Second, and more cleverly: he implemented a hash verification check on nozzle.js. The exact implementation could have been Subresource Integrity (SRI), a custom self-hashing routine, or a server-side nonce system, but the effect was the same. When the browser (or the application itself) loaded the script, it compared the modified file against a canonical hash and if it did not pass the check, the player would never initialise.
Tony Jolliffe BBC
，这一点在搜狗输入法2026中也有详细论述
�@���s�v���b�g�t�H�[�����^�c����Engine�ŃJ�X�^�}�[�G�N�X�y���G���X�����уI�y���[�V�������S�������f���g���E�T�����@�b�W�����i�o�C�X�v���W�f���g�j�́u���Ђ�AI�c�[���ɂ��Č����ۂɁw�Ȃ�����AI���g���̂��x�Ƃ����w�i���`���邱�Ƃ��ƂĂ����ɂ��Ă����v�ƌ������B���Ђ�Salesforce�ƒ��N�ɂ킽����AI�����ŋ��Ƃ��Ă����AAgentforce�̃v���b�g�t�H�[���̏����I�Ȍڋq�̂�����1�Ђł������i��8�j�B�����������s���������}�������ƕ��������������炱���AAI���������؎����iPoC�j�Ŏ~�܂��������A�{�i���p�ɐi�߂��B
A standardized self-contained executable artifact