it looks like the user, metroplex is asking the devs to post the hashes associated to the app versions so a user can verify the hashes to the maintainers pgp/nostr keys using the application appverifier (I recommend).

maybe im missing something?