Illustrative source and destination path/hash lists are compared. The destination has an extra old.js file, so the full-record comparison must fail. Matching hashes concern integrity, not authorship.

A release manifest should name every published byte

One aggregate digest is useful, but a sorted per-file manifest tells you exactly what changed or went missing.

July 16, 2026 · 3 min · XB Field Notes