Check against your doze

doze AWS

OfficialSigned

The whole local AWS as ONE service — with its web console.

doze/aws

$ doze add aws

Newest: 0.2.0 · [date]
Needs: doze 0.2.0 or newer
Runs: runs itself
Platforms: macOS arm64 · Linux arm64 · Linux x86_64
Licence: Apache-2.0
Source: on GitHub

aws 0.2.0

Current

Release

Released: [date]
Needs: doze 0.2.0 or newer
Plugin protocol: 1
Engines: runs itself
Platforms: 3 of 3
Advisories: None known

0.2.0 needs doze 0.2.0 or newer: its signed index entry carries doze: 0.2.0. An older doze skips it.

Release notes

View on GitHub

No notes for this release.

Since 0.1.1 (18 Jul 2026). Upgrading from an older release: doze modules upgrade aws. Your engine pins and data stay as they are.

Artifacts

One signed archive per platform. Files live on GitHub; the registry lists them and signs their checksums.

Platform	File (downloads from GitHub)	SHA-256	Signature (ed25519)
macOS arm64 aarch64-apple-darwin	aws-plugin-0.2.0-aarch64-apple-darwin.tar.gz	`3cad5bd89b6b89ac8136f01a885415f557d3d8835e883c26a45f59fafcdfa8b8`	`W4ARDG5V…JNBg==`
Linux arm64 aarch64-unknown-linux-gnu	aws-plugin-0.2.0-aarch64-unknown-linux-gnu.tar.gz	`161e19963120b98ce77bbef48aa2392bd1e518b0220e09def2bce1c6860c989c`	`HptVs6Vz…p6Aw==`
Linux x86_64 x86_64-unknown-linux-gnu	aws-plugin-0.2.0-x86_64-unknown-linux-gnu.tar.gz	`2dbbf9bfb13c304d5ef46ad93bf7043310e03b7f427a6fe61fc105bbed3476a1`	`Ock1sVJb…07Cg==`

Every file is under https://github.com/doze-dev/doze-aws/releases/download/aws/. Intel Macs and Windows have no build; WSL2 uses the Linux x86_64 file.

Signing

The index is signed as a whole, and each archive is signed. doze checks both before anything runs, and refuses a module whose checksum or signature doesn't match.

Key: Nu5y8mbj…Wjw=
Where the key lives: Compiled into doze. doze never fetches or trusts a key on first use.
Namespace: doze
Publisher: doze-dev Official
Index signature: doDTxi7C…Bw==
What is signed: Each archive: its lowercase-hex SHA-256. The index: module, namespace, releases and channels as canonical JSON.
Not yet signed: The doze (oldest doze) field sits beside the signed part today. new The design moves it inside.

How signing works

Verify it yourself

[planned: doze modules verify] Today doze runs these checks itself on every download. The same checks by hand, for macOS arm64. Needs OpenSSL 3: the openssl that ships with macOS has no ed25519 (brew install openssl@3).

Checksum, then signature

# 1. download and hash; compare with the table above
$ curl -LO https://github.com/doze-dev/doze-aws/releases/download/aws/aws-plugin-0.2.0-aarch64-apple-darwin.tar.gz
$ shasum -a 256 aws-plugin-0.2.0-aarch64-apple-darwin.tar.gz
3cad5bd89b6b89ac8136f01a885415f557d3d8835e883c26a45f59fafcdfa8b8  aws-plugin-0.2.0-aarch64-apple-darwin.tar.gz

# 2. the signature is over that hex string, with doze's public key
$ printf %s 3cad5bd89b6b89ac8136f01a885415f557d3d8835e883c26a45f59fafcdfa8b8 > digest.txt
$ echo 'W4ARDG5VC6fcUYaagZQVVRivP7gEUu4U3wUKMrtlGVf14f0I2ntB3PcfvhJgE6wDqZCYr+otLm6LaH8KNlJNBg==' | base64 -d > sig.bin
$ (printf '\x30\x2a\x30\x05\x06\x03\x2b\x65\x70\x03\x21\x00'; echo 'Nu5y8mbjYv7XEtNFBXwPVl+C8SBteVApIROefBwGWjw=' | base64 -d) > doze-key.der
$ openssl pkeyutl -verify -pubin -keyform DER -inkey doze-key.der -rawin -in digest.txt -sigfile sig.bin
Signature Verified Successfully

What doze.lock records for 0.2.0

A project pinned to 0.2.0 carries this entry. Every platform's checksum goes in, so a teammate on Linux verifies against the same pin you made on a Mac. Pinned and cached means no network at all.

doze.lock

modules:
    doze/aws:
        version: 0.2.0
        protocol: 1
        hashes:
            aarch64-apple-darwin: sha256:3cad5bd89b6b89ac8136f01a885415f557d3d8835e883c26a45f59fafcdfa8b8
            aarch64-unknown-linux-gnu: sha256:161e19963120b98ce77bbef48aa2392bd1e518b0220e09def2bce1c6860c989c
            x86_64-unknown-linux-gnu: sha256:2dbbf9bfb13c304d5ef46ad93bf7043310e03b7f427a6fe61fc105bbed3476a1
        doze: 0.2.0