Silent Mode — releases

Canonical SHA-256 checksums for every published build. This page lives at the on-chain name releases.silentmode.bch; the name pins where it is served from, so a tampered mirror cannot change what you check against here.

Theseus Navigator 0.3.54

Windows 64-bit · unsigned · 2026-09-22 · 0.3.54 — add-ons ask before restarting the browser — An add-on can no longer restart Theseus on its own. Aegis relaunched the whole browser after staging its own update, mid-session and without warning; the add-on API's restart now shows a native dialog (Restart now / Later, Later is the default) and a declined restart loses nothing, since a staged update applies at the next normal launch. The guard lives in the browser, so it covers every Aegis version on the channel and any future add-on. Includes everything from 0.3.53: extension updates re-checked every 4 hours, announced by a toolbar chip and installed in place; the compact Extensions page with detail view; drag-to-reorder toolbar buttons with a right-click menu; the new-tab button next to the last tab.
ce31af6f9728b6874c03da8aecb8794c481797f60aeb203111a1700d67b107a4
4ccf40554531594d677b2b24495111c34efbe16884748f95c549de50e3e9cb67

Ariadne Resolver — Windows 0.1.3

Windows 64-bit · unsigned · bundled Node runtime · 2026-09-19 · Same rules as every other client — Resolver library brought level with the desktop reader: per-TLD certificate registry read from the TLD beacon, current NFT owner tracked per name, the port-443 electrum route tried first, and the TLD co-sign rule (a registration under a "cosign" or hidden TLD is only recognised when it carries the TLD's certificate). Same daemon, same install; existing installs upgrade in place.
79b920b8e4e92aa9a54653035a4873dd996b5d4a9093c43d114e0a3ee4ffb003

Ariadne for Android 0.19

Android 5.0+ (API 21) · self-signed release key · 2026-09-19 · 0.19 — co-sign rule — Consensus fix: the on-device index now applies the TLD co-sign rule. A name registered under a TLD whose owner set policy "cosign" or switched the TLD off (hidden) only counts when the registration transaction also carries the TLD's own certificate, exactly as the gateway, Theseus and the desktop resolver decide it, so every client agrees on which names exist. The index reads the per-TLD certificate registry and its policy history from the TLD beacon at build time; if that beacon cannot be reached it keeps the previous behaviour instead of returning an empty index. No UI changes.
d2f4ad359e7ac36c1d0729100aef613be968cd17b153e94e124f8500fcbfc711
Signing certificate — SHA-256 (the same key signs every future release)
46ebbbe5dc73148d66410fd0337b1e6683472128c983e8e2578200b9e3ca548c
How to verify. After downloading, compute the file's SHA-256 and compare it to the value above — on Windows: certutil -hashfile <file> SHA256; on Android, hash the downloaded .apk on a computer before you move it to the phone, or use any file-hashing app. Nothing here is signed by an authority your device already trusts — by design — so it will warn about an unrecognized app; the checksum is the real check. The machine-readable manifest is at releases-manifest.json.