---
url: /relyagent-whmcs/features/file-integrity.md
description: >-
  Relyagent checks its deployed files against a signed baseline to catch
  tampering or mismatches, and Auto-Sync can repair them for you — so you always
  know the module on disk is the module you installed.
---

# File integrity & sync

Relyagent validates its deployed codebase against an HMAC-signed baseline to ensure file integrity, preventing silent modifications, corrupted uploads, and unauthorized tampering.

## What integrity checking does for you

Relyagent validates files against an **HMAC-SHA256 baseline** on admin access, flagging missing or modified files on **Settings → Sync**:

* **Everything In Sync:** confirms all deployed files match the signed baseline (*"All deployed files match the HMAC-signed baseline."*).
* **Sync Required:** alerts when on-disk files differ from the baseline.

Integrity checking catches discrepancies immediately following manual updates, incomplete file uploads, or environment changes.

## Auto-Sync and running a sync

* **Auto-Sync:** automatically re-deploys baseline files upon admin page load when a mismatch occurs.
* **Run sync manually:** triggers immediate file redeployment via **Settings → Sync** (*"Sync completed successfully."*).
* **Sync status:** displays real-time alignment with the HMAC baseline.

## When a sync is needed

You'll typically want to run a sync (or rely on Auto-Sync) after:

* a **manual update**, where you replaced the module files yourself and want the deployed hook
  files brought back in line, or
* any time the **Sync Required** banner appears, meaning a deployed file no longer matches the
  signed baseline.

::: tip
If you prefer not to think about this, turn on **Auto-Sync** and let Relyagent keep its files in
line for you. Either way, the Sync tab always shows you the current status.
:::

For the broader picture of how Relyagent protects your install, see
[Security](/relyagent-whmcs/features/security).