Ensure downloads are correct via checksums (SHA512 preferred, MD5 fallback)