Kayshen-X a636efd7ae ci(release): publish SHA256SUMS + provenance attestation for download verification ... Some antivirus engines heuristically flag the self-signed, low-prevalence Windows installer (issue #198). Give downloaders a way to confirm assets are exactly what CI built: a checksum manifest plus signed SLSA provenance verifiable via gh attestation verify, with triage + code-signing policy docs linked from the README and release notes.		2026-08-05 22:15:09 +08:00
..
security	ci(release): publish SHA256SUMS + provenance attestation for download verification	2026-08-05 22:15:09 +08:00
testing	feat(collab): add authenticated p2p collaboration	2026-07-29 00:06:58 +08:00