Every release gets its own prefix and never moves. Old builds resolve until you retire them.
Each file ships a sha384 digest for an integrity attribute.
Uploads propagate before CI finishes; the first hit anywhere is cached.
Certificates issued and rotated for you over HTTP/2.
<script type="module"> import app from "https://cdnwake.org/v/trail/3.2.0/trail.min.js"; </script>