# 验证 github.com/foo/bar@v1.2.3: 校验和不匹配：下载的哈希 (h1:abc123) != 期望的哈希 (h1:def456)

- **ID:** `go/checksum-mismatch-download`
- **领域:** go
- **类别:** data_error
- **验证级别:** ai_generated
- **修复率:** 80%

## 根因

下载的模块内容与 go.sum 中记录的校验和不匹配，可能是下载损坏或代理被篡改。

## 版本兼容性

| 版本 | 状态 | 引入 | 弃用 |
|------|------|------|------|
| 1.11 | active | — | — |
| 1.17 | active | — | — |
| 1.22 | active | — | — |

## 解决方案

1. **** (70% 成功率)
   ```
   go mod download github.com/foo/bar@v1.2.3 && go mod tidy
   ```
2. **** (40% 成功率)
   ```
   GONOSUMDB=github.com/foo/bar go mod download
   ```

## 无效尝试

- **** — If the proxy is serving corrupted data, re-downloading will produce the same mismatch. (50% 失败率)
- **** — Go will still verify checksums unless you use GONOSUMCHECK (deprecated) or GONOSUMDB; this may hide security issues. (60% 失败率)