v1.0.0-rc.1 · native releases

Choose the path that fits your machine.

RC.1 freezes the intended v1 contract for public observation. The release is available as a notarized Apple Silicon disk image, a reproducible Linux archive, and ordinary Go module tags.

Release candidate: this is the intended v1 interface, not final v1. A release-blocking finding produces a new immutable RC and restarts the affected observation boundary.

Apple Silicon · macOS arm64

Signed, notarized, and stapled for Gatekeeper.

Download himesan-1.0.0-rc.1-darwin-arm64.dmg from the canonical Gitea release.

SHA-256: 1ac00f3d9968d91589561c47e6840a06411acdaaef392521ed54808f076dfc19
Signing identity: Developer ID Application: Cole Speelman (5BXR9JCUBL)
Identifier: com.gamertan.sandwich-hime.himesan

The distribution was accepted by Apple's notary service and carries a stapled ticket. The runner that builds the unsigned archive has no access to the signing certificate or notary credentials.

Linux · amd64

A reproducible native archive.

Download himesan-1.0.0-rc.1-linux-amd64.tar.gz from the same canonical release.

SHA-256: b5d4e5dd77940ee82b5a1d1c2a6414b8a27e50709bb29ec72b94ed9999e91265
Build: CGO_ENABLED=0, trimmed paths, fixed release metadata, Go 1.27.0.

The archive includes its manifest, SPDX SBOM, build provenance, binary checksum, and verification instructions.

Go toolchain · all supported development hosts

Install the small runtime first.

go get gamertan.com/sandwich-hime/sando@v1.0.0-rc.1
go install gamertan.com/sandwich-hime/cmd/himesan@v1.0.0-rc.1
himesan version --json

Production applications link only the Apache-2.0 sando runtime. The AGPL compiler remains a development tool and does not enter the deployed service dependency graph.

Evidence before execution

Verify the bytes you received.

shasum -a 256 himesan-1.0.0-rc.1-darwin-arm64.dmg
sha256sum himesan-1.0.0-rc.1-linux-amd64.tar.gz

Compare against the values above and the checksum sidecars attached to the canonical release. GitHub is a read-only discovery snapshot: it intentionally carries no release assets or authoritative tags.

Open the canonical release Read the RC note