# CostLayers 0.8.61 Release Artifact Record

Status: deployed at the immutable hosted URL; not published to npm

- Tarball: `costlayers-0.8.61.tgz`
- SHA-256: `2e7d645f83386907de1b1b971f82b5f47ebfcbfa015b23da5652ca5aaf7265a3`
- npm integrity: `sha512-VbZJHc5ylOW4aurAKpu7d2LSO3VaqnS+2xWA6uoGJY8hFhvW9kO1idotVEcBnc73smrenwB5vYOwmg2v3oMFLg==`
- Source-set SHA-256: `0e87d14ac9941b016237f2e4c18aa94f29440ea6c5dafca57450d32d468e4be9`
- SBOM: `costlayers-0.8.61.cdx.json`
- Local/hosted staging byte identity: `verified`
- Signature: missing
- npm provenance attestation: missing
- Source tag parity: missing
- macOS fresh install: missing
- Windows fresh install: missing

The local provenance JSON is an unsigned build record, not npm provenance, a
signature, or source-ownership proof. Hosted tarball parity was verified by
SHA-256 after deployment.