ReleaseContentHash
Corex\Config\Releases\ReleaseContentHash · class · Config layer
What a folder of a release holds: how many files, how many bytes, and one hash of all of them (spec 107, plan D2). The hash is SHA-256 over one line per file, the lines sorted by path as bytes: <path, forward slashes, relative to the folder> NUL scripts/release-content-hash.mjs computes the same thing when a package is built, and writes it into the package’s description. A site compares that with this, over what it unpacked.