diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 813312d..62c7703 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -57,15 +57,15 @@ jobs:
           cp "$BINARY" kshield
           tar -czf "$TARBALL" kshield
           rm kshield
-          sha256sum "$TARBALL" >> checksums.txt 2>/dev/null \
-            || shasum -a 256 "$TARBALL" >> checksums.txt
+          sha256sum "$TARBALL" >> checksums-${{ matrix.target }}.txt 2>/dev/null \
+            || shasum -a 256 "$TARBALL" >> checksums-${{ matrix.target }}.txt
 
       - uses: actions/upload-artifact@v4
         with:
           name: binary-${{ matrix.target }}
           path: |
             kshield-${{ matrix.target }}.tar.gz
-            checksums.txt
+            checksums-${{ matrix.target }}.txt
 
   # ── Package the Python backend ───────────────────────────────────────────────
   package-backend:
@@ -107,7 +107,7 @@ jobs:
 
       - name: Merge checksums
         run: |
-          cat dist/checksums.txt | sort -u > checksums.txt
+          cat dist/checksums.txt dist/checksums-*.txt | sort -u > checksums.txt
           cat checksums.txt
 
       - name: Update Homebrew formula checksums
diff --git a/homebrew/kshield.rb b/homebrew/kshield.rb
index 2ff0fed..89032f5 100644
--- a/homebrew/kshield.rb
+++ b/homebrew/kshield.rb
@@ -17,10 +17,10 @@ class Kshield < Formula
   on_linux do
     if Hardware::CPU.arm?
       url "https://github.com/YTT-Global/kshield/releases/download/v#{version}/kshield-aarch64-unknown-linux-gnu.tar.gz"
-      sha256 "849c32d1b1d873b1bb182f54550bbc40400db46f15505b0c4bb34fa6475733d3"
+      sha256 "REPLACE_AFTER_LINUX_ARM64_BUILD"
     else
       url "https://github.com/YTT-Global/kshield/releases/download/v#{version}/kshield-x86_64-unknown-linux-gnu.tar.gz"
-      sha256 "7e4234745e19033709af9a175670dfd796e0e7cfbe6de0f6f9f8b3bdccabde85"
+      sha256 "REPLACE_AFTER_LINUX_X86_BUILD"
     end
   end