# Verifying GLO Downloads

All files distributed on glospec.org include SHA-256 checksums so you can confirm that what you downloaded matches what was published.

## Quick verification

Download `SHA256SUMS_ALL.txt` from the verify directory, then run:

```bash
cd downloads/
shasum -a 256 -c verify/SHA256SUMS_ALL.txt
```

Every line should report `OK`. Any mismatch indicates the file was altered or corrupted in transit.

## Verifying a single file

```bash
shasum -a 256 releases/rc6/platonic_glo_complete_v0_3_0_rc6_RELEASE_FIXED.zip
```

Compare the output hash against the corresponding entry in `SHA256SUMS_ALL.txt` or `MANIFEST.json`.

## What each verify file contains

| File | Purpose |
|------|---------|
| `SHA256SUMS_ALL.txt` | One checksum per file, standard `shasum` format — machine-readable |
| `MANIFEST.json` | Structured manifest with path, SHA-256 hash, and byte size for every file |
| `VERIFY.md` | This document |

## Linux / WSL users

Use `sha256sum` instead of `shasum -a 256`:

```bash
sha256sum -c verify/SHA256SUMS_ALL.txt
```

---

Copyright 2025-2026 Daniel Sutherland. All rights reserved.
Canonical source: glospec.org