Calendar-versioned release v2026.07.25 (vYYYY.MM.DD). Static linux binaries (amd64 + arm64) attached below; the multi-arch container image is ghcr.io/harsh-2002/cairn:latest (always current). Binaries and checksums are cosign-keyless-signed (*.cosign.bundle), an SPDX dependency SBOM is attached, and both the binaries and the image carry SLSA build-provenance attestations — see SECURITY.md for verification.