# Verify Project Shadow releases

## Current Myth-free R1.0.1

Download the named release asset, not a platform-generated source archive:

`Project_Shadow_R1.0.1_Public_Reference_2026-08-17.zip`

- Expected bytes: `5,731,663`
- Expected SHA-256: `6f6f1e16d5e9a20e62403f14af7ce8629ce2d702528fb7f80aaf4a14deb7a1d1`
- [Canonical GitHub release](https://github.com/PauseBeforeHarmProtocol/Project-Shadow/releases/tag/r1.0.1-2026-08-17)
- [Exact Hugging Face mirror](../releases/r1.0.1-2026-08-17/Project_Shadow_R1.0.1_Public_Reference_2026-08-17.zip)

The corrected release contains no Myth package. Its admitted inner family contains 27 active descendants byte-identical to the August 14 predecessor.

## Optional Generic Myth v0.2.0

`Project_Shadow_Generic_Myth_Sidecar_v0.2.0_OPTIONAL_PUBLIC_COMPANION_2026-08-17.zip`

- Expected bytes: `93,676`
- Expected SHA-256: `6e7a362d4135f9d626dcfef463bfb1f7166226b3cf8a4c02a953ab39af1538bf`
- [Canonical GitHub release](https://github.com/PauseBeforeHarmProtocol/Project-Shadow/releases/tag/generic-myth-v0.2.0)
- [Exact Hugging Face mirror](../releases/generic-myth-v0.2.0/Project_Shadow_Generic_Myth_Sidecar_v0.2.0_OPTIONAL_PUBLIC_COMPANION_2026-08-17.zip)

The sidecar is separate, optional, default off, terminal-only, and nonauthorizing. It is not part of or required by R1.

## Optional Full-Canon Myth v0.3.5

`Project_Shadow_Full_Canon_Myth_Sidecar_v0.3.5_OPTIONAL_PUBLIC_COMPANION_2026-08-17.zip`

- Expected bytes: `1,428,812`
- Expected SHA-256: `2b55867fe7c502a0defd8d6f2e9b53fbd1caaf1b0f225a438bd45b04a3e7bae2`
- [Canonical GitHub release](https://github.com/PauseBeforeHarmProtocol/Project-Shadow/releases/tag/myth-v0.3.5)
- [Exact Hugging Face mirror](../releases/myth-v0.3.5/Project_Shadow_Full_Canon_Myth_Sidecar_v0.3.5_OPTIONAL_PUBLIC_COMPANION_2026-08-17.zip)

The sidecar is separate, optional, default off, terminal-only, nonauthorizing, source-available, and mixed-rights. It is not part of or required by R1.

## Confirm byte count and SHA-256

### Linux

```bash
wc -c ARTIFACT.zip
sha256sum ARTIFACT.zip
```

### macOS

```bash
wc -c ARTIFACT.zip
shasum -a 256 ARTIFACT.zip
```

### Windows PowerShell

```powershell
(Get-Item .\ARTIFACT.zip).Length
(Get-FileHash .\ARTIFACT.zip -Algorithm SHA256).Hash
```

Inspect the ZIP structure before extraction, extract into a new directory, and follow the verifier instructions shipped inside that exact package. Never substitute GitHub's automatically generated “Source code” archives.

## Verification boundary

A pass establishes only the checks implemented by the relevant verifier. It does not establish production readiness, operational authority, fitness, safety, efficacy, certification, comprehensive privacy or rights clearance, legal compliance, or independent validation.

CAPA `PS-R1-PRIVATE-MYTH-PUBLIC-BOUNDARY-001` applies only to the older Generic Myth v0.1.1 member nested inside the preserved August 14 R1 predecessor. It does not apply to the separately authorized Generic v0.2.0 or Full-Canon v0.3.5 sidecars.