Ron Stoner on Nostr: If they make any updates to the file then the hash would change the check would fail. ...

If they make any updates to the file then the hash would change the check would fail. The SelfHash files themselves are hashed and one could verify that against committed source if they wanted (Github currently).

I added a salt (something you know) to help prevent malicious script updates with a hash header update.

It’s not perfect, but I am liking the extra verification/check. We are looking at self-verifying the caller itself so that verification of SelfHash itself happens on import.

https://github.com/ronaldstoner/selfhash-python/pull/6/files for example