Current stable release 2026111504 ().
These hashes come from the release metadata signed by Shinphony and are re-verified by the Hook before it installs or updates. Windows binaries are installed by the Shinphony app; macOS and Linux use the one-line setup.
| Platform | Signed SHA-256 |
|---|---|
macOS Apple silicondarwin-arm64 | 565e4e1862ec6eedf1ba949a1b56593bcb77e56df78eea89f8fc2a3e9dab2619 |
macOS Inteldarwin-amd64 | d26ff4f87f59871e1834d035f2cf8262a2d3cfeb4cb3fd0c2a5332758d9e3c45 |
Linux arm64linux-arm64 | 5d703de4ad5989f3e239f12af21095e17b66cb94405f71704bb618da1d227ff9 |
Linux x86_64linux-amd64 | 8a73b827542ee5fb1ff2072d68721c9968084dc19b76f4be463478d44dbbb028 |
Windows arm64windows-arm64 | cbc3910bff9c383558057d05a5ef15955e21196c21bc18bf30269cbbcd6e03b3 |
Windows x86_64windows-amd64 | 96e41fcc01cfa9698d92be83ca99ea8c3fd161fb00df5d4c9eff11541bac2fd6 |
shasum -a 256 ~/.shinphony-agent/shinphony-hook-*
On Linux, sha256sum accepts the same arguments. Compare the output with the row above.
From a checkout of the public source, build all six targets with a clean Go cache and compare them with the signed hashes:
tool/verify_reproducible.sh 2026111504
Source code: https://github.com/chux0519/shinphony-hook
See docs/verify.md in the source for details, and SECURITY.md to report a problem.