Trust and release

Releases

Install Sandbox Policy and verify every published package before trusting it.

What this release guarantees

Sandbox Policy v0.3.0 publishes compiler ABI 3, MIR ABI 2, MIR binary format v2 and JSON source schema v2. The product rename intentionally removed the old CLI, library, header and C symbol aliases before external clients existed.

Choose your package

macOS arm64 native tarball;
Linux amd64 and arm64 tarballs;
Debian runtime and development packages;
RPM runtime and development packages;
SHA256SUMS and adjacent checksums;
GitHub build-provenance attestations;
Homebrew formula in maelys-dev/tap.

Verify before you trust it

CODE

sha256sum --check maelys-sandbox-policy-0.3.0-linux-x86_64.tar.gz.sha256
gh attestation verify maelys-sandbox-policy-0.3.0-linux-x86_64.tar.gz \
  --repo maelys-dev/maelys-sandbox-policy
git verify-tag v0.3.0

The signed tag authenticates the source release. The attestation binds release artefacts to the GitHub Actions build that produced them.