Signed

Releases

Every file is signed, and you can check each one yourself.

Today

Each file with its fingerprint.

The current release

woodls 0.1.1, released on 24 October 2026.

Qwen3-8B for friends; WSL2, GPU memory and first-host fixes. The installer and woodls update read the same list, alpha.json, signed in alpha.json.minisig beside it.

For	Size	SHA-256
Mac, Apple silicon	75 MB	5b2dbccf 09858841 5032c1b0 8ca43692 45cb1925 2e0bdb88 ae76b715 aea38b83
Linux, ARM	26 MB	ed0ba806 7d8ad1ca c50b689c 84135241 365408e1 bdc08c53 6ff227f4 3cf5eafe
Linux, x86-64 (and Windows through WSL2)	28 MB	5d0251dd 56629ef1 048b58f4 7c658850 69e2f11e 6ec6c90a 92d80097 d200bc64

One key

Kept offline.

How it’s signed

Every release list is signed with woodls’ release key. The installer checks each download against the SHA-256 in the list, and the list’s signature too when minisign is installed; woodls update checks the signature itself before it installs anything. The key, for minisign -V -P:

RWQxdvRUJG/T/j8YBCt+cyS67OEGgUzYBTqyoWWvKkZ0trsICgZ91Fyd

To install, follow install; to update, woodls update, and woodls update --undo goes back to the release before.