v1.0.0 · native releases

Choose the path that fits your machine.

v1.0.0 establishes the stable language, generated API, and runtime contract. Choose the notarized Apple Silicon disk image, the reproducible Linux archive, or ordinary Go installation.

Release integrity: fixes receive new immutable versions. Published tags and artifact bytes are never replaced. A stable v1 contract is not an independent audit or certification.

Apple Silicon · macOS arm64

Signed, notarized, and stapled for Gatekeeper.

Download himesan-1.0.0-darwin-arm64.dmg from the canonical Gitea release.

SHA-256
b351ad3edabec07cda060094392a0145da2b4dbbd49893fac978af7c7f62d504
Signing identity
Developer ID Application: Cole Speelman (5BXR9JCUBL)
Identifier
com.gamertan.sandwich-hime.himesan

The distribution was accepted by Apple's notary service and carries a stapled ticket. The runner that builds the unsigned archive has no access to the signing certificate or notary credentials.

Linux · amd64

A reproducible native archive.

Download himesan-1.0.0-linux-amd64.tar.gz from the same canonical release.

SHA-256
8851a8eaf50b46fe2a83d3b48cb8fff60c0a6a211309ba17b9f964c01bad177b
Build
CGO_ENABLED=0, trimmed paths, fixed release metadata, Go 1.27.0.

The archive includes its manifest, SPDX SBOM, build provenance, binary checksum, and verification instructions.

Go toolchain · all supported development hosts

Install the small runtime first.

go get gamertan.com/sandwich-hime/sando@v1.0.0
go install gamertan.com/sandwich-hime/cmd/himesan@v1.0.0
himesan version --json

Production applications link only the Apache-2.0 sando runtime. The AGPL compiler remains a development tool and does not enter the deployed service dependency graph.

Evidence before execution

Verify the bytes you received.

shasum -a 256 himesan-1.0.0-darwin-arm64.dmg
sha256sum himesan-1.0.0-linux-amd64.tar.gz

Compare against the values above and the checksum sidecars attached to the canonical release. GitHub is a read-only discovery snapshot: it intentionally carries no release assets or authoritative tags.