v1.6.3
Changes
- Pins expected SHA-256 hashes for all registry model downloads.
- Fails closed when downloaded or cached model hashes do not match reviewed values.
- Corrects stale BiRefNet release asset URLs.
- Shows verified and needs-verification model states in the model manager.
Verification
- python -m py_compile AlphaCut.py
- pytest -q: 61 passed
- Packaged EXE smoke: --version exits 0; missing-input JSON exits 1
- Model registry hashes verified against downloaded upstream assets
SHA-256
- AlphaCut-windows.exe: cc26cfc0e0a88cbaf943f1876e5fdd75972b03529247533f388c5b284df3d304
- AlphaCut-Setup-1.6.3.exe: 4648e689a2fe6dad11fdeca105da1a29dba8a7ec32daec75336b0b480ad343e7
Note: Artifacts are unsigned because no local code-signing certificate or signtool was available.