Comment by thesnarkitecht

No worries, thanks for checking. If anyone wants to verify a download: hashes are in SHA256SUMS on the release, and the installers now have GitHub build attestations (gh attestation verify <file> --repo thesnarkitecht/rembrandt).