Binary provenance for the current validated Desktop release is maintained as part of the Desktop release package. The Windows release process records the bundled engine provenance and validates the pinned iPerf3 package before it is included in the installer. SHA-256 values for published installers are available through the account portal and release records.