Canonical SHA-256 checksums for every published build. This page lives at the on-chain
name releases.silentmode.bch; the name pins where it is served from, so a tampered
mirror cannot change what you check against here.
Theseus Navigator 0.3.18
Windows 64-bit · unsigned · 2026-09-07 · Add-on updates actually land + signed update endpoint + tab-flash gone + screenshot no longer blank + Ariadne Install/Update/Uninstall — Five theseus fixes since 0.3.16. (1) seedBundledAddons() previously copied a bundled add-on only when its target folder was missing, so the 0.3.14 screenshot editor never reached machines that already had an older screenshot/ folder from a previous run. It now compares bundled and on-disk addon.json versions, backs the user copy up to addons-backups/<id>-<oldver>-<timestamp>/ on mismatch, and drops the fresh bundle in. (2) Add-ons can now advertise an updateURL and be republished at any time without waiting for a Theseus release. The client fetches, verifies an Ed25519 signature over id|version|sha256, downloads the tarball, and stages the new copy for promotion on next launch. Dormant in this build (no operator pubkey ceremonied in) but the mechanism ships ready. (3) The tab-switch flash is gone — tab views now carry an explicit theme-tracking background color and setActive shows the incoming tab before hiding the outgoing. (4) Screenshot toolbar-menu captures no longer come out blank: the click handler was dispatching capture synchronously while the native menu popup was still on top, so Chromium's occlusion tracker marked the tab view hidden and capturePage snapshotted a stale/empty compositor frame. Dispatch now runs from the popup's close callback after a short settle. (5) Ariadne toggle card in Settings > Registries grows Install / Update / Uninstall alongside Turn on / off — Install and Update run the bundled Ariadne installer silently elevated; Uninstall runs Inno's registered uninstaller. Everything from 0.3.16 rides along.
Android 5.0+ (API 21) · self-signed release key · 2026-08-30 · adds Sia CDN pull to the APK-bundled starter — post-install cold starts now catch up from the operator's latest published snapshot in one HTTP call
How to verify. After downloading, compute the file's SHA-256 and compare it to
the value above — on Windows: certutil -hashfile <file> SHA256;
on Android, hash the downloaded .apk on a computer before you move
it to the phone, or use any file-hashing app. Nothing here is signed by an authority your device
already trusts — by design — so it will warn about an unrecognized app; the checksum is the
real check. The machine-readable manifest is at
releases-manifest.json.