Three useful identifiers
A checksum is not a Git commit. A branch can move. A version name alone does not establish that installed driver bytes match adopted Git source. Keep all three forms of evidence when adopting a release.
Download the complete set
The 0.1.0a3 release page provides the wheel, matching source archive, public provenance, andSHA256SUMS. Installation describes verification before use.
The GitHub release body confirms publication. Some files in the pinned distribution describe the earlier candidate-preparation stage. Those files are historical snapshots; their preparation-time wording does not override the later published release record. Provenance assets retain their reviewed preparation-time flags.
Different components can have different releases
The repository also has a separately namedsyslog-onboarding-v0.1.0 release. It is not a newer version of the PeopleBot Python framework. Choose a tag by component and purpose instead of assuming the most recently listed release is the framework installer.