Edition-v1.7.12.zip
4e08a648c2cc005e1f25f4ad8b910415949c0d1dcaeb6e74cfe37c0d8f097067
8,223,308 bytes
The-Complete-Master-Library-v1.7.8-Perpetual-Edition.zip
52a2f656252db64cbe373804b29dc1ad6ce20fadc9d4a7e66d744756916599c9
7,191,222 bytes
Checking it yourself
On macOS or Linux, run shasum -a 256 <file>; on Windows, certutil -hashfile <file> SHA256. The output must match the line above character for character. Every archive also carries its own CHECKSUMS.sha256 covering each file inside it.
If a hash does not match, do not run the contents. Write to dev@KESJr.com and we will re-issue.
your download your machine published line
------------ ------------ --------------
[ archive.zip ] ──▶ shasum -a 256 ──▶ a1b4…9f ==?== a1b4…9f MATCH
│
└───────── b7c2…10 STOP
do not run it
- ==Compare character for character; there is no partial match.
- STOPA mismatch means the copy is not the sealed edition. Write to us for a re-issue.
Published 2026-09-09 alongside server 1.47.1. See the release notes for what changed.

The floor
Sealed editions, hashed, checked against the same root of trust.
Each release is recorded with its hash so a copy either matches the sealed edition or it does not. Verification is arithmetic, not assurance.
- 01
Verdict
The evaluation is on paper before anything is written.
- 02
Your approval
Per proposal — approved, declined or deferred. Silence is never approval.
- 03
Build intent
Signed, single-use and expiring. Without it the foundry refuses.
- 04
Verification
The composed result is proven in the architecture it entered.
- 05
The gate
Cleared work arrives as a branch and a pull request you read first.