Immutable releases are a security feature — Potion

Engineering

Immutable releases are a security feature

Checksums remain meaningful when published archives cannot be silently replaced after users install them.

Version numbers are promises. If a publisher can replace an archive behind an existing version, a reviewed checksum and a reproducible installation lose their meaning.

Potion writes release and premium archives to immutable prefixes. A correction becomes a new semantic version; a compromised release is yanked while its audit history remains intact.