From af87e67a871058589d32a6b6f8426f18655e5b05 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cristian=20Cezar=20Mois=C3=A9s?= <sac@securityops.co>
Date: Mon, 31 Aug 2026 20:55:32 -0300
Subject: [PATCH] docs: finalize 5.2.8 checksum record

---
 CHANGELOG.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b36e681..962b156 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -49,8 +49,8 @@ unchanged.
   ABI forward unchanged. These are implementation and test-integration
   corrections, not a wire-format or API change.
 - Realign current code, package, workflow, artifact, and documentation
-  references to 5.2.8. AUR/Homebrew SHA-256 and Guix content pins remain
-  pending until the final reproducible archive is generated.
+  references to 5.2.8, and pin the AUR/Homebrew SHA-256 and Guix content hash
+  to the final reproducible source archive before tagging.
 - Require fresh exact-`v5.2.8` source, checksum, hosted CI, native-platform,
   package, OBS, and promotion evidence. This entry does not claim those gates
   passed, and no v5.2.7 result transfers automatically.