{ "formatVersion": 1, "refreshContract": { "rules": [ "Audit each new upstream release before changing its version, URL, or SHA-256.", "Verify upstream release evidence first, hash the complete reviewed file, and update URL and SHA-256 together.", "Run python3 scripts/checks/verify_runtime_inputs.py after any edit.", "Never derive an expected checksum from bytes inside the production build or verification command." ] }, "inputs": { "simdutf": { "kind": "archive", "version": "6.4.2", "url": "https://github.com/simdutf/simdutf/releases/download/v6.4.2/singleheader.zip", "sha256": "9fe4d6f515724a55c8de88fee4463e0890a1abe2267cda13c4b5d245d58039e6", "provenance": "Official GitHub release 210237657 records asset 243345703 as singleheader.zip with size 3013061 bytes; the complete release asset was independently hashed before recording this digest." } } }