2026-07-23 02:18:05 +02:00
{
"formatVersion" : 1 ,
"refreshContract" : {
"rules" : [
2026-09-02 00:17:57 +02:00
"Audit each new upstream release before changing its version, URL, or SHA-256." ,
"Verify upstream release evidence first, hash the complete reviewed file, and update URL and SHA-256 together." ,
"Run python3 scripts/checks/verify_runtime_inputs.py after any edit." ,
2026-07-23 02:18:05 +02:00
"Never derive an expected checksum from bytes inside the production build or verification command."
]
},
"inputs" : {
"simdutf" : {
"kind" : "archive" ,
"version" : "6.4.2" ,
"url" : "https://github.com/simdutf/simdutf/releases/download/v6.4.2/singleheader.zip" ,
"sha256" : "9fe4d6f515724a55c8de88fee4463e0890a1abe2267cda13c4b5d245d58039e6" ,
"provenance" : "Official GitHub release 210237657 records asset 243345703 as singleheader.zip with size 3013061 bytes; the complete release asset was independently hashed before recording this digest."
}
}
}