SAFi release fingerprints

The official list of trusted computing base fingerprints for SAFi releases. This registry is what verifies an install.

The fingerprint of a live deployment is checked by the product itself: an org admin clicks Verify this Install in Org settings, and the result is a membership test against this list. A tree that matches its own manifest but whose hash appears nowhere here is a development snapshot or a fork, not an official release.

Machine-readable copy: /tcb/releases.json.