Releases

Public protocol and client releases are signed and published on GitHub.

Verify a release

1. Download the release tree or tarball from Aegis-Finance/Aegis.
2. Check CHECKSUMS.sha256 against files on disk.
3. Verify CHECKSUMS.sha256.sig with RELEASE_SIGNING_KEY.pem (Ed25519).
4. Match contract addresses in the app to the addresses listed in the release manifest for Sonic mainnet.

What releases contain

• Protocol contracts and circuits (auditor-facing)
• Client applications (web app, token sale, docs, landing)
• Published contract addresses and verifier bundles for Sonic mainnet

Cadence

Releases follow mainnet deployments and security fixes — not arbitrary marketing dates.

WARNING

Do not trust unsigned ZIP files or forked repos without signature verification.