Hi, jgart skribis: > I've run into this issue before that no matter what I do to try to get > guix to detect the faulty hash it happily builds the package in question > successfully without failing. Since ‘origin’ has a ‘file-name’ field that is a function of the version string, Guix will try to redownload the source if you change the version string, and at that point it should fail with a wrong hash error, as it did for me. Let me know if you observe something different. HTH, Ludo’.