From c51ea0c29d29f528fe8e38704bbbc7b693a15f18 Mon Sep 17 00:00:00 2001
From: Julian Sommer <115516918+juliansommer@users.noreply.github.com>
Date: Thu, 2 Apr 2026 09:56:57 +1000
Subject: [PATCH] fix: make download checksum verification mandatory

---
 scripts/setup.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/scripts/setup.sh b/scripts/setup.sh
index 04aea59e1..28815acce 100755
--- a/scripts/setup.sh
+++ b/scripts/setup.sh
@@ -196,7 +196,8 @@ download_spinifex() {
         fi
         info "Checksum verified"
     else
-        warn "Checksum not available, skipping verification"
+        rm -rf "$SPINIFEX_TMPDIR"
+        fatal "Checksum not available at $CHECKSUM_URL. Cannot verify download integrity."
     fi
 
     # Extract