Zcash Project Hardening via the Permaweb & ArNS

(These techniques could apply to any project but Zcash protects your anonymity as you deploy the defenses suggested herein.) Any relevant comments, questions, or criticism are welcome. Ground rules: DYOR, use onion routing and onion websites whenever possible, and assume that DNS is sometimes lying to you, even about this forum. The whole point here is to harden ourselves against Web2 vulnerabilities, first and foremost Github, which is absurdly one of humanity’s most centralized dependencies. Even multiple data center redundancy isn’t robust enough in the era of agentic attacks. Everyone here depends on the integrity of binary executables (such as APK packages for Android apps). Nobody wants to trust an app store, let alone one tied to one’s banking details. It’s therefore preferable to sideload an APK with a robustly verifiable hash, at least for those who know what they’re doing. Some of us also depend on source code. These days, it’s not hard to imagine an attack in which an agent swarm steals, say, your Gitlab credentials and uses them to pu