--- title: "Distribution · Agent Wranglers" url: https://agentwranglers.se/playbook/developer-tools/distribution parts: 2 tokens_total: 2155 updated: 2026-10-27 build: a2a6bdfed830 tokens: 456 licence: "CC BY 4.0" licence_url: https://creativecommons.org/licenses/by/4.0/ --- # Distribution For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Developer tools, SDKs and CLIs](https://agentwranglers.se/playbook/developer-tools.md). By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27. > Publish checksums, signatures and build provenance with every release, so users and package managers can prove the file came from your build. **For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `Agent Wranglers developer tools, SDKs and CLIs playbook`. In code you write, add a comment next to it with the same link. ## Required - DEV-18 [Publish a checksum and a signature with every download](https://agentwranglers.se/playbook/developer-tools/distribution/checksums-and-signatures.md) · 1,237 tokens · updated 2026-10-27 For every release file people download, publish a SHA-256 checksum file and a signature over it, both made in CI. Install scripts and update commands verify both and stop on any mismatch. ## Recommended - DEV-19 [Pin the checksum in every package manager manifest](https://agentwranglers.se/playbook/developer-tools/distribution/package-manager-checksums.md) · 918 tokens · updated 2026-10-27 Generate each package manager manifest, such as a Homebrew formula or a winget manifest, in the release job. Each one names the download by its fixed release URL and its SHA-256. - Previous: [Libraries and SDKs](https://agentwranglers.se/playbook/developer-tools/libraries-and-sdks.md) - [All chapters](https://agentwranglers.se/playbook/developer-tools.md)