Publishing a hash so others can verify a public file

Compute a digest from the exact final file people will download. Publish the filename, size, hash algorithm, full digest, and release version together through a trusted channel.

A recipient can hash their downloaded copy and compare the values to detect a mismatch. The digest does not encrypt the file or prove the source by itself; if both the file and displayed hash can be changed by an attacker, the comparison offers limited protection. Recompute after every file change.

Which release file does the hash identify?